{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-16T02:40:06.177Z", "record_id": "VXI-EXT-TOOL-TRUST-GITGUARDIAN-01-v1", "record_kind": "external_reference", "title": "GitGuardian MCP: Scanning, identity and planned-capability limits", "system": "GitGuardian MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does GitGuardian MCP automatically revoke secrets or fix code after detecting an incident?", "near_questions": [ "Can GitGuardian MCP revoke a detected secret?", "Which SecOps actions are only planned?", "Does the Developer profile create honeytokens?", "What is the default authentication flow?", "Can a non-interactive client use a personal token?", "Where is scanning performed?", "Has VAREXIS tested whether secret values reach the model?", "Which incident permissions should a buyer request?", "Does guided remediation mean automatic code repair?", "What changes when a beta tool becomes unavailable?", "When should an agent stop before remediation?", "Can I save the Developer-profile review?" ], "supported_claims": [ { "claim": "The Developer profile documents scanning, incident review and guided remediation, with limited honeytoken creation. Broader SecOps actions are described as planned, not established here as available. OAuth and personal-token modes have different credential handling. Publisher statements about secret handling are documentation evidence, not an independent execution test.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "The Developer profile documents scanning, incident review and guided remediation, with limited honeytoken creation. Broader SecOps actions are described as planned, not established here as available. OAuth and personal-token modes have different credential handling. Publisher statements about secret handling are documentation evidence, not an independent execution test.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-AZURE-DEVOPS-01-v1", "VXI-EXT-TOOL-TRUST-BIGQUERY-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "GitGuardian MCP developer profile", "source_url": "https://docs.gitguardian.com/ggmcp-docs/overview", "checked_on": "2026-10-16", "candidate_record_id": "VXI-EXT-TOOL-TRUST-GITGUARDIAN-01-v1", "candidate_record_sha256": "0940a0bfed0d7e77577ea49d5d4cff95129cc2b671376ef2454e8d7c7e34f8b8", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "The Developer profile documents scanning, incident review and guided remediation, with limited honeytoken creation. Broader SecOps actions are described as planned, not established here as available. OAuth and personal-token modes have different credential handling. Publisher statements about secret handling are documentation evidence, not an independent execution test.", "required_buyer_context": "Developer profile version, identity scopes, client storage, incident access and remediation authority.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "GitGuardian MCP", "variant": "Documented beta Developer profile; planned SecOps features excluded" }, "review_status": "documentation_review_only", "checked_on": "2026-10-16", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "GitGuardian publishes the beta Developer MCP profile.", "source_ids": [ "gitguardian", "gitguardian-auth", "gitguardian-security" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Support secret scanning, incident understanding and guided remediation.", "source_ids": [ "gitguardian", "gitguardian-auth", "gitguardian-security" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Authorised incident context and scanning results.", "source_ids": [ "gitguardian", "gitguardian-auth", "gitguardian-security" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Limited honeytoken creation is described; planned SecOps revocation and code fixing are not treated as live.", "source_ids": [ "gitguardian", "gitguardian-auth", "gitguardian-security" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "OAuth is the documented default; personal access tokens support non-interactive use.", "source_ids": [ "gitguardian", "gitguardian-auth", "gitguardian-security" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "The selected GitGuardian identity and its API permissions constrain access.", "source_ids": [ "gitguardian", "gitguardian-auth", "gitguardian-security" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Scanning uses GitGuardian APIs; its claim that secret values are withheld from the model remains publisher evidence.", "source_ids": [ "gitguardian", "gitguardian-auth", "gitguardian-security" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Expired credentials, unavailable beta functions and mistaken assumptions about automatic remediation can interrupt work.", "source_ids": [ "gitguardian", "gitguardian-auth", "gitguardian-security" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Actual scopes, client logs and secret-handling behaviour have not been tested.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Do not promise revocation, code repair or secret non-disclosure without the corresponding current evidence and authority.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "gitguardian", "url": "https://docs.gitguardian.com/ggmcp-docs/overview", "final_url": "https://docs.gitguardian.com/ggmcp-docs/overview", "title": "GitGuardian MCP developer profile", "checked_on": "2026-10-16", "sha256": "c64c3ec5d9eec35f9aa9c6cb87ed4ebedc2ba25db9e988bda2bb27922eea93d8", "bytes": 47084 }, { "source_id": "gitguardian-auth", "url": "https://docs.gitguardian.com/ggmcp-docs/authentication", "final_url": "https://docs.gitguardian.com/ggmcp-docs/authentication", "title": "GitGuardian MCP authentication", "checked_on": "2026-10-16", "sha256": "3965f694e04042daf8e93d8889f75a2b7ce2b65007ceb44278b399c0e6573278", "bytes": 45220 }, { "source_id": "gitguardian-security", "url": "https://docs.gitguardian.com/ggmcp-docs/security", "final_url": "https://docs.gitguardian.com/ggmcp-docs/security", "title": "GitGuardian MCP scanning and redaction", "checked_on": "2026-10-16", "sha256": "36fbd0a056dada21c8c3661bde3771e27027284bb423e5cfecfa1930a7481a72", "bytes": 44776 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve which remediation claims are supported, planned or still untested.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Beta release status, secret-handling documentation and permission scopes." }, "change_history": [ { "version": 1, "date": "2026-10-16", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#gitguardian-developer-mcp-secret-handling", "machine_readable_record": "/varexis-index/records/gitguardian-developer-mcp-secret-handling.json" }