GitHub MCP Server Ships Secret Scanning GA — AI Coding Agents Can Now Detect Exposed Secrets Before Commit

GitHub Blog·medium signal

GitHub's official MCP server now includes generally available secret scanning, announced May 5, 2026. When using MCP-compatible AI coding agents or IDEs (GitHub Copilot CLI, VS Code), developers can scan code for exposed secrets before committing or opening a pull request. The integration turns security scanning from a post-push CI check into a pre-commit agent capability, catching leaked API keys, tokens, and credentials in the developer's flow rather than after they've hit the remote.