Home / Servers / GitHub API / secret_scanning_list_alerts_for_repo
List secret scanning alerts for a repository
An MCP tool from the GitHub API server, hosted on mcp.hjlabs.in.
List secret scanning alerts for a repository Lists secret scanning alerts for an eligible repository, from newest to oldest. The authenticated user must be an administrator for the repository or for the organization that owns the repository to… [GET /repos/{owner}/{repo}/secret-scanning/alerts]
Name on the gateway: github_api__secret_scanning_list_alerts_for_repo · read-only.
Parameters
| Name | Type | Description |
|---|---|---|
owner required | string | The account owner of the repository. The name is not case… |
repo required | string | The name of the repository without the .git extension. The… |
state | open | resolved | Set to open or resolved to only list secret scanning alerts in a specific state. |
secret_type | string | A comma-separated list of secret types to return. All default secret patterns… |
exclude_secret_types | string | A comma-separated list of secret types to exclude from the results. All… |
exclude_providers | string | A comma-separated list of provider slugs to exclude from the results. Provider… |
providers | string | A comma-separated list of provider slugs to filter by. Provider slugs use… |
resolution | string | A comma-separated list of resolutions. Only secret scanning alerts with one of… |
assignee | string | Filters alerts by assignee. Use * to get all assigned alerts, none to get all… |
sort | created | updated | The property to sort the results by. created means when the alert was created.… |
direction | asc | desc | The direction to sort the results by. |
page | integer | The page number of the results to fetch. For more information, see "Using… |
per_page | integer | The number of results per page (max 100). For more information, see "Using… |
before | string | A cursor, as given in the Link header. If specified, the query only searches… |
after | string | A cursor, as given in the Link header. If specified, the query only searches… |
validity | string | A comma-separated list of validities that, when present, will return alerts… |
is_publicly_leaked | boolean | A boolean value representing whether or not to filter alerts by the… |
is_multi_repo | boolean | A boolean value representing whether or not to filter alerts by the multi-repo… |
hide_secret | boolean | A boolean value representing whether or not to hide literal secrets in the… |
is_bypassed | boolean | A boolean value (true or false) indicating whether to filter alerts by their… |
included_metadata | string | A comma-separated list of metadata fields to filter alerts by. Only alerts… |
owner_email_hash | string | Filters alerts to only those whose attached owner_email metadata field matches… |
How to call it
Through the Smart Gateway, any client can run it by name with call_tool, or let the gateway find it with search_tools:
{
"name": "github_api__secret_scanning_list_alerts_for_repo",
"arguments": {
"owner": "…",
"repo": "…"
}
}Or connect the GitHub API server directly, which lists 1,221 tools including this one:
claude mcp add --transport http hj-github-api https://mcp.hjlabs.in/mcp/github-api \
--header "Authorization: Bearer YOUR_API_KEY"Try asking
Use the list secret scanning alerts for a repository tool with owner set to ….