August 2026 - Gecko Security

APIScanningIntegrations

API

Outbound webhooks: Manage endpoints under Settings → Webhooks on Pro and Enterprise. Subscribe to scan.completed, scan.failed, vulnerability.created, vulnerability.status_changed, and vulnerability.severity_changed, send a test event, rotate the signing secret, and redeliver from Recent Deliveries. See Webhook events.
GitLab token API: GET /integrations/gitlab returns the token’s expiry date, and PATCH /integrations/gitlab swaps in a new token for rotation scripts. See Token expiry and rotation.
Release versions: Releases carry a customer-facing version (1.1, 1.2, …) pinned to one SHA and image digest. GET /releases/{channel}/{version} resolves it to an image_ref.

Scan scope: Per-repository path rules either Skip entirely or use a path as Context only. Manage them over MCP too. See Scanner settings.

GitLab token reminders: Team admins get an email 7 days before the GitLab token expires, and again when it expires or is revoked.
Multiple GitHub App installations: Connect more than one.
Group filters: Filter repositories by GitHub team or organization and by GitLab group.
Integration health: A banner warns you when an integration needs attention.
Select all: Selects every matching row, not only the visible page.

GitLab sync: Syncs every repository past the first 2,000, with clear errors when it can’t.
Scan page: Loads for scans without a branch.

Integrations

Wiz: Connect under Settings → Integrations → Wiz. Enable Wiz context brings Secrets, IaC, SCA, SAST, and Runtime signals into analysis, scoped to the Wiz projects you pick. Push findings to Wiz sends findings above a Minimum severity. Findings Wiz also flags show Corroborated by Wiz.

APIAI toolsFindingsAccess

MCP server: Connect Claude, Claude Code, ChatGPT, Codex, and other MCP clients to https://app.gecko.security/api/mcp with OAuth or an API key. Scopes are capped by your role. Manage connections under Settings → Integrations → Agents. See Connect AI tools.

Redesigned v1 API: A consistent response envelope, cursor pagination, rate limits, idempotency keys, and request IDs, plus endpoints for triage, repository settings, and scan schedules. See the API reference.
OpenAPI spec: Live at /api/v1/openapi.json, with a machine-readable changelog at /api/v1/changelog.
API keys: Visible to the whole team with owner attribution and usage logging, and sent as Authorization: Bearer.

Connected accounts: Settings → Authentication shows your GitHub, GitLab, Slack, Linear, and Jira identities, with suggested matches to confirm or remove.
Require SSO without sign-outs: Turning on SSO-required keeps existing sessions signed in.