GitBook Reports AI Agent Attack That Exposed Infrastructure Credentials

GitBook says an attack involving AI agents compromised its infrastructure credentials on November 2.
The attacker may have accessed integration tokens, Git Sync secrets, API tokens, and questions submitted by visitors to GitBook Assistant.
In response, GitBook revoked all customer API tokens and replaced its infrastructure credentials and secrets.
Users should:
- Rotate GitBook API tokens and any connected third-party tokens or secrets.
- Re-authenticate the GitBook MCP server.
The app, API, and published documentation are back online, although some services remain degraded. GitBook also said it found no evidence that content had been modified.