GitHub MCP Server
GitHub repositories, issues, pull requests, and CI/CD workflows accessed via AI agents.
Data last scanned today · Reviewed yesterday
Overview
This server provides a direct bridge between AI tools and the GitHub platform. Developers can utilize natural language to browse repositories, analyze commits, manage issue tracking, and interact with pull requests. It supports advanced workflows, including CI/CD monitoring through GitHub Actions and the examination of security and Dependabot alerts. The server is available in both a remote hosted version, which is recommended for quick setup in VS Code or similar MCP hosts, and a local version. It is designed to scale from simple code queries to complex, multi-step agentic tasks that require deep repository context.
Our verdict
This server carries a high-risk security score of 53/100, primarily due to the lack of an authentication method and the absence of a read-only mode, which grants full write access upon installation. Because anyone with the configuration can potentially interact with your repositories and the server currently lacks OAuth support, it should be restricted to trusted, private development environments and should not be used where granular permission controls are required.
- Maintained directly by the official GitHub organization
- Zero direct dependencies reduce supply-chain surface area
- Active development with commits occurring daily
- Broad community support evidenced by over 31,000 stars
- Lacks any authentication method for access control
- Operates without a read-only mode, providing full write access
- No OAuth support detected for managing user permissions
Tools
| Tool | Description | Risk |
|---|---|---|
| actions_get | Get details of GitHub Actions resources (workflows, workflow runs, jobs, and artifacts) | low |
| actions_list | List GitHub Actions workflows in a repository | low |
| actions_run_trigger | Trigger GitHub Actions workflow actions | medium |
| get_job_logs | Get GitHub Actions workflow job logs | low |
| get_code_quality_finding | Get code quality finding | low |
| get_code_scanning_alert | Get code scanning alert | low |
| list_code_scanning_alerts | List code scanning alerts | low |
| get_me | Get my user profile | low |
| get_team_members | Get team members | low |
| get_teams | Get teams | low |
| assign_copilot_to_issue | Assign Copilot to issue | medium |
| request_copilot_review | Request Copilot review | medium |
| get_dependabot_alert | Get dependabot alert | low |
| list_dependabot_alerts | List dependabot alerts | low |
| discussion_comment_write | Manage discussion comments | medium |
| get_discussion | Get discussion | low |
| get_discussion_comments | Get discussion comments | low |
| list_discussion_categories | List discussion categories | low |
| list_discussions | List discussions | low |
| create_gist | Create Gist | medium |
| get_gist | Get Gist Content | low |
| list_gists | List Gists | low |
| update_gist | Update Gist | medium |
| get_repository_tree | Get repository tree | low |
| add_issue_comment | Add comment to issue or pull request | medium |
| get_label | Get a specific label from a repository | low |
| issue_read | Get issue details | low |
| issue_write | Create or update issue/pull request | medium |
| list_issue_fields | List issue fields | low |
| list_issue_types | List available issue types | low |
| list_issues | List issues | low |
| search_issues | Search issues | low |
| sub_issue_write | Change sub-issue | medium |
| label_write | Write operations on repository labels | high |
| list_label | List labels from a repository | low |
| dismiss_notification | Dismiss notification | medium |
| get_notification_details | Get notification details | low |
| list_notifications | List notifications | low |
| manage_notification_subscription | Manage notification subscription | medium |
| manage_repository_notification_subscription | Manage repository notification subscription | medium |
| mark_all_notifications_read | Mark all notifications as read | medium |
| search_orgs | Search organizations | low |
| projects_get | Get details of GitHub Projects resources | low |
| projects_list | List GitHub Projects resources | low |
| projects_write | Manage GitHub Projects | medium |
| add_comment_to_pending_review | Add review comment to the requester's latest pending pull request review | medium |
| add_reply_to_pull_request_comment | Add reply to pull request comment | medium |
| create_pull_request | Open new pull request | medium |
| list_pull_requests | List pull requests | low |
| merge_pull_request | Merge pull request | medium |
| pull_request_read | Get details for a single pull request | low |
| pull_request_review_write | Write operations (create, submit, delete) on pull request reviews | medium |
| search_pull_requests | Search pull requests | low |
| update_pull_request | Edit pull request | medium |
| update_pull_request_branch | Update pull request branch | medium |
| create_branch | Create branch | medium |
| create_or_update_file | Create or update file | medium |
| create_repository | Create repository | medium |
| delete_file | Delete file | high |
| fork_repository | Fork repository | medium |
| get_commit | Get commit details | low |
| get_file_contents | Get file or directory contents | low |
| get_latest_release | Get latest release | low |
| get_release_by_tag | Get a release by tag name | low |
| get_tag | Get tag details | low |
| list_branches | List branches | low |
| list_commits | List commits | low |
| list_releases | List releases | low |
| list_repository_collaborators | List repository collaborators | low |
| list_tags | List tags | low |
| push_files | Push files to repository | medium |
| search_code | Search code | low |
| search_commits | Search commits | low |
| search_repositories | Search repositories | low |
| get_secret_scanning_alert | Get secret scanning alert | low |
| list_secret_scanning_alerts | List secret scanning alerts | low |
| get_global_security_advisory | Get a global security advisory | low |
| list_global_security_advisories | List global security advisories | low |
| list_org_repository_security_advisories | List org repository security advisories | low |
| list_repository_security_advisories | List repository security advisories | low |
| list_starred_repositories | List starred repositories | low |
| star_repository | Star repository | medium |
| unstar_repository | Unstar repository | medium |
| search_users | Search users | low |
| create_pull_request_with_copilot | Perform task with GitHub Copilot coding agent | medium |
| get_copilot_space | Get Copilot Space | low |
| list_copilot_spaces | List Copilot Spaces | low |
| github_support_docs_search | Retrieve documentation relevant to answer GitHub product and support questions. Support topics include: GitHub Actions Workflows, Authentication, GitHub Support Inquiries, Pull Request Practices, Repository Maintenance, GitHub Pages, GitHub Packages, GitHub Discussions, Copilot Spaces | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Alternatives
Badge
Maintain this server? Add the live badge to your README.