OfficialVerified

GitHub MCP Server

GitHub repositories, issues, pull requests, and CI/CD workflows accessed via AI agents.

Data last scanned yesterday · Reviewed 2 months ago

53 2 dangerous tools88 tools★ 31,734GoMIT

Overview

This server provides a direct bridge between AI tools and the GitHub platform. Developers can utilize natural language to browse repositories, analyze commits, manage issue tracking, and interact with pull requests. It supports advanced workflows, including CI/CD monitoring through GitHub Actions and the examination of security and Dependabot alerts. The server is available in both a remote hosted version, which is recommended for quick setup in VS Code or similar MCP hosts, and a local version. It is designed to scale from simple code queries to complex, multi-step agentic tasks that require deep repository context.

Our verdict

This server carries a high-risk security score of 53/100, primarily due to the lack of an authentication method and the absence of a read-only mode, which grants full write access upon installation. Because anyone with the configuration can potentially interact with your repositories and the server currently lacks OAuth support, it should be restricted to trusted, private development environments and should not be used where granular permission controls are required.

Maintained directly by the official GitHub organization
Zero direct dependencies reduce supply-chain surface area
Active development with commits occurring daily
Broad community support evidenced by over 31,000 stars

Lacks any authentication method for access control
Operates without a read-only mode, providing full write access
No OAuth support detected for managing user permissions

Tools

Tool	Description	Risk
actions_get	Get details of GitHub Actions resources (workflows, workflow runs, jobs, and artifacts)	low
actions_list	List GitHub Actions workflows in a repository	low
actions_run_trigger	Trigger GitHub Actions workflow actions	medium
get_job_logs	Get GitHub Actions workflow job logs	low
get_code_quality_finding	Get code quality finding	low
get_code_scanning_alert	Get code scanning alert	low
list_code_scanning_alerts	List code scanning alerts	low
get_me	Get my user profile	low
get_team_members	Get team members	low
get_teams	Get teams	low

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›What are the core prerequisites for using the remote GitHub MCP Server?

You need a compatible MCP host that supports remote servers, such as VS Code 1.101+, Claude Desktop, Cursor, or Windsurf, and any applicable policies must be enabled.

›Can I use the server if my MCP host does not support remote MCP servers?

Yes, you can use the local version of the GitHub MCP Server instead.

›Does the server support authentication methods other than OAuth?

Yes, you can configure the server using a GitHub Personal Access Token (PAT) by adding the required headers and input definitions to your host configuration.

›Are there specific version requirements for using the remote GitHub MCP server in VS Code?

Yes, you must be using VS Code version 1.101 or later to support remote MCP and OAuth functionality.