MCP/GitHub MCP Server

GitHub MCP Server

Official GitHub MCP Server connecting AI tools directly to GitHub's platform to manage repos, issues, pull requests, Actions workflows, and code.

developer-tools•Git, CI/CD & Code Intelligence

GitHub33.8k

License:MIT

OFFICIAL

@GitHub

About this Server

The official GitHub Model Context Protocol server connects AI agents, assistants, and chatbots directly to GitHub's platform. This gives AI tools the ability to read repositories and code files, search commit histories, manage issues and pull requests, trigger GitHub Actions workflows, inspect CI/CD logs, review Dependabot and code scanning alerts, and automate entire engineering workflows through natural language. Built with enterprise-grade security including Read-Only Mode and Lockdown Mode to protect against untrusted repository prompt injection.

Real-time Interaction

Direct low-latency RPC protocol communication with structured JSON schemas.

Scoped Sandboxing

Restricted capability bounds to prevent accidental modifications or leakage.

Security & Best Practices

Read-Only Mode: Run with --read-only or GITHUB_READ_ONLY=1 to restrict tool access solely to non-mutating query tools, preventing accidental code modification, deletion, or PR updates.

Lockdown Mode: Protects against prompt injection by verifying that authors of issues, PRs, comments, and commits have push access to public repositories before surfacing content to LLMs.

Least-Privilege Token Scoping: Use fine-grained Personal Access Tokens or challenge scopes (repo, workflow, security_events, gist, read:org) to enforce strict minimal permissions.

Audited Commit History: All file updates, branch creations, and repository mutations produce standard Git commit SHAs, author attribution, and traceable audit logs.

When to Use (and When Not To)

Best For

•Automating GitHub workflows: triaging issues, reviewing PR diffs, and generating structured pull request summaries
•Querying repository structure, inspecting file contents, and searching code or commit history directly from your editor
•Monitoring GitHub Actions CI/CD workflows, fetching failed job logs, and triggering manual dispatch runs
•Auditing security vulnerabilities across Dependabot alerts, code scanning findings, and secret scanning alerts

Not For / Limitations

•Untracked local file edits and uncommitted scratch files (use local file system or workspace tools instead)
•High-frequency bulk scraping of massive repositories exceeding GitHub REST API rate limits
•High-privilege enterprise administration operations without organization owner approval

Install & Setup

One-line terminal command

terminal command

$claude mcp add --transport http github https://api.githubcopilot.com/mcp/ --header "Authorization: Bearer $GITHUB_TOKEN"

Exposed Tools & Endpoints

52 tools

Functions your AI agent can invoke via this Model Context Protocol server

actions_get• callable tool

Get details of GitHub Actions resources (workflows, workflow runs, jobs, and artifacts).

actions_list• callable tool

List GitHub Actions workflows, workflow runs, jobs, and run artifacts in a repository.

actions_run_trigger• callable tool

Trigger GitHub Actions workflow runs or workflow dispatch events with custom inputs.

get_job_logs• callable tool

Get GitHub Actions workflow job logs with optional failed-only filter and tail lines.

get_code_quality_finding• callable tool

Get code quality finding details for a repository.

get_code_scanning_alert• callable tool

Get code scanning alert details by alert number.

list_code_scanning_alerts• callable tool

List code scanning alerts filtered by severity, state, ref, or tool name.

assign_copilot_to_issue• callable tool

Assign Copilot to an issue with optional custom instructions and base branch.

request_copilot_review• callable tool

Request Copilot review on an open pull request.

assign_copilot_to_issue_with_intent• callable tool

Assign Copilot to an issue with intent, confidence level, and rationale.

get_me• callable tool

Get authenticated user profile details.

get_team_members• callable tool

Get team members for an organization.

get_teams• callable tool

Get teams for a user or organization.

ui_get• callable tool

Get UI data including labels, assignees, milestones, branches, issue fields, and reviewers.

get_dependabot_alert• callable tool

Get Dependabot alert details by alert number.

list_dependabot_alerts• callable tool

List Dependabot alerts filtered by severity and state.

discussion_comment_write• callable tool

Manage discussion comments: add, reply, update, delete, or mark answer.

get_discussion• callable tool

Get discussion details by discussion number.

get_discussion_comments• callable tool

Get comments and nested replies for a discussion.

list_discussion_categories• callable tool

List discussion categories for a repository or organization.

list_discussions• callable tool

List discussions in a repository or organization.

create_gist• callable tool

Create a new public or private single-file Gist.

get_gist• callable tool

Get Gist contents and metadata by Gist ID.

list_gists• callable tool

List Gists for a user or authenticated account.

update_gist• callable tool

Update an existing Gist description or file content.

get_repository_tree• callable tool

Get Git repository file tree, optionally recursive with path filtering.

create_branch• callable tool

Create a new Git branch in a repository from a source branch.

create_or_update_file• callable tool

Create or commit updates to a file in a repository.

create_repository• callable tool

Create a new repository under personal account or organization.

delete_file• callable tool

Delete a file from a repository with a commit message.

delete_repository• callable tool

Delete a repository (requires delete_repo scope).

fork_repository• callable tool

Fork a repository to an organization or authenticated user account.

get_commit• callable tool

Get commit details with optional diff patch and line stats.

get_file_contents• callable tool

Get file or directory contents, metadata, or file downloads.

get_latest_release• callable tool

Get the latest published release of a repository.

get_release_by_tag• callable tool

Get release details by Git release tag name.

get_tag• callable tool

Get Git tag details by tag name.

list_branches• callable tool

List branches in a repository with pagination.

list_commits• callable tool

List commit history with author, date range, path, and SHA filtering.

list_releases• callable tool

List releases for a repository with pagination.

list_repository_collaborators• callable tool

List repository collaborators with affiliation filtering.

list_tags• callable tool

List Git tags for a repository.

push_files• callable tool

Commit and push multiple files in a single atomic commit.

search_code• callable tool

Search code across repositories with advanced qualifiers and regex patterns.

search_commits• callable tool

Search commit messages on default branch by author, date, or query.

search_repositories• callable tool

Search repositories by name, stars, language, topic, and owner.

get_secret_scanning_alert• callable tool

Get secret scanning alert details by alert number.

list_secret_scanning_alerts• callable tool

List secret scanning alerts filtered by resolution, secret type, and state.

get_global_security_advisory• callable tool

Get global security advisory by GHSA ID.

list_global_security_advisories• callable tool

List global security advisories filtered by CVE, ecosystem, CWE, and severity.

list_org_repository_security_advisories• callable tool

List security advisories for an organization.

list_repository_security_advisories• callable tool

List security advisories for a specific repository.