MCP.Market

Github MCP server

by jaimenbell·io.github.jaimenbell/github-mcp·v0.1.1
No reviews yet

MCP server for the GitHub REST API: issues, PRs, repos; read always on, write env-gated.

A85/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A85/100

full report

Adoption
New

0 stars15 downloads/wk

Reviews

Write one

Nobody has reviewed Github yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Github tools (14, 4 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • add_labels

    Add one or more labels to an issue or pull request. Requires GITHUB_MCP_ENABLE_WRITE=1 and GITHUB_TOKEN.

  • comment_on_issuewrite action

    Post a comment on an issue or pull request. Requires GITHUB_MCP_ENABLE_WRITE=1 and GITHUB_TOKEN.

  • create_issuewrite action

    Open a new issue on a repository. Requires GITHUB_MCP_ENABLE_WRITE=1 and GITHUB_TOKEN.

  • create_pr_review_commentwrite action

    Create a review comment on a specific line of a pull request's diff. Requires GITHUB_MCP_ENABLE_WRITE=1 and GITHUB_TOKEN.

  • get_file_content

    Read a UTF-8 text file from a repo at a given path (base64-decoded). Reports binary files rather than decoding them.

  • get_issue

    Fetch a single issue's full detail: title, body, state, labels, comment count.

  • get_pull_request

    Fetch a single pull request's full detail, including merge state.

  • get_repo

    Get metadata for a repository: description, language, stars, forks, open issues, default branch, archived flag, license, last-push time.

  • get_user

    Get a public profile for a GitHub user or organization.

  • list_commits

    List commits on a repo's default branch (or a given ref), newest first.

  • list_issues

    List issues for a repository (pull requests filtered out), most-recently-updated first.

  • list_pull_requests

    List pull requests for a repository, most-recently-updated first.

  • search_repos

    Search public repositories by keyword/qualifiers, sorted by best match.

  • update_issue_statewrite action

    Set an issue's state to 'open' or 'closed'. Requires GITHUB_MCP_ENABLE_WRITE=1 and GITHUB_TOKEN.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • Code scan9 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 43 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Github compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
85/100
higher than 70% of 1,119 Developer tools servers
Tools
14
the typical Developer tools server has 7
Tools that change things
29%
typical: 5%. Fewer write tools means less an agent can break
Downloads a week
15
more than 4% of 430 Developer tools servers with a package

What its tools let an agent do: 9 read · 3 create · 1 change · 1 send or post

Install Github in Claude Code, Cursor or VS Code

claude mcp add github-mcp -- uvx jaimenbell-github-mcp
Add to Cursor

What the publisher says

From the Github repository's README, as published. We do not edit it. Read it on GitHub

github-mcp

A public read+write MCP server over the GitHub REST API, built to the desktop-mcp/rag-mcp/mcp-factory standard (own pyproject, fastmcp server, honest README, real test suite) with env-gated tool groups (write disabled by default). Not the official GitHub MCP server -- see below.

Quickstart (60 seconds)

pip install jaimenbell-github-mcp
// Add to your MCP host config (e.g. Claude Desktop/Code's mcpServers block)
{
  "mcpServers": {
    "github-mcp": {
      "command": "github-mcp"
    }
  }
}

The write tool group (issue/PR mutations) is off by default -- see Env vars below to enable it.

What this is / is not

This is a reference portfolio implementation demonstrating a hardened read+write MCP server pattern over a real external SaaS API (GitHub) -- env-gated tool groups, typed error/rate-limit handling, auth that degrades gracefully, a real test suite. It exists to show, concretely, "I build read/write MCP servers over external APIs" with a link a client can click.

It is NOT the official GitHub MCP server. It does not aim for parity with GitHub's own MCP offering (GraphQL, Actions, webhooks, GitHub Apps are all out of scope -- see below). It started life as a factory-scaffolded read-only demo (mcp-factory's generated/githubreadserver.py) and was hand-hardened into this standalone read+write server -- the scaffold-then-harden path is itself part of the story this repo tells.

Tools (14)

One row per tool -- the two groups below just control default-on/off state, not what exists.

read is always on and works unauthenticated (GitHub's 60 req/hr tier). write is env-gated and OFF by default -- requires GITHUBMCPENABLEWRITE=1 and GITHUBTOKEN.

A disabled write call returns a structured policyrefusal error (never a silent no-op, never a crash). A write call with the group enabled but no token returns a structured authrequired error -- the group gate and the token precondition are checked independently, both before any network call.

Write-safety-off-by-default

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Github: common questions

Is Github MCP server safe?
Yes, by our scan: it is graded A (85/100). Read the Github safety report
How do I install Github?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Github need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Github maintained?
The last commit was 82 days ago (2026-08-12). The latest release is v0.1.1.
What can I use instead of Github?
Servers from other publishers that do the same job: Gk CLI MCP server, Pare Github MCP server and uploads.sh MCP server.
How does Github compare with other Developer tools MCP servers?
safety score 85/100 (higher than 70% of 1,119 Developer tools servers); tools 14 (the typical Developer tools server has 7); tools that change things 29% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Github

Same job from other publishers: the closest match first, then the best rated.

  • Gk CLI
    The GitKraken MCP Server for managing repos, PRs, issues across GitHub, GitLab, Bitbucket and more.
    B
  • Pare Github
    Pare GitHub ג€” Structured GitHub operations (PRs, issues, actions) as typed JSON.
    A
  • uploads.sh
    Host files from coding agents; stage on a branch and attach to GitHub PRs.
    A
  • OctoCounts MCP Server
    Analyze and compare public GitHub repo line counts (SLOC) via OctoCounts, from any MCP client.
    A
  • Sentry
    MCP server for Sentry - error monitoring, issue tracking, and debugging for AI assistants
    A

More from jaimenbell →