GitHub MCP Server

GitHub's official MCP server: code, issues, pull requests, Actions and security alerts straight from the agent

MCP serverEditors’ pickHigh risk

github/github-mcp-server

Install

{
  "servers": {
    "github": {
      "type": "http",
      "url": "https://api.githubcopilot.com/mcp/"
    }
  }
}

Remote server with OAuth login, requires VS Code 1.101 or later.

This is third-party code. Review the repository files before installing.

What it does

The server gives the agent GitHub tools: read files and commit history, search repositories, create and update issues and pull requests. The agent can inspect GitHub Actions runs and dig into build failures, read Dependabot alerts and code scanning results, and work with discussions and notifications. Tools are grouped into toolsets that can be enabled separately. There is a remote version hosted by GitHub and a local Docker version that also covers GitHub Enterprise Server.

Who it is for. For developers and maintainers who run projects on GitHub and want the agent to handle repository chores.

Good fit when

  • You need to analyze a failed workflow and propose a fix
  • You need to triage or close many issues
  • You need to open a pull request and respond to review comments

Not a fit when

  • Your code lives in GitLab, Bitbucket or a self-hosted Gitea
  • Local git and the gh CLI are enough for the agent

Example request

Check why the latest CI run failed on this pull request and suggest a fix

Limitations

The remote server lives at api.githubcopilot.com and needs a host that supports remote MCP and OAuth. The local version needs Docker plus a personal access token or OAuth login. GitHub Enterprise Server is supported only by the local server.

How to disable. Remove the github server from the client's MCP config, in Claude Code with claude mcp remove github. Revoke the issued token in GitHub settings.

MCP

Transport
http
Authentication
API key
Environment variables
Environment variables
GITHUB_PERSONAL_ACCESS_TOKEN
secret
GitHub personal access token for the local server; OAuth login is used without it
GITHUB_HOST
GitHub Enterprise Server or ghe.com hostname, https only

Security check

  • Can create and modify issues, pull requests and repository files
  • Operates with an access token to the GitHub account

README in short

The README lists use cases: repository management, issue and PR automation, CI and code analysis, team collaboration. For the remote server it gives VS Code JSON snippets with OAuth and with a token, an Insiders mode and ghe.com setup, with separate guides for other clients. The local server runs from the ghcr.io/github/github-mcp-server image, with advice on storing tokens safely and a GITHUB_HOST variable for Enterprise. MIT licensed.

FAQ

Which version should I pick?

Remote is simpler: no Docker, and OAuth handles the token. Local is for GitHub Enterprise Server and hosts without remote MCP.

What scopes should the token have?

The README advises minimal scopes: repo for repositories, read:packages and read:org only if needed.

Editors’ pick

An MCP server built into the Netdata agent: metrics, logs, alerts and live process, service and container data for an AI assistant

MCP serverMedium risk80.5K
Editors’ pick

A GitHub Action that runs Claude Code in pull requests and issues: answers mentions, reviews and makes changes

PluginHigh risk8.9K
Editors’ pick

An AI assistant for Kubernetes that turns plain-language requests into kubectl operations and doubles as an MCP server

CLIHigh risk7.6K
Editors’ pick

Cloudflare's set of remote MCP servers: docs, Workers, logs, Radar, browser, DNS and other account services

MCP serverHigh risk4.2K