MCP Server for GitHub Tools
@RickardHF
Model Context Protocol (MCP) server that provides GitHub API tools for user information, security issue creation, and repository security scanning. Built with TypeScript and the MCP SDK
Overview
What is MCP Server for GitHub Tools?
MCP Server for GitHub Tools is a Model Context Protocol (MCP) server implementation that provides tools for interacting with GitHub. Built with TypeScript and the MCP SDK, it is designed for integration with MCP clients like GitHub Copilot in Visual Studio Code.
How to use MCP Server for GitHub Tools?
Ensure Node.js, npm, and the GitHub CLI (gh) are installed and authenticated. Start the server locally with npm start, or for development with auto‑rebuild use npm run dev. For VS Code integration, configure the MCP client with the stdio command npx @rickardhf/github-security-mcp-server (published) or point to the local built file.
Key features of MCP Server for GitHub Tools
- Retrieve GitHub user information by username.
- Create and list security issues with proper labels.
- Get comprehensive security status (Dependabot, code scanning, secret scanning).
- List and create branches in a repository.
- Create, list, and get detailed pull requests with diffs.
Use cases of MCP Server for GitHub Tools
- Look up details about a specific GitHub user.
- Report a security vulnerability by creating a labeled security issue.
- Review all security‑related issues in a repository.
- Monitor Dependabot, code scanning, and secret scanning alerts.
- Manage branch creation and pull requests across repositories.
FAQ from MCP Server for GitHub Tools
How does authentication work?
The server uses the GitHub CLI (gh) to obtain a token for the currently authenticated user, and this token is used for all GitHub API requests.
What are the prerequisites for running the server?
Node.js, npm (included with Node.js), and the GitHub CLI (gh) must be installed and authenticated.
Why is the AI agent not picking up the tools?
If the AI agent does not automatically discover the tools, explicitly instruct it to use the available tools.
How can I run the server locally from a published package?
Use the command npx @rickardhf/github-security-mcp-server as the stdio command in your MCP client configuration.
What transport does the server use?
The server is configured to communicate over stdio, as shown in the VS Code mcp.json examples.
