Overview
What is ghas-mcp-server?
A Model Context Protocol server that enables querying GitHub Advanced Security (GHAS) alerts for GitHub repositories. It provides tools to list Dependabot, secret scanning, and code scanning alerts. Designed for developers and security teams using MCP-compatible editors like VS Code.
How to use ghas-mcp-server?
Install via the VS Code install buttons or add the configuration to your MCP client. Use the npx command npx -y @rajbos/ghas-mcp-server with environment variables for authentication: either GITHUB_PERSONAL_ACCESS_TOKEN (PAT) or GITHUB_PERSONAL_ACCESS_TOKEN_USE_GHCLI (to use GitHub CLI). Ensure your PAT has three
