Github Dependabot MCP server

@avarant

代码仓库

基本信息

分类

版本控制

许可证

MIT license

传输方式

stdio

作者

avarant

关于 Github Dependabot MCP server

mcp server for github dependabot

Github Dependabot MCP server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "github-dependabot-mcp-server": {
      "command": "python",
      "args": [
        "-m",
        "keyring",
        "set",
        "github_mcp_server",
        "personal_access_token"
      ]
    }
  }
}

Github Dependabot MCP server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Github Dependabot MCP server?

The Github Dependabot MCP server fetches Github Dependabot alerts for a specified repository. It is intended for developers who use MCP-capable tools (e.g., Claude, Cursor) and need to retrieve security alerts from a Github repository.

How to use Github Dependabot MCP server?

Install uv (a fast Python package installer), then clone the repository. Set up a Github Personal Access Token with repo and security_events scopes, either via macOS Keychain or the GITHUB_PERSONAL_ACCESS_TOKEN environment variable. Finally, add the server to your MCP configuration (e.g., ~/.cursor/mcp.json) using the uv command as shown in the README. The server provides one tool: get_dependabot_alerts(repo_owner, repo_name), which returns a list of alert objects from the Github API.

Key features of Github Dependabot MCP server

Fetches Dependabot alerts via Github API
Single tool: get_dependabot_alerts(repo_owner, repo_name)
Supports token authentication via Keychain or environment variable
Runs with uv for fast, dependency‑managed execution
Designed for use with MCP‑compatible clients (e.g., Cursor)

Use cases of Github Dependabot MCP server

Monitor Dependabot alerts for a specific repository within an AI‑assisted coding environment
Automate security review by feeding alerts into a conversation with an MCP‑capable assistant
Integrate Dependabot alert retrieval into a broader MCP‑based workflow

常见问题

What does this server do differently from the standard `mcp/github` server?

It focuses solely on fetching Dependabot alerts via a dedicated tool (`get_dependabot_alerts`), rather than providing broad Github API access.

What dependencies are required to run the server?

The server requires `uv` (a Python package installer/resolver) and a Github Personal Access Token with `repo` and `security_events` scopes.

Where does the data come from?

All alert data is fetched live from the Github REST API using the provided token.

How is authentication handled?

The server first attempts to read the token from the macOS Keychain (via `keyring`). If that fails, it falls back to the `GITHUB_PERSONAL_ACCESS_TOKEN` environment variable. It will also try to store the token in the Keychain for future use if it was provided via environment variable.

What transport does the server use?

The server communicates over stdin/stdout using the MCP protocol, as configured in the MCP client’s `mcp.json` with `uv run mcp run main.py`.

版本控制分类下的更多 MCP 服务器

Linear MCP Server

jerhadf

A server that integrates Linear's project management system with the Model Context Protocol (MCP) to allow LLMs to interact with Linear.

345

Atlassian Data Center MCP

b1ff

MCP servers for the Atlassian products (Bitbucket, Confluence, JIRA) of the Data Center version

Bitbucket MCP

MatanYemini

Bitbucket MCP - A Model Context Protocol (MCP) server for integrating with Bitbucket Cloud and Server APIs

149

GitLab

modelcontextprotocol

Model Context Protocol Servers

88.1K

🚀 GitLab MR MCP

kopfrechner

Interact seamlessly with GitLab repositories to manage merge requests and issues. Fetch details, add comments, and streamline your code review process with ease.