Version Control MCP Server

Github MCP Server

Name: Github MCP Server
Author: github

Official GitHub server for integration with repository management, PRs, issues, and more.

Scan found nothing by github27,944MITGoBeginnerstdiostreamable-http

View on GitHub Install Guide

Install

No auto-install command available for this server.

Check the GitHub repository for setup instructions

Remote Endpoint Available

This server offers a hosted endpoint — no local installation required.

https://api.githubcopilot.com/mcp/

Safety Report

100% Scan found nothing

Scanned 5 months ago

8 passed

Security

Authentication

details

Requires GitHub PAT

Pass

CORS Policy

details

stdio transport

N/A

Rate Limiting

details

GitHub API rate limits enforced

Pass

Known CVEs

details

No public CVEs

Pass

Code Quality

Dependency Audit

details

No known vulnerabilities

Pass

Dangerous Patterns

details

No dangerous code patterns detected

Pass

License

details

MIT License

Pass

Code Source

details

Official GitHub repository

Pass

Community

Maintenance Status

details

Active development by GitHub

Pass

Learn about our security methodology →

Compatibility

Claude CodeFull support

Tested

CursorFull support

Tested

VS CodeFull support via Copilot

Tested

WindsurfBasic operations work

Partial

Claude DesktopFull support

Tested

Tools Provided (6)

create_issue

Create a new GitHub issue

list_issues

List repository issues

create_pull_request

Create a pull request

get_file_contents

Read file from repository

search_code

Search code across repositories

create_branch

Create a new branch

Frequently Asked Questions

What is Github MCP Server?

Official GitHub server for integration with repository management, PRs, issues, and more.

What tools does Github MCP Server provide?

Github MCP Server provides 6 tools including create_issue, list_issues, create_pull_request, get_file_contents. Each tool can be called by AI agents to perform specific operations.

Is Github MCP Server safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone Github MCP Server and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. None of them matched. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to Github MCP Server?

Similar MCP servers include MCP Server Azure Devops, Gitlab Mr MCP, P4mcp Server. Each serves a similar purpose but may differ in features, language, and compatibility.