Model Context Protocol (MCP) server for GitHub REST API using 5-Tool Hybrid Architecture
Inferido de los transportes que declara este listado (stdio). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
GITHUB_PERSONAL_ACCESS_TOKENClave de APIobligatoriaGitHub Personal Access Token (classic or fine-grained)
Declarado por el autor en el registro oficial de MCP. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído del código que npm publica realmente, en el momento del análisis. El paquete nunca se ejecutó. Las herramientas registradas dinámicamente en tiempo de ejecución, o escondidas en código empaquetado o minificado, pueden pasarse por alto — así que esto es un mínimo de la superficie de herramientas, no un censo completo.
list_workflowsList GitHub Actions CI/CD workflow files configured in a repository (.github/workflows). Use to discover workflow names and IDs before triggering or inspecting runs.List GitHub Actions CI/CD workflow files configured in a repository (.github/workflows). Use to discover workflow names and IDs before triggering or inspecting runs.
No se publicó ningún esquema de entrada para esta herramienta.
list_workflow_run_artifactsList artifacts produced by a specific GitHub Actions workflow run, including file size, download archive URLs, and expiration timestamps. Use to discover generated build outputs, test logs, or release binaries.List artifacts produced by a specific GitHub Actions workflow run, including file size, download archive URLs, and expiration timestamps. Use to discover generated build outputs, test logs, or release binaries.
No se publicó ningún esquema de entrada para esta herramienta.
get_workflow_run_artifactRetrieve metadata and download archive URL for a specific GitHub Actions build artifact by its numeric artifact ID. Use when downloading build deliverables or inspecting individual artifacts.Retrieve metadata and download archive URL for a specific GitHub Actions build artifact by its numeric artifact ID. Use when downloading build deliverables or inspecting individual artifacts.
No se publicó ningún esquema de entrada para esta herramienta.
list_workflow_runsList workflow execution runs with status, conclusion ('success', 'failure'), triggering event, and commit SHA. Use to check CI/CD pipeline health or find run IDs.List workflow execution runs with status, conclusion ('success', 'failure'), triggering event, and commit SHA. Use to check CI/CD pipeline health or find run IDs.
No se publicó ningún esquema de entrada para esta herramienta.
get_workflow_runGet detailed status, timing, and conclusion for a specific workflow execution run. Use when monitoring CI pipeline completion.Get detailed status, timing, and conclusion for a specific workflow execution run. Use when monitoring CI pipeline completion.
No se publicó ningún esquema de entrada para esta herramienta.
list_workflow_run_jobsList all individual jobs and step breakdown within a workflow run. Use to identify which specific job or step failed during a build.List all individual jobs and step breakdown within a workflow run. Use to identify which specific job or step failed during a build.
No se publicó ningún esquema de entrada para esta herramienta.
get_job_logsFetch plain text execution logs for an Actions job with smart failure extraction and ANSI stripping. Behavioral safety: scans for errors/panics to extract failure blocks and trims massive logs to preserve LLM token context.Fetch plain text execution logs for an Actions job with smart failure extraction and ANSI stripping. Behavioral safety: scans for errors/panics to extract failure blocks and trims massive logs to preserve LLM token context.
No se publicó ningún esquema de entrada para esta herramienta.
trigger_workflowDispatch a workflow run on a branch or tag via workflow_dispatch event with custom inputs. Requires write permissions and GITHUB_READ_ONLY=false. The target workflow file must define a workflow_dispatch trigger.Dispatch a workflow run on a branch or tag via workflow_dispatch event with custom inputs. Requires write permissions and GITHUB_READ_ONLY=false. The target workflow file must define a workflow_dispatch trigger.
No se publicó ningún esquema de entrada para esta herramienta.
cancel_workflow_runCancel a queued or currently executing GitHub Actions workflow run. Requires write permissions and GITHUB_READ_ONLY=false.Cancel a queued or currently executing GitHub Actions workflow run. Requires write permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
rerun_workflowRe-execute all jobs in a completed or failed GitHub Actions workflow run. Requires write permissions and GITHUB_READ_ONLY=false.Re-execute all jobs in a completed or failed GitHub Actions workflow run. Requires write permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
list_collaboratorsList collaborators who have access to a repository along with their assigned roles and permissions. Use to audit team access or check user memberships.List collaborators who have access to a repository along with their assigned roles and permissions. Use to audit team access or check user memberships.
No se publicó ningún esquema de entrada para esta herramienta.
get_collaborator_permissionCheck a specific user's exact permission level ('admin', 'maintain', 'write', 'triage', 'read', or 'none') on a repository. Use to verify authorization before attempting privileged operations.Check a specific user's exact permission level ('admin', 'maintain', 'write', 'triage', 'read', or 'none') on a repository. Use to verify authorization before attempting privileged operations.
No se publicó ningún esquema de entrada para esta herramienta.
add_collaboratorAdd or invite a GitHub user to collaborate on a repository with a specified permission level. If the user is not an organization member, this sends a collaboration invitation. Requires admin permissions and GITHUB_READ_ONLY=false.Add or invite a GitHub user to collaborate on a repository with a specified permission level. If the user is not an organization member, this sends a collaboration invitation. Requires admin permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
remove_collaboratorprivilegiadaRemove a collaborator from a repository, revoking their direct access. Requires admin permissions and GITHUB_READ_ONLY=false.Remove a collaborator from a repository, revoking their direct access. Requires admin permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
list_commitsList repository commit history chronologically with upstream filtering (sha, path, author, since, until) and capped pagination (max 100). For viewing actual line-by-line diffs of a commit, use get_commit instead.List repository commit history chronologically with upstream filtering (sha, path, author, since, until) and capped pagination (max 100). For viewing actual line-by-line diffs of a commit, use get_commit instead.
No se publicó ningún esquema de entrada para esta herramienta.
get_commitGet detailed commit metadata, file modification statistics, and unified diffs for a specific commit SHA or ref. Use when reviewing code changes in a commit or debugging regressions. Diffs are token-budget optimized and truncated at max_diff_lines (default: 400 lines).Get detailed commit metadata, file modification statistics, and unified diffs for a specific commit SHA or ref. Use when reviewing code changes in a commit or debugging regressions. Diffs are token-budget optimized and truncated at max_diff_lines (default: 400 lines).
No se publicó ningún esquema de entrada para esta herramienta.
create_commitCreate an atomic Git commit with multiple created, updated, or deleted files using the GitHub Git Trees API. Use when refactoring, applying multi-file code changes, or updating code and docs together. Avoids multiple individual single-file commits and does not require local git cloning. Requires wr…Create an atomic Git commit with multiple created, updated, or deleted files using the GitHub Git Trees API. Use when refactoring, applying multi-file code changes, or updating code and docs together. Avoids multiple individual single-file commits and does not require local git cloning. Requires wr…
No se publicó ningún esquema de entrada para esta herramienta.
push_filesAlias for 'create_commit': atomically commit additions, modifications, or deletions to multiple files in a single Git commit via the GitHub Git Database API. Requires write permissions and GITHUB_READ_ONLY=false.Alias for 'create_commit': atomically commit additions, modifications, or deletions to multiple files in a single Git commit via the GitHub Git Database API. Requires write permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
get_repository_topicsGet all topic tags associated with a GitHub repository. Use to inspect project categories and discoverability keywords.Get all topic tags associated with a GitHub repository. Use to inspect project categories and discoverability keywords.
No se publicó ningún esquema de entrada para esta herramienta.
set_repository_topicsReplace all topic tags on a repository with a new array of topic strings. Requires write permissions and GITHUB_READ_ONLY=false.Replace all topic tags on a repository with a new array of topic strings. Requires write permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
list_repository_webhooksList configured event webhooks on a repository with target URLs, active status, and subscribed event triggers.List configured event webhooks on a repository with target URLs, active status, and subscribed event triggers.
No se publicó ningún esquema de entrada para esta herramienta.
get_repository_webhookGet detailed configuration of a specific repository webhook by ID, including delivery URL and subscribed events.Get detailed configuration of a specific repository webhook by ID, including delivery URL and subscribed events.
No se publicó ningún esquema de entrada para esta herramienta.
get_commit_statusGet the combined status check state (pending, success, failure) and individual check runs for a commit SHA or branch ref.Get the combined status check state (pending, success, failure) and individual check runs for a commit SHA or branch ref.
No se publicó ningún esquema de entrada para esta herramienta.
create_commit_statusSet or update a commit status check (pending, success, failure, error) on a specific commit SHA. Requires write permissions and GITHUB_READ_ONLY=false.Set or update a commit status check (pending, success, failure, error) on a specific commit SHA. Requires write permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
list_dependabot_alertsList Dependabot vulnerability alerts for a repository, including affected package, severity (critical, high, medium, low), and patch advisory.List Dependabot vulnerability alerts for a repository, including affected package, severity (critical, high, medium, low), and patch advisory.
No se publicó ningún esquema de entrada para esta herramienta.
list_gistsList code snippets and gists owned by the authenticated user with file summaries. Use to locate code snippet IDs before reading or editing.List code snippets and gists owned by the authenticated user with file summaries. Use to locate code snippet IDs before reading or editing.
No se publicó ningún esquema de entrada para esta herramienta.
get_gistGet full source code contents, files, and description of a specific GitHub gist by ID. Use to inspect standalone code snippets or configuration templates.Get full source code contents, files, and description of a specific GitHub gist by ID. Use to inspect standalone code snippets or configuration templates.
No se publicó ningún esquema de entrada para esta herramienta.
create_gistCreate a new public or secret GitHub gist with one or more files. Requires write permissions and GITHUB_READ_ONLY=false.Create a new public or secret GitHub gist with one or more files. Requires write permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
update_gistUpdate an existing gist's description or modify/rename/delete individual files within the gist. Requires write permissions and GITHUB_READ_ONLY=false.Update an existing gist's description or modify/rename/delete individual files within the gist. Requires write permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
delete_gistprivilegiadaPermanently delete a gist by its identifier. Requires write permissions and GITHUB_READ_ONLY=false.Permanently delete a gist by its identifier. Requires write permissions and GITHUB_READ_ONLY=false.
No se publicó ningún esquema de entrada para esta herramienta.
github_find_actionsSin descripción publicadaEsta herramienta no publicó ninguna descripción. Forge no se la inventa.
github_execute_actionSin descripción publicadaEsta herramienta no publicó ninguna descripción. Forge no se la inventa.
get_file_contentsRead current file contents, extract symbol outlines, slice line ranges, or list directory entries from a repository at a specified git ref without cloning. Automatically decodes Base64 file contents into plain text UTF-8. Eager daily driver tool for inspecting source code, configuration files, and…Read current file contents, extract symbol outlines, slice line ranges, or list directory entries from a repository at a specified git ref without cloning. Automatically decodes Base64 file contents into plain text UTF-8. Eager daily driver tool for inspecting source code, configuration files, and…
No se publicó ningún esquema de entrada para esta herramienta.
get_repositoryGet comprehensive repository metadata, visibility, description, default branch, HTML URL, star count, fork count, and open issues count for an owner/repo. Eager daily driver tool for verifying repository configuration and existence.Get comprehensive repository metadata, visibility, description, default branch, HTML URL, star count, fork count, and open issues count for an owner/repo. Eager daily driver tool for verifying repository configuration and existence.
No se publicó ningún esquema de entrada para esta herramienta.
list_issuesSearch and filter repository issue tickets with upstream indexed parameters (state, labels, assignee, creator, mentioned, milestone, since) and capped pagination (max 100). Filters out pull requests. If the issue number is already known, prefer 'get_issue' for exact O(1) lookup.Search and filter repository issue tickets with upstream indexed parameters (state, labels, assignee, creator, mentioned, milestone, since) and capped pagination (max 100). Filters out pull requests. If the issue number is already known, prefer 'get_issue' for exact O(1) lookup.
No se publicó ningún esquema de entrada para esta herramienta.
get_issueGet full details of a specific issue ticket, including markdown body, assignees, milestone, state reason, and comment count. Use when investigating a bug report or reading issue specifications.Get full details of a specific issue ticket, including markdown body, assignees, milestone, state reason, and comment count. Use when investigating a bug report or reading issue specifications.
No se publicó ningún esquema de entrada para esta herramienta.
create_issueSin descripción publicadaEsta herramienta no publicó ninguna descripción. Forge no se la inventa.
update_issueSin descripción publicadaEsta herramienta no publicó ninguna descripción. Forge no se la inventa.
list_issue_commentsSin descripción publicadaEsta herramienta no publicó ninguna descripción. Forge no se la inventa.
create_issue_commentSin descripción publicadaEsta herramienta no publicó ninguna descripción. Forge no se la inventa.
34 de 40 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
Model Context Protocol (MCP) server for GitHub REST API using 5-Tool Hybrid Architecture
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
El rastreo se detuvo en el límite de profundidad 4. Nada por debajo de ese nivel llegó a resolverse.
El rastreo se detuvo en el límite de 60 paquetes. El resto del árbol nunca se resolvió.
Hay 36 paquetes resueltos más que no se dibujan aquí (límite de visualización: 24). Toda dependencia con avisos de seguridad se dibuja aunque se supere el límite. Inventario completo (SBOM CycloneDX)
54 dependencias declaradas nunca llegaron al árbol. Faltan en la resolución de Forge, no en el paquete.
+42 más sin listar. Los recuentos por motivo de arriba las incluyen todas.
No se siguen: peerDependencies. Este árbol cubre solo dependencias en tiempo de ejecución, así que lo que estas arrastren nunca se resolvió.