@kinus/github-cicd-mcp

MCPcommunity
v1.2.2io.github.devstephenke-sysUnknownUpdated 5d agonpmGitHub

GitHub CI/CD MCP server with 70 tools for repos, PRs, Actions, deployments, billing, and more.

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
2GitHub stars
5d agoLast update
Needs 1 credential before it runs
  • GITHUB_TOKENAPI keyrequired

    GitHub personal access token for authentication

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
Authorio.github.devstephenke-sys
LicenseUnknown
Version1.2.2
Sourcenpm+mcp-registry
npm@kinus/github-cicd-mcp
GitHubdevstephenke-sys/Github-Free-MCPs
SBOMCycloneDX 1.6 ↓
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/20
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—npm Trusted Publishing (Sigstore)+0/5
→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
—npm maintainer match+0/5
→ Earned once your identity is verified above and that login is an npm maintainer of this package
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface40 tools · 1 privileged
Security scan✓ Cleanv1.2.3 · todayHow well does this scan work?
PROMPTtool:github_graphql_queryLinks to undeclared domain: docs.github.com
EvalsNone
IndexedOct 18, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · 1 privileged
Statically extracted from the published packagev1.2.3 · 14h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

github_list_workflowsList GitHub Actions workflows in a repository.

List GitHub Actions workflows in a repository.

No input schema was published for this tool.

github_list_workflow_runsList workflow runs (filter by workflow id, branch, or status).

List workflow runs (filter by workflow id, branch, or status).

No input schema was published for this tool.

github_get_workflow_runGet details for a single workflow run.

Get details for a single workflow run.

No input schema was published for this tool.

github_list_workflow_jobsList jobs for a workflow run (steps, conclusions).

List jobs for a workflow run (steps, conclusions).

No input schema was published for this tool.

github_rerun_workflowRe-run a failed or cancelled workflow run.

Re-run a failed or cancelled workflow run.

No input schema was published for this tool.

github_cancel_workflow_runCancel an in-progress workflow run.

Cancel an in-progress workflow run.

No input schema was published for this tool.

github_dispatch_workflowTrigger a workflow_dispatch event (manual CI run).

Trigger a workflow_dispatch event (manual CI run).

No input schema was published for this tool.

github_list_actions_secretsList Actions secret names (values are never returned).

List Actions secret names (values are never returned).

No input schema was published for this tool.

github_list_actions_variablesList Actions variables for a repository (non-secret config).

List Actions variables for a repository (non-secret config).

No input schema was published for this tool.

github_list_workflow_run_artifactsList CI build artifacts for a workflow run.

List CI build artifacts for a workflow run.

No input schema was published for this tool.

github_download_workflow_artifactGet download URL metadata for a workflow artifact (follow URL with auth to download zip).

Get download URL metadata for a workflow artifact (follow URL with auth to download zip).

No input schema was published for this tool.

github_get_user_billing_actionsGet GitHub Actions billing summary for the authenticated user (minutes, included vs paid).

Get GitHub Actions billing summary for the authenticated user (minutes, included vs paid).

No input schema was published for this tool.

github_get_org_billing_actionsGet GitHub Actions billing for an organization.

Get GitHub Actions billing for an organization.

No input schema was published for this tool.

github_get_org_billing_overviewGet combined billing overview for an org (Actions, Packages, shared storage).

Get combined billing overview for an org (Actions, Packages, shared storage).

No input schema was published for this tool.

github_get_org_billing_usage_reportRequest billing usage export metadata (org plans — requires billing admin).

Request billing usage export metadata (org plans — requires billing admin).

No input schema was published for this tool.

github_get_branchGet branch metadata including protection status.

Get branch metadata including protection status.

No input schema was published for this tool.

github_get_branch_protectionGet branch protection rules for a branch.

Get branch protection rules for a branch.

No input schema was published for this tool.

github_update_branch_protectionUpdate branch protection (require PR reviews, status checks, admins).

Update branch protection (require PR reviews, status checks, admins).

No input schema was published for this tool.

github_delete_branch_protectionprivilegedRemove branch protection from a branch.

Remove branch protection from a branch.

No input schema was published for this tool.

github_list_branchesList branches in a repository.

List branches in a repository.

No input schema was published for this tool.

github_list_commitsList commits on a branch or for the whole repo.

List commits on a branch or for the whole repo.

No input schema was published for this tool.

github_get_commitGet a single commit with files changed.

Get a single commit with files changed.

No input schema was published for this tool.

github_compare_commitsCompare two commits (base...head) — useful for release notes and PR scope.

Compare two commits (base...head) — useful for release notes and PR scope.

No input schema was published for this tool.

github_create_commitCreate a commit on a branch by updating one or more files (GitHub Git API — no local clone required).

Create a commit on a branch by updating one or more files (GitHub Git API — no local clone required).

No input schema was published for this tool.

github_get_combined_statusGet combined commit status (legacy statuses + check runs summary) for CI/CD gates.

Get combined commit status (legacy statuses + check runs summary) for CI/CD gates.

No input schema was published for this tool.

github_list_check_runs_for_refList GitHub Actions check runs for a commit ref.

List GitHub Actions check runs for a commit ref.

No input schema was published for this tool.

github_list_deploymentsList deployments for a repository (CD history).

List deployments for a repository (CD history).

No input schema was published for this tool.

github_create_deploymentCreate a deployment for a ref (triggers deployment workflows / environments).

Create a deployment for a ref (triggers deployment workflows / environments).

No input schema was published for this tool.

github_create_deployment_statusUpdate deployment status (success, failure, in_progress) for CD observability.

Update deployment status (success, failure, in_progress) for CD observability.

No input schema was published for this tool.

github_list_environmentsList deployment environments and protection rules.

List deployment environments and protection rules.

No input schema was published for this tool.

github_graphql_queryRun a read-only GitHub GraphQL query (https://docs.github.com/en/graphql). Variables optional.

Run a read-only GitHub GraphQL query (https://docs.github.com/en/graphql). Variables optional.

NOTELinks to undeclared domain: docs.github.com

No input schema was published for this tool.

github_graphql_mutationRun a GitHub GraphQL mutation (create/update via GraphQL API). Use with care.

Run a GitHub GraphQL mutation (create/update via GraphQL API). Use with care.

No input schema was published for this tool.

github_graphql_repository_overviewQuick GraphQL snapshot: repo, default branch, latest commit, open PR count.

Quick GraphQL snapshot: repo, default branch, latest commit, open PR count.

No input schema was published for this tool.

github_create_issueCreate an issue in a repository.

Create an issue in a repository.

No input schema was published for this tool.

github_list_issuesList issues (excludes pull requests unless filtered).

List issues (excludes pull requests unless filtered).

No input schema was published for this tool.

github_get_issueGet issue details by number.

Get issue details by number.

No input schema was published for this tool.

github_update_issueUpdate issue title, body, state, or labels.

Update issue title, body, state, or labels.

No input schema was published for this tool.

github_add_issue_commentAdd a comment to an issue or pull request.

Add a comment to an issue or pull request.

No input schema was published for this tool.

github_list_issue_commentsList comments on an issue or PR.

List comments on an issue or PR.

No input schema was published for this tool.

git_statusShow working tree status in a local clone (branch, staged/unstaged files).

Show working tree status in a local clone (branch, staged/unstaged files).

No input schema was published for this tool.

40 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

GitHub CI/CD MCP server with 70 tools for repos, PRs, Actions, deployments, billing, and more.

Keywords
mcp
Alternatives
Comparing tool surfaces…

Tools exposed

40 tools · 1 privileged · observed by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-18 — observed resolution, not a publisher declaration.

60 packages resolved · 5 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

54 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+42 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.

Topics

Related in testing & ci