# @kinus/github-cicd-mcp GitHub CI/CD MCP server with 70 tools for repos, PRs, Actions, deployments, billing, and more. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.2.2 - **Author:** io.github.devstephenke-sys - **License:** Unknown - **npm:** @kinus/github-cicd-mcp - **Source:** https://github.com/devstephenke-sys/Github-Free-MCPs - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-10-18T13:58:49.901Z - **Version scanned:** 1.2.3 - **CVEs:** none found by OSV at scan time **Findings** - injection-shaped content (note) in the `github_graphql_query` tool: Links to undeclared domain: docs.github.com ## Tools 40 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `github_list_workflows` — List GitHub Actions workflows in a repository. - `github_list_workflow_runs` — List workflow runs (filter by workflow id, branch, or status). - `github_get_workflow_run` — Get details for a single workflow run. - `github_list_workflow_jobs` — List jobs for a workflow run (steps, conclusions). - `github_rerun_workflow` — Re-run a failed or cancelled workflow run. - `github_cancel_workflow_run` — Cancel an in-progress workflow run. - `github_dispatch_workflow` — Trigger a workflow_dispatch event (manual CI run). - `github_list_actions_secrets` — List Actions secret names (values are never returned). - `github_list_actions_variables` — List Actions variables for a repository (non-secret config). - `github_list_workflow_run_artifacts` — List CI build artifacts for a workflow run. - `github_download_workflow_artifact` — Get download URL metadata for a workflow artifact (follow URL with auth to download zip). - `github_get_user_billing_actions` — Get GitHub Actions billing summary for the authenticated user (minutes, included vs paid). - `github_get_org_billing_actions` — Get GitHub Actions billing for an organization. - `github_get_org_billing_overview` — Get combined billing overview for an org (Actions, Packages, shared storage). - `github_get_org_billing_usage_report` — Request billing usage export metadata (org plans — requires billing admin). - `github_get_branch` — Get branch metadata including protection status. - `github_get_branch_protection` — Get branch protection rules for a branch. - `github_update_branch_protection` — Update branch protection (require PR reviews, status checks, admins). - `github_delete_branch_protection` — Remove branch protection from a branch. - `github_list_branches` — List branches in a repository. - `github_list_commits` — List commits on a branch or for the whole repo. - `github_get_commit` — Get a single commit with files changed. - `github_compare_commits` — Compare two commits (base...head) — useful for release notes and PR scope. - `github_create_commit` — Create a commit on a branch by updating one or more files (GitHub Git API — no local clone required). - `github_get_combined_status` — Get combined commit status (legacy statuses + check runs summary) for CI/CD gates. - `github_list_check_runs_for_ref` — List GitHub Actions check runs for a commit ref. - `github_list_deployments` — List deployments for a repository (CD history). - `github_create_deployment` — Create a deployment for a ref (triggers deployment workflows / environments). - `github_create_deployment_status` — Update deployment status (success, failure, in_progress) for CD observability. - `github_list_environments` — List deployment environments and protection rules. - `github_graphql_query` — Run a read-only GitHub GraphQL query (https://docs.github.com/en/graphql). Variables optional. - `github_graphql_mutation` — Run a GitHub GraphQL mutation (create/update via GraphQL API). Use with care. - `github_graphql_repository_overview` — Quick GraphQL snapshot: repo, default branch, latest commit, open PR count. - `github_create_issue` — Create an issue in a repository. - `github_list_issues` — List issues (excludes pull requests unless filtered). - `github_get_issue` — Get issue details by number. - `github_update_issue` — Update issue title, body, state, or labels. - `github_add_issue_comment` — Add a comment to an issue or pull request. - `github_list_issue_comments` — List comments on an issue or PR. - `git_status` — Show working tree status in a local clone (branch, staged/unstaged files). ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"github-cicd\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@kinus/github-cicd-mcp\"\n ],\n \"env\": {\n \"GITHUB_TOKEN\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `GITHUB_TOKEN` — GitHub Token (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Extensive blast radius — deletes data; holds an api key. - Floor 52, ceiling 52 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/%40kinus%2Fgithub-cicd-mcp - Install plan: https://forgeregistry.com/api/v1/packages/%40kinus%2Fgithub-cicd-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/%40kinus%2Fgithub-cicd-mcp - HTML page: https://forgeregistry.com/registry/%40kinus%2Fgithub-cicd-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.