Model Context Protocol (MCP) server for GitHub REST API using 5-Tool Hybrid Architecture
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
GITHUB_PERSONAL_ACCESS_TOKENAPI keyrequiredGitHub Personal Access Token (classic or fine-grained)
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
list_workflowsList GitHub Actions CI/CD workflow files configured in a repository (.github/workflows). Use to discover workflow names and IDs before triggering or inspecting runs.List GitHub Actions CI/CD workflow files configured in a repository (.github/workflows). Use to discover workflow names and IDs before triggering or inspecting runs.
No input schema was published for this tool.
list_workflow_run_artifactsList artifacts produced by a specific GitHub Actions workflow run, including file size, download archive URLs, and expiration timestamps. Use to discover generated build outputs, test logs, or release binaries.List artifacts produced by a specific GitHub Actions workflow run, including file size, download archive URLs, and expiration timestamps. Use to discover generated build outputs, test logs, or release binaries.
No input schema was published for this tool.
get_workflow_run_artifactRetrieve metadata and download archive URL for a specific GitHub Actions build artifact by its numeric artifact ID. Use when downloading build deliverables or inspecting individual artifacts.Retrieve metadata and download archive URL for a specific GitHub Actions build artifact by its numeric artifact ID. Use when downloading build deliverables or inspecting individual artifacts.
No input schema was published for this tool.
list_workflow_runsList workflow execution runs with status, conclusion ('success', 'failure'), triggering event, and commit SHA. Use to check CI/CD pipeline health or find run IDs.List workflow execution runs with status, conclusion ('success', 'failure'), triggering event, and commit SHA. Use to check CI/CD pipeline health or find run IDs.
No input schema was published for this tool.
get_workflow_runGet detailed status, timing, and conclusion for a specific workflow execution run. Use when monitoring CI pipeline completion.Get detailed status, timing, and conclusion for a specific workflow execution run. Use when monitoring CI pipeline completion.
No input schema was published for this tool.
list_workflow_run_jobsList all individual jobs and step breakdown within a workflow run. Use to identify which specific job or step failed during a build.List all individual jobs and step breakdown within a workflow run. Use to identify which specific job or step failed during a build.
No input schema was published for this tool.
get_job_logsFetch plain text execution logs for an Actions job with smart failure extraction and ANSI stripping. Behavioral safety: scans for errors/panics to extract failure blocks and trims massive logs to preserve LLM token context.Fetch plain text execution logs for an Actions job with smart failure extraction and ANSI stripping. Behavioral safety: scans for errors/panics to extract failure blocks and trims massive logs to preserve LLM token context.
No input schema was published for this tool.
trigger_workflowDispatch a workflow run on a branch or tag via workflow_dispatch event with custom inputs. Requires write permissions and GITHUB_READ_ONLY=false. The target workflow file must define a workflow_dispatch trigger.Dispatch a workflow run on a branch or tag via workflow_dispatch event with custom inputs. Requires write permissions and GITHUB_READ_ONLY=false. The target workflow file must define a workflow_dispatch trigger.
No input schema was published for this tool.
cancel_workflow_runCancel a queued or currently executing GitHub Actions workflow run. Requires write permissions and GITHUB_READ_ONLY=false.Cancel a queued or currently executing GitHub Actions workflow run. Requires write permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
rerun_workflowRe-execute all jobs in a completed or failed GitHub Actions workflow run. Requires write permissions and GITHUB_READ_ONLY=false.Re-execute all jobs in a completed or failed GitHub Actions workflow run. Requires write permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
list_collaboratorsList collaborators who have access to a repository along with their assigned roles and permissions. Use to audit team access or check user memberships.List collaborators who have access to a repository along with their assigned roles and permissions. Use to audit team access or check user memberships.
No input schema was published for this tool.
get_collaborator_permissionCheck a specific user's exact permission level ('admin', 'maintain', 'write', 'triage', 'read', or 'none') on a repository. Use to verify authorization before attempting privileged operations.Check a specific user's exact permission level ('admin', 'maintain', 'write', 'triage', 'read', or 'none') on a repository. Use to verify authorization before attempting privileged operations.
No input schema was published for this tool.
add_collaboratorAdd or invite a GitHub user to collaborate on a repository with a specified permission level. If the user is not an organization member, this sends a collaboration invitation. Requires admin permissions and GITHUB_READ_ONLY=false.Add or invite a GitHub user to collaborate on a repository with a specified permission level. If the user is not an organization member, this sends a collaboration invitation. Requires admin permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
remove_collaboratorprivilegedRemove a collaborator from a repository, revoking their direct access. Requires admin permissions and GITHUB_READ_ONLY=false.Remove a collaborator from a repository, revoking their direct access. Requires admin permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
list_commitsList repository commit history chronologically with upstream filtering (sha, path, author, since, until) and capped pagination (max 100). For viewing actual line-by-line diffs of a commit, use get_commit instead.List repository commit history chronologically with upstream filtering (sha, path, author, since, until) and capped pagination (max 100). For viewing actual line-by-line diffs of a commit, use get_commit instead.
No input schema was published for this tool.
get_commitGet detailed commit metadata, file modification statistics, and unified diffs for a specific commit SHA or ref. Use when reviewing code changes in a commit or debugging regressions. Diffs are token-budget optimized and truncated at max_diff_lines (default: 400 lines).Get detailed commit metadata, file modification statistics, and unified diffs for a specific commit SHA or ref. Use when reviewing code changes in a commit or debugging regressions. Diffs are token-budget optimized and truncated at max_diff_lines (default: 400 lines).
No input schema was published for this tool.
create_commitCreate an atomic Git commit with multiple created, updated, or deleted files using the GitHub Git Trees API. Use when refactoring, applying multi-file code changes, or updating code and docs together. Avoids multiple individual single-file commits and does not require local git cloning. Requires wr…Create an atomic Git commit with multiple created, updated, or deleted files using the GitHub Git Trees API. Use when refactoring, applying multi-file code changes, or updating code and docs together. Avoids multiple individual single-file commits and does not require local git cloning. Requires wr…
No input schema was published for this tool.
push_filesAlias for 'create_commit': atomically commit additions, modifications, or deletions to multiple files in a single Git commit via the GitHub Git Database API. Requires write permissions and GITHUB_READ_ONLY=false.Alias for 'create_commit': atomically commit additions, modifications, or deletions to multiple files in a single Git commit via the GitHub Git Database API. Requires write permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
get_repository_topicsGet all topic tags associated with a GitHub repository. Use to inspect project categories and discoverability keywords.Get all topic tags associated with a GitHub repository. Use to inspect project categories and discoverability keywords.
No input schema was published for this tool.
set_repository_topicsReplace all topic tags on a repository with a new array of topic strings. Requires write permissions and GITHUB_READ_ONLY=false.Replace all topic tags on a repository with a new array of topic strings. Requires write permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
list_repository_webhooksList configured event webhooks on a repository with target URLs, active status, and subscribed event triggers.List configured event webhooks on a repository with target URLs, active status, and subscribed event triggers.
No input schema was published for this tool.
get_repository_webhookGet detailed configuration of a specific repository webhook by ID, including delivery URL and subscribed events.Get detailed configuration of a specific repository webhook by ID, including delivery URL and subscribed events.
No input schema was published for this tool.
get_commit_statusGet the combined status check state (pending, success, failure) and individual check runs for a commit SHA or branch ref.Get the combined status check state (pending, success, failure) and individual check runs for a commit SHA or branch ref.
No input schema was published for this tool.
create_commit_statusSet or update a commit status check (pending, success, failure, error) on a specific commit SHA. Requires write permissions and GITHUB_READ_ONLY=false.Set or update a commit status check (pending, success, failure, error) on a specific commit SHA. Requires write permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
list_dependabot_alertsList Dependabot vulnerability alerts for a repository, including affected package, severity (critical, high, medium, low), and patch advisory.List Dependabot vulnerability alerts for a repository, including affected package, severity (critical, high, medium, low), and patch advisory.
No input schema was published for this tool.
list_gistsList code snippets and gists owned by the authenticated user with file summaries. Use to locate code snippet IDs before reading or editing.List code snippets and gists owned by the authenticated user with file summaries. Use to locate code snippet IDs before reading or editing.
No input schema was published for this tool.
get_gistGet full source code contents, files, and description of a specific GitHub gist by ID. Use to inspect standalone code snippets or configuration templates.Get full source code contents, files, and description of a specific GitHub gist by ID. Use to inspect standalone code snippets or configuration templates.
No input schema was published for this tool.
create_gistCreate a new public or secret GitHub gist with one or more files. Requires write permissions and GITHUB_READ_ONLY=false.Create a new public or secret GitHub gist with one or more files. Requires write permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
update_gistUpdate an existing gist's description or modify/rename/delete individual files within the gist. Requires write permissions and GITHUB_READ_ONLY=false.Update an existing gist's description or modify/rename/delete individual files within the gist. Requires write permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
delete_gistprivilegedPermanently delete a gist by its identifier. Requires write permissions and GITHUB_READ_ONLY=false.Permanently delete a gist by its identifier. Requires write permissions and GITHUB_READ_ONLY=false.
No input schema was published for this tool.
github_find_actionsNo description publishedThis tool published no description. Forge does not invent one.
github_execute_actionNo description publishedThis tool published no description. Forge does not invent one.
get_file_contentsRead current file contents, extract symbol outlines, slice line ranges, or list directory entries from a repository at a specified git ref without cloning. Automatically decodes Base64 file contents into plain text UTF-8. Eager daily driver tool for inspecting source code, configuration files, and…Read current file contents, extract symbol outlines, slice line ranges, or list directory entries from a repository at a specified git ref without cloning. Automatically decodes Base64 file contents into plain text UTF-8. Eager daily driver tool for inspecting source code, configuration files, and…
No input schema was published for this tool.
get_repositoryGet comprehensive repository metadata, visibility, description, default branch, HTML URL, star count, fork count, and open issues count for an owner/repo. Eager daily driver tool for verifying repository configuration and existence.Get comprehensive repository metadata, visibility, description, default branch, HTML URL, star count, fork count, and open issues count for an owner/repo. Eager daily driver tool for verifying repository configuration and existence.
No input schema was published for this tool.
list_issuesSearch and filter repository issue tickets with upstream indexed parameters (state, labels, assignee, creator, mentioned, milestone, since) and capped pagination (max 100). Filters out pull requests. If the issue number is already known, prefer 'get_issue' for exact O(1) lookup.Search and filter repository issue tickets with upstream indexed parameters (state, labels, assignee, creator, mentioned, milestone, since) and capped pagination (max 100). Filters out pull requests. If the issue number is already known, prefer 'get_issue' for exact O(1) lookup.
No input schema was published for this tool.
get_issueGet full details of a specific issue ticket, including markdown body, assignees, milestone, state reason, and comment count. Use when investigating a bug report or reading issue specifications.Get full details of a specific issue ticket, including markdown body, assignees, milestone, state reason, and comment count. Use when investigating a bug report or reading issue specifications.
No input schema was published for this tool.
create_issueNo description publishedThis tool published no description. Forge does not invent one.
update_issueNo description publishedThis tool published no description. Forge does not invent one.
list_issue_commentsNo description publishedThis tool published no description. Forge does not invent one.
create_issue_commentNo description publishedThis tool published no description. Forge does not invent one.
34 of 40 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Model Context Protocol (MCP) server for GitHub REST API using 5-Tool Hybrid Architecture
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the depth-4 limit. Anything below that level was never resolved.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
54 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+42 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.