GitHub MCP Server (Official)
GitHub's official MCP server — gives AI agents direct access to GitHub repositories, issues, pull requests, code search, and Actions via the Model Context Protocol.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
Fine-grained PATs with repository and permission scoping. GitHub App installations provide org-level permission management. MIT licensed, official GitHub-maintained. TLS enforced for all API and MCP transport. Token never committed — environment variable only.
⚡ Reliability
Best When
Your agent needs to interact with GitHub repositories — read code, create PRs, manage issues — without building custom GitHub API integration.
Avoid When
You're on GitLab or Bitbucket, or need Git operations beyond what the GitHub REST API supports.
Use Cases
- • Agents reading and writing code in GitHub repositories
- • Automating code review — agent reads PR diff and adds inline comments
- • Creating and managing GitHub Issues and Pull Requests from agent workflows
- • Searching code across repositories using GitHub's code search
- • Triggering and monitoring GitHub Actions workflows from agents
Not For
- • GitLab or Bitbucket repositories (GitHub-specific MCP server)
- • Bulk repository operations requiring raw Git protocol access
- • Teams not using GitHub as their primary VCS
Interface
Authentication
GitHub Personal Access Token (PAT) or GitHub App installation token. Fine-grained PATs recommended for least-privilege. Scopes map to GitHub API permissions (repo, issues, pull_requests, actions, etc.).
Pricing
The MCP server itself is MIT licensed and free. GitHub API rate limits apply based on your GitHub plan.
Agent Metadata
Known Gotchas
- ⚠ Fine-grained PATs must specify repository access explicitly — easy to miss repo permissions
- ⚠ GitHub search API has a separate 30 req/minute rate limit from the general 5K/hour
- ⚠ Creating duplicate PRs or issues if agents retry without checking for existing ones
- ⚠ Repository contents are base64-encoded — agents must decode file content after reading
- ⚠ GitHub Actions secrets cannot be read via API (only set) — don't try to retrieve secrets
Alternatives
Full Evaluation Report
Detailed scoring breakdown, competitive positioning, security analysis, and improvement recommendations for GitHub MCP Server (Official).
Scores are editorial opinions as of 2026-03-06.