GitHub MCP Server
GitHub's official MCP server that gives AI agents full access to GitHub's platform: repositories, issues, pull requests, Actions workflows, code security findings, Dependabot alerts, discussions, and notifications. Available as a hosted remote server or self-hosted Docker container.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
Fine-grained PATs allow per-repository, per-permission scoping. GitHub App auth provides installation-level isolation. Token never appears in MCP tool responses. MIT licensed open source.
⚡ Reliability
Best When
An agent needs deep GitHub integration for code review, issue management, PR automation, or CI/CD monitoring across one or more repositories.
Avoid When
You use a non-GitHub VCS, or you only need basic git operations that don't require the GitHub API.
Use Cases
- • AI-assisted code review and pull request management
- • Automated issue triage and bug analysis with natural language
- • Monitoring and debugging GitHub Actions workflow failures
- • Codebase exploration and security finding analysis across repositories
- • Managing releases, notifications, and project boards through AI agents
Not For
- • Non-GitHub repositories (GitLab, Bitbucket, etc.)
- • Direct code execution or deployment beyond GitHub Actions
- • Managing GitHub billing or organization-level admin settings
Interface
Authentication
Remote server supports OAuth (recommended) or PAT. Local server requires PAT via GITHUB_PERSONAL_ACCESS_TOKEN env var. Enterprise Server requires local deployment with custom GITHUB_HOST. Recommended PAT scopes: repo, read:packages, read:org.
Pricing
MIT licensed. Remote hosted server provided free by GitHub. GitHub API rate limits apply (5000 req/hr for authenticated users).
Agent Metadata
Known Gotchas
- ⚠ GitHub API rate limits (5000/hr) can be exhausted quickly with aggressive agent usage
- ⚠ PAT scope must match intended operations - insufficient scopes produce opaque permission errors
- ⚠ Enterprise Server requires local Docker deployment, remote server is GitHub.com and GHE Cloud only
- ⚠ Toolset configuration is critical - exposing all tools can overwhelm agent tool selection
- ⚠ Environment variable support varies by MCP host (e.g., Windsurf requires hardcoded tokens)
Alternatives
Full Evaluation Report
Detailed scoring breakdown, competitive positioning, security analysis, and improvement recommendations for GitHub MCP Server.
Scores are editorial opinions as of 2026-03-06.