GitHub Repository Operations

github

GitHub repository, issue, pull-request, and Actions operations via the official GitHub MCP server.

Installs: 30.7k
Namespace: github
Version: >=2025.0.0 <2026.0.0
Last attach: reviewed1 months ago
Reliability: 100% uptime (30d)· validated 2026-06-27

Add to your mcp.json

{
  "mcpServers": {
    "github": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-github"
      ],
      "env": {
        "GITHUB_PERSONAL_ACCESS_TOKEN": "<GITHUB_PERSONAL_ACCESS_TOKEN>"
      }
    }
  }
}

Open in VS CodeDon't have it? Install FrootAI for VS Code

Attach in a FrootAI play (fai-manifest)

mcp_scope:
  attached:
    - github

Authentication

pat

set GITHUB_PERSONAL_ACCESS_TOKEN to a personal access token; fine-grained tokens scoped to the target repos are preferred over classic. CI may pass the Actions `github.token` as GITHUB_PERSONAL_ACCESS_TOKEN.

Required credential: GITHUB_PERSONAL_ACCESS_TOKEN

Environment variables

Variable	Required	Auth mode	Description
GITHUB_PERSONAL_ACCESS_TOKEN	yes	pat	GitHub personal access token (classic or fine-grained) — the token env name the reference MCP server reads. Scopes the operations the server can perform; pass via env, never inline in args (doctrine #6).
GITHUB_TOKEN	no	pat	Alternate token env name (e.g. CI `github.token`); use either GITHUB_PERSONAL_ACCESS_TOKEN or GITHUB_TOKEN.
GITHUB_PAT	no	pat	Alternate token env name accepted by the server.

Sample tools

github.search_repositories
Search repositories by query.
github.get_file_contents
Read a file from a repository.
github.list_issues
List issues on a repository.
github.create_issue
Open a new issue.
github.list_pull_requests
List pull requests on a repository.

Used in recipes

FAI cookbook recipes that attach github.

Destructive-action audit

2 destructive tools — confirm per call

Each runs only when the trust policy allows it; under allowDestructive: false they prompt per call.

github.delete_branch
github.delete_file

Destructive-action audit (X2.18): branch/file deletion tools are flagged in `destructive_tools` and are blocked when the trust policy sets `allowDestructive: false`.

Known limitations

Requires a valid GITHUB_TOKEN; without it the server attaches but all repo-scoped tools return an auth error.
Tool capabilities are bounded by the token's scopes — a read-only token cannot create issues or PRs.

Spec contributors

Maintainers who landed commits onmcp-specs/github.json.

pspsbali

Freshness

When this spec was last reviewed by a maintainer and last machine-validated against the live server.

Spec last reviewed: 1 months ago(2026-06-25)
Auto-validated: never