GitHits MCP Server

Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.

Local serverstdioPython

What is the GitHits MCP server?

Most browser automation work still happens through a UI a human drives. GitHits MCP server moves it into the conversation instead. Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.

The short version

GitHits connects AI coding agents to public open-source evidence across the full software development lifecycle: discovery, planning, research, implementation, debugging, and maintenance.

The tools it exposes

The server publishes 10 tools. What each one is for:

  • init — -no-browser or login --no-browser prints the login URL instead of launching a browser
  • login — -force re-authenticates even if you are already logged in
  • gemini-extension.json — GEMINI.md
  • Capability — MCP tools
  • Feedback — feedback
  • Variable — Purpose
  • GITHITS_API_TOKEN — API token for authentication
  • GITHITS_AUTH_STORAGE — Override OAuth storage mode: keychain or file
  • GITHITS_DISABLE_UPDATE_CHECK — Disable npm latest-version update notices
  • GITHITS_TELEMETRY — Emit local timing diagnostics to stderr

What it needs from you

Configuration is passed through the environment: GITHITS_API_TOKEN. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

Getting it running

The server ships on npm as githits, so your MCP client can launch it on demand — there is no separate build step. Add the server block to your client's configuration, restart it, and the tools register themselves.

How it compares

This sits in the browser automation group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. GitHits's toolset — init, login, gemini-extension.json and 7 more — is a fair guide to whether it matches your workflow. It is maintained by com.githits; worth a glance at recent repository activity before you build anything load-bearing on it.

We check each listing at SyncDev against the project's documentation before it goes live — if something here drifts out of date, it is a bug worth reporting.

Things to watch

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • With 10 tools registered it takes up a noticeable share of the context window; turn it off in projects that never touch GitHits.
  • Missing credentials fail quietly in some clients — if no tools show up, check the environment block first.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Available tools

ToolWhat it does
init-no-browser or login --no-browser prints the login URL instead of launching a browser
login-force re-authenticates even if you are already logged in
gemini-extension.jsonGEMINI.md
CapabilityMCP tools
Feedbackfeedback
VariablePurpose
GITHITS_API_TOKENAPI token for authentication
GITHITS_AUTH_STORAGEOverride OAuth storage mode: keychain or file
GITHITS_DISABLE_UPDATE_CHECKDisable npm latest-version update notices
GITHITS_TELEMETRYEmit local timing diagnostics to stderr

How to install the GitHits MCP server

{
  "mcpServers": {
    "githits": {
      "command": "npx",
      "args": ["-y", "githits"],
      "env": {
        "GITHITS_API_TOKEN": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

VariableDescriptionRequired
GITHITS_API_TOKENCredential the server authenticates with.Yes

Example prompts to try

  • Use GitHits to init.
  • Use GitHits to login.
  • Use GitHits to gemini-extension.json.

Frequently asked questions

It connects GitHits to MCP-compatible AI assistants such as Claude and Cursor, exposing 10 tools (init, login, gemini-extension.json, and more) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with GitHits directly.