How do I install the github mcp server?

This profile does not contain a verified copy-paste launch configuration. Follow the current project documentation to confirm the runtime, entry point, transport and authentication before registering it in your client.

What credentials does it need?

It reads `GITHUB_TOKEN` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Github MCP Server

GitHub security posture audit tools for AI agents — organization, repository, Actions, secrets, supply chain analysis via MCP

Remote serverstreamable-httpTypeScript

What is the Github MCP Server?

GitHub security posture audit tools for AI agents — organization, repository, Actions, secrets, supply chain analysis via MCP

What the server does

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
github_check_org_security	2FA enforcement, default repo visibility, member creation privileges
github_check_org_sso	SSO/SAML configuration via GraphQL
github_check_org_members	Outside collaborators, stale member detection
github_check_org_apps	OAuth credential authorizations, GitHub App installation permissions
github_check_org_webhooks	Insecure webhook URLs (HTTP, no secret)
github_check_org_audit_log	Suspicious audit log activity (Enterprise)
github_list_org_repos	List all repos in an org with security metadata
github_check_repo_branch_protection	Branch protection rules on default branch
github_check_repo_secrets	Secret scanning and push protection enablement
github_check_repo_code_scanning	CodeQL / code scanning enabled, open alerts
github_check_repo_dependabot	Dependabot enabled, critical alert triage
github_check_repo_settings	SECURITY.md, private vulnerability reporting, fork restrictions
github_check_repo_webhooks	Insecure repo-level webhook URLs
github_check_repo_deploy_keys	Deploy key permissions (read-only vs read-write)

Configuration

Variable	Description	Required
GITHUB_TOKEN	Credential the server authenticates with.	Yes

Example prompts to try

“Use Github to github check org security.”
“Use Github to github check org sso.”
“Use Github to github check org members.”

Frequently asked questions

GitHub security posture audit tools for AI agents — organization, repository, Actions, secrets, supply chain analysis via MCP Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.