MCP server github-agent

Github Agent

CLI or API | MCP

Version: 2.4.9

Documentation — Installation, deployment, and usage across the MCP, API, and official documentation.

---

Overview

Github Agent is a production-grade Agent and Model Context Protocol (MCP) server designed to interface directly with GitHub Agent for MCP.

---

Key Features

• Consolidated Action-Routed MCP Tools: Minimizes token overhead and eliminates tool bloat in LLM contexts by grouping methods into optimized, togglable tool modules.
• Enterprise-Grade Security: Complete support for Eunomia policies, OIDC token delegation, and granular execution context tracking.
• Integrated Graph Agent: Built-in Pydantic AI agent supporting the Agent Control Protocol (ACP) and standard Web interfaces (AG-UI).
• Native Telemetry & Tracing: Out-of-the-box OpenTelemetry exports and native Langfuse tracing.

---

CLI or API

This agent wraps the GitHub Agent for MCP API. The operator can interact with it programmatically or via its integrated execution entrypoints.

Detailed instructions on how to use the underlying API wrappers, extended schema bindings, and developer SDK references are maintained in docs/index.md.

---

MCP

This server use dynamic Action-Routed tools to optimize token overhead and maximize IDE compatibility.

Available MCP Tools

Auto-generated from the live MCP server — do not edit by hand.

Every operation is one typed tool; there are no action-routed tools.

Typed per-operation tools

MCP Tool	Toggle Env Var	Description
github_add_collaborator	APITOOL	Add a collaborator to a repository.
github_cancel_workflow_run	APITOOL	Cancel a workflow run.
github_create_branch	APITOOL	Create a new branch in a repository (using git ref creation).
github_create_commit_comment	APITOOL	Create a comment on a commit.
github_create_content	APITOOL	Create a file in a repository.
github_create_issue	APITOOL	Create a new issue in a repository.
github_create_issue_comment	APITOOL	Create a comment on an issue or pull request.
github_create_or_update_repo_secret	APITOOL	Create or update a repository Actions secret.
github_create_organization	APITOOL	Create an organization — GitHub Enterprise Server ONLY.
github_create_organization_repository	APITOOL	Create a repository in an organization.
github_create_pages	APITOOL	Enable GitHub Pages for a repository (HTTP 201).
github_create_pull_request	APITOOL	Create a new pull request in a repository.
github_create_pull_request_review	APITOOL	Create a review on a pull request.
github_create_release	APITOOL	Create a new repository release.
github_create_repository	APITOOL	Create a repository for the authenticated user, or for an organization when 'org' is given.
github_create_review_comment	APITOOL	Create an inline review comment on a pull request's diff.
github_create_review_comment_reply	APITOOL	Reply to an existing pull-request review comment thread.
github_delete_branch	APITOOL	Delete a branch in a repository.
github_delete_branch_protection	APITOOL	Delete branch protection configuration.
github_delete_commit_comment	APITOOL	Permanently delete a commit comment.
github_delete_content	APITOOL	Delete a file in a repository.
github_delete_issue_comment	APITOOL	Permanently delete an issue/PR comment.
github_delete_organization	APITOOL	Schedule an organization for deletion. IRREVERSIBLE.
github_delete_pages	APITOOL	Disable GitHub Pages for a repository and delete the site.
github_delete_release	APITOOL	Delete a repository release.
github_delete_repo_secret	APITOOL	Delete a repository Actions secret.
github_delete_repository	APITOOL	Delete a repository.
github_delete_review_comment	APITOOL	Permanently delete a pull-request review comment.
github_delete_workflow_run	APITOOL	Delete a workflow run.
github_get_branch	APITOOL	Get a single branch in a repository.
github_get_branch_protection	APITOOL	Get branch protection configuration.
github_get_branches	APITOOL	List branches for a repository.
github_get_collaborators	APITOOL	List collaborators for a repository.
github_get_commit	APITOOL	Get a single commit in a repository.
github_get_commit_comment	APITOOL	Get a single commit comment.
github_get_commits	APITOOL	List commits for a repository.
github_get_contents	APITOOL	Get contents of a file or directory in a repository.
github_get_dependabot_alert	APITOOL	Get a single Dependabot alert.
github_get_dependabot_alerts	APITOOL	List Dependabot alerts for a repository.
github_get_issue	APITOOL	Get a single issue in a repository.
github_get_issue_comment	APITOOL	Get a single issue/PR comment.
github_get_issues	APITOOL	List issues for a repository.
github_get_org_dependabot_alerts	APITOOL	List Dependabot alerts for an entire organization.
github_get_org_members	APITOOL	List members for an organization.
github_get_org_repos	APITOOL	List repositories for an organization.
github_get_org_teams	APITOOL	List teams for an organization.
github_get_organization	APITOOL	Get an organization's full profile.
github_get_organization_membership	APITOOL	Get a user's organization membership (state and role).
github_get_pages	APITOOL	Get the GitHub Pages site configuration for a repository.
github_get_pages_build_latest	APITOOL	Get the latest GitHub Pages build for a repository.
github_get_pull_request	APITOOL	Get a single pull request.
github_get_pull_requests	APITOOL	List pull requests for a repository.
github_get_release	APITOOL	Get a single repository release.
github_get_releases	APITOOL	List repository releases.
github_get_repo_secret_public_key	APITOOL	Get the public key for encrypting repository Actions secrets.
github_get_repo_secrets	APITOOL	List repository Actions secrets names.
github_get_repositories	APITOOL	List repositories for the authenticated user.
github_get_repository	APITOOL	Get a specific repository.
github_get_review_comment	APITOOL	Get a single pull-request review comment.
github_get_workflow_job_logs	APITOOL	Download the plaintext logs for a single workflow job.
github_get_workflow_run	APITOOL	Get a single workflow run.
github_get_workflow_run_jobs	APITOOL	List the jobs for a workflow run (optional filter: latest/all).
github_get_workflow_runs	APITOOL	List workflow runs for a repository.
github_get_workflows	APITOOL	List workflows for a repository.
github_list_commit_comments	APITOOL	List comments on a single commit.
github_list_issue_comments	APITOOL	List comments on an issue or pull request.
github_list_organizations	APITOOL	List organizations.
github_list_pages_builds	APITOOL	List GitHub Pages builds for a repository (newest first).
github_list_repo_commit_comments	APITOOL	List every commit comment in a repository.
github_list_repo_issue_comments	APITOOL	List every issue/PR comment in a repository.
github_list_repo_review_comments	APITOOL	List every pull-request review comment in a repository.
github_list_review_comments	APITOOL	List review (inline code) comments on a pull request.
github_merge_pull_request	APITOOL	Merge a pull request (merge_method is merge, squash, or rebase).
github_remove_collaborator	APITOOL	Remove a collaborator from a repository.
github_remove_organization_member	APITOOL	Remove a user from an organization (repositories access included).
github_request_pages_build	APITOOL	Request a fresh GitHub Pages build without pushing a commit.
github_request_reviewers	APITOOL	Request individual and/or team reviewers on a pull request.
github_rerun_workflow_run	APITOOL	Re-run a workflow run.
github_search_code	APITOOL	Search code using query keywords.
github_search_issues	APITOOL	Search issues using query keywords.
github_search_repositories	APITOOL	Search repositories using query keywords.
github_set_organization_membership	APITOOL	Add a user to an organization or update their role.
github_trigger_workflow_dispatch	APITOOL	Trigger a workflow dispatch event.
github_update_branch_protection	APITOOL	Update branch protection configuration.
github_update_commit_comment	APITOOL	Edit a commit comment.
github_update_content	APITOOL	Update a file in a repository.
github_update_dependabot_alert	APITOOL	Update the state of a Dependabot alert.
github_update_issue	APITOOL	Update an issue in a repository.
github_update_issue_comment	APITOOL	Edit an issue/PR comment.
github_update_organization	APITOOL	Update an organization's profile and member settings.
github_update_pages	APITOOL	Update the GitHub Pages configuration for a repository.
github_update_pull_request	APITOOL	Update a pull request.
github_update_release	APITOOL	Update (PATCH) a repository release.
github_update_repository	APITOOL	Update a repository.
github_update_review_comment	APITOOL	Edit a pull-request review comment.

17 action-routed tool(s) · 95 verbose 1:1 tool(s). Each is enabled unless its <DOMAIN>TOOL toggle is set false; MCP_TOOL_MODE selects the surface (intent default — the six verb-tools, granular set loaded on demand · condensed action-routed · verbose 1:1 · both). Auto-generated — do not edit.

Detailed tool schemas, parameter shapes, and validation constraints are preserved in docs/usage.md.

Dynamic Tool Selection & Visibility

This MCP server supports dynamic toolset selection and visibility filtering at runtime. This allows the operator to restrict the set of exposed tools to prevent blowing up the LLM's context window.

The operator can configure tool filtering via multiple input channels:

• CLI Arguments: Pass --tools or --toolsets (or their disabled counterparts --disabled-tools and --disabled-toolsets) during startup.
• Environment Variables: Define standard environment variables:
  • MCP_ENABLED_TOOLS / MCP_DISABLED_TOOLS
  • MCP_ENABLED_TAGS / MCP_DISABLED_TAGS
• HTTP SSE Request Headers: Pass custom headers during transport initialization:
  • x-mcp-enabled-tools / x-mcp-disabled-tools
  • x-mcp-enabled-tags / x-mcp-disabled-tags
• HTTP SSE Request Query Parameters: Append query parameters directly to the operator's transport connection URL:
  • ?tools=tool1,tool2
  • ?tags=tag1

When query strings or parameters are supplied, an LLM-free Knowledge Graph resolution layer (using DynamicToolOrchestrator) matches query intents against known tool tags, names, or descriptions, with safe fallback and automated 24-hour background cache refreshing.

---

MCP Configuration Examples

Install the connector-focused [mcp] extra. Examples use github-agent[mcp] to add FastMCP / FastAPI through scion-sdk; the required Scion SDK core still carries epistemic-graph[full]. The [agent-runtime] extra additionally enables model orchestration.

stdio Transport (local IDEs — Cursor, Claude Desktop, VS Code)

{
  "mcpServers": {
    "github-mcp": {
      "command": "uvx",
      "args": [
        "--from",
        "github-agent[mcp]",
        "github-mcp"
      ],
      "env": {
        "MCP_TOOL_MODE": "intent",
        "ACTIONTOOL": "True",
        "BRANCHTOOL": "True",
        "COLLABORATORTOOL": "True",
        "COMMENTTOOL": "True",
        "COMMITTOOL": "True",
        "CONTENTTOOL": "True",
        "DEPENDABOTTOOL": "True",
        "GITHUB_ALLOW_DESTRUCTIVE": "False",
        "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
        "GITHUB_HTTP_READ_TIMEOUT": "30",
        "GITHUB_TOKEN": "your_github_token_here",
        "GITHUB_URL": "https://api.github.com",
        "GRAPHQLTOOL": "True",
        "INGESTTOOL": "True",
        "ISSUETOOL": "True",
        "ORGTOOL": "True",
        "PULLTOOL": "True",
        "RELEASETOOL": "True",
        "REPOTOOL": "True",
        "SEARCHTOOL": "True"
      }
    }
  }
}

Runtime references require an alias-aware launcher such as Arbora. Other launchers must omit those entries and inject the resolved values through their own runtime secret boundary.

Streamable-HTTP Transport (networked / production)

{
  "mcpServers": {
    "github-mcp": {
      "command": "uvx",
      "args": [
        "--from",
        "github-agent[mcp]",
        "github-mcp",
        "--transport",
        "streamable-http",
        "--port",
        "8000"
      ],
      "env": {
        "TRANSPORT": "streamable-http",
        "HOST": "127.0.0.1",
        "PORT": "8000",
        "MCP_TOOL_MODE": "intent",
        "ACTIONTOOL": "True",
        "BRANCHTOOL": "True",
        "COLLABORATORTOOL": "True",
        "COMMENTTOOL": "True",
        "COMMITTOOL": "True",
        "CONTENTTOOL": "True",
        "DEPENDABOTTOOL": "True",
        "GITHUB_ALLOW_DESTRUCTIVE": "False",
        "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
        "GITHUB_HTTP_READ_TIMEOUT": "30",
        "GITHUB_TOKEN": "your_github_token_here",
        "GITHUB_URL": "https://api.github.com",
        "GRAPHQLTOOL": "True",
        "INGESTTOOL": "True",
        "ISSUETOOL": "True",
        "ORGTOOL": "True",
        "PULLTOOL": "True",
        "RELEASETOOL": "True",
        "REPOTOOL": "True",
        "SEARCHTOOL": "True"
      }
    }
  }
}

Alternatively, connect to a pre-deployed Streamable-HTTP instance by url:

{
  "mcpServers": {
    "github-mcp": {
      "url": "http://localhost:8000/github-mcp/mcp"
    }
  }
}

Run a reviewed container image as a least-privilege stdio child (no listener or published port):

docker run -i --rm \
  --read-only \
  --cap-drop=ALL \
  --security-opt=no-new-privileges \
  --pids-limit=256 \
  --tmpfs /tmp:rw,noexec,nosuid,nodev,size=64m \
  -e TRANSPORT=stdio \
  -e MCP_TOOL_MODE=intent \
  -e ACTIONTOOL=True \
  -e BRANCHTOOL=True \
  -e COLLABORATORTOOL=True \
  -e COMMENTTOOL=True \
  -e COMMITTOOL=True \
  -e CONTENTTOOL=True \
  -e DEPENDABOTTOOL=True \
  -e GITHUB_ALLOW_DESTRUCTIVE=False \
  -e GITHUB_HTTP_CONNECT_TIMEOUT=10 \
  -e GITHUB_HTTP_READ_TIMEOUT=30 \
  -e GITHUB_TOKEN=your_github_token_here \
  -e GITHUB_URL=https://api.github.com \
  -e GRAPHQLTOOL=True \
  -e INGESTTOOL=True \
  -e ISSUETOOL=True \
  -e ORGTOOL=True \
  -e PULLTOOL=True \
  -e RELEASETOOL=True \
  -e REPOTOOL=True \
  -e SEARCHTOOL=True \
  registry.example.invalid/github-agent@sha256:<digest> github-mcp

For containerized network HTTP, supply an authenticated TLS ingress (or direct server TLS), exact MCP_ALLOWED_HOSTS, and an exact trusted-proxy CIDR policy through the operator-owned deployment profile. The generator does not emit an unauthenticated non-loopback listener.

Auto-generated from the code-read env surface (MCP_TOOL_MODE + package vars) — do not edit.

Additional Deployment Options

github-agent can run as a local stdio process or container, or behind a remote network boundary. The Deployment guide carries the detailed transport contract.

• Local container — launch a reviewed immutable image as a least-privilege stdio child with no listener or published port.
• Remote URL — connect through an operator-supplied authenticated HTTPS ingress. Keep its URL, outbound identity references, trust profile, and exact MCP_ALLOWED_HOSTS in AgentConfig.

---

Environment Variables

Package environment variables

Variable	Example	Description
HOST	0.0.0.0
PORT	8000
TRANSPORT	stdio	options: stdio, streamable-http, sse
ENABLE_OTEL	True
OTEL_EXPORTER_OTLP_ENDPOINT	http://localhost:8080/api/public/otel
OTEL_EXPORTER_OTLP_PUBLIC_KEY	secret-injected
OTEL_EXPORTER_OTLP_SECRET_KEY	secret-injected
OTEL_EXPORTER_OTLP_PROTOCOL	http/protobuf
EUNOMIA_TYPE	none	options: none, embedded, remote
EUNOMIA_POLICY_FILE	mcp_policies.json
EUNOMIA_REMOTE_URL	http://eunomia-server:8000
GITHUB_URL	https://api.github.com
TLS_PROFILE	private-ca	AgentConfig named transport profile
TLS_PROFILE_REF	secret://transport/provider	Direct runtime profile reference
TLS_PROFILES_REF	secret://transport/catalog	Named runtime profile catalog
GITHUB_ALLOW_DESTRUCTIVE	False	Allow destructive (delete/force) operations
GITHUB_HTTP_CONNECT_TIMEOUT	10	HTTP client timeouts (seconds)
GITHUB_HTTP_READ_TIMEOUT	30
DEBUG	False
PYTHONUNBUFFERED	1
GITHUB_TOKEN	secret-injected
ACTIONTOOL	True	These names match the authoritative "Toggle Env Var" column in the README MCP tools table (condensed action-routed surface).
BRANCHTOOL	True
COLLABORATORTOOL	True
COMMENTTOOL	True
COMMITTOOL	True
CONTENTTOOL	True
DEPENDABOTTOOL	True
GRAPHQLTOOL	True
INGESTTOOL	True
ISSUETOOL	True
ORGTOOL	True
PULLTOOL	True
RELEASETOOL	True
REPOTOOL	True
SEARCHTOOL	True

Inherited scion-sdk variables (apply to every connector)

Variable	Example	Description
MCP_TOOL_MODE	intent	Tool surface: intent | condensed | verbose | both
MCP_ENABLED_TOOLS	—	Comma-separated tool allow-list
MCP_DISABLED_TOOLS	—	Comma-separated tool deny-list
MCP_ENABLED_TAGS	—	Comma-separated tag allow-list
MCP_DISABLED_TAGS	—	Comma-separated tag deny-list
MCP_CLIENT_AUTH	—	Outbound MCP child auth: oidc-client-credentials | basic | none
OIDC_CLIENT_ID	—	OIDC client id (service-account auth)
OIDC_CLIENT_SECRET_REF	secret://identity/oidc-client-secret	Runtime secret reference for the OIDC service account
MCP_BASIC_AUTH_USERNAME	—	HTTP Basic username (MCP_CLIENT_AUTH=basic)
MCP_BASIC_AUTH_PASSWORD_REF	secret://identity/mcp-basic-password	Runtime secret reference for HTTP Basic auth (MCP_CLIENT_AUTH=basic)
MCP_URL	http://localhost:8000/mcp	URL of the MCP server the agent connects to
PROVIDER	openai	LLM provider for the agent
MODEL_ID	gpt-4o	Model id for the agent
ENABLE_WEB_UI	True	Serve the AG-UI web interface

36 package + 14 inherited variable(s). Auto-generated from .env.example + the shared scion-sdk set — do not edit.

Every variable the server reads.

Connection & Credentials

Variable	Description	Default
GITHUB_URL	GitHub REST API base URL (use the operator's GitHub Enterprise Server URL for self-hosted)	https://api.github.com
GITHUB_TOKEN	GitHub Personal Access Token / OAuth token (Authorization: Bearer <token>)	—
TLS_PROFILE / TLS_PROFILE_REF	AgentConfig transport profile selector; peer verification is mandatory	—

MCP server / transport

Variable	Description	Default
TRANSPORT	stdio, streamable-http, or sse	stdio
HOST	Bind host (HTTP transports)	0.0.0.0
PORT	Bind port (HTTP transports)	8000
MCP_TOOL_MODE	Tool surface: condensed, verbose, or both	condensed
MCP_ENABLED_TOOLS / MCP_DISABLED_TOOLS	Comma-separated tool allow/deny list	—
MCP_ENABLED_TAGS / MCP_DISABLED_TAGS	Comma-separated tag allow/deny list	—
DEBUG	Verbose logging	False
PYTHONUNBUFFERED	Unbuffered stdout (recommended in containers)	1

Tool surface

The tool surface is the typed per-operation tools; there are no per-domain toggles.

Telemetry & governance

Variable	Description	Default
ENABLE_OTEL	Enable OpenTelemetry export	True
OTEL_EXPORTER_OTLP_ENDPOINT	OTLP collector endpoint	—
OTEL_EXPORTER_OTLP_PUBLIC_KEY / OTEL_EXPORTER_OTLP_SECRET_KEY	OTLP auth keys	—
OTEL_EXPORTER_OTLP_PROTOCOL	OTLP protocol (e.g. http/protobuf)	—
EUNOMIA_TYPE	Authorization mode: none, embedded, remote	none
EUNOMIA_POLICY_FILE	Embedded policy file	mcp_policies.json
EUNOMIA_REMOTE_URL	Remote Eunomia server URL	—

Agent CLI (full [agent] runtime only)

Variable	Description	Default
MCP_URL	URL of the MCP server the agent connects to	http://localhost:8000/mcp
PROVIDER	LLM provider (e.g. openai)	openai
MODEL_ID	Model id (e.g. gpt-4o)	gpt-4o
ENABLE_WEB_UI	Serve the AG-UI web interface	True

See .env.example for a copy-paste starting point.