The GitHub MCP server is GitHub's official Model Context Protocol server, launched in April 2025. It gives any MCP compatible AI tool direct access to the GitHub platform through natural language. Instead of manually navigating the web UI or writing API calls, you tell your AI agent what you need and it handles the GitHub operations.
Connection Configuration
The recommended approach is the remote HTTP server, which requires no local installation:
{
"servers": {
"github": {
"type": "http",
"url": "https://api.githubcopilot.com/mcp/"
}
}
}Authentication is handled via OAuth (browser popup) or a Personal Access Token. A local Go binary is also available for air gapped environments.Available Toolsets (20 categories, 90+ tools)
repos (default)Browse files, commits, trees, create/fork repos, manage branches, tags, releases, search code
issues (default)Create, update, search, comment on issues, manage sub issues and labels
pull_requests (default)Create, review, merge PRs, view diffs, add review comments, update branches
actionsManage workflows, trigger runs, view job logs, download artifacts
code_securityList and manage CodeQL scanning alerts for vulnerability detection
dependabotView and manage dependency vulnerability alerts across repositories
secret_protectionDetect and manage leaked credentials in your codebase
discussionsRead and interact with GitHub Discussions threads
projectsManage GitHub Projects boards, items, fields, and status updates
notificationsView and dismiss notification inbox entries
copilotTrigger the Copilot Coding Agent for autonomous development (remote only)
Toolset Configuration
Use
all to enable every toolset, or selectively add toolsets like default,actions,code_security for specific needs.Example Workflows
Issue Management"Create a new issue for the login bug we discussed, assign it to me, and add the high priority label"
PR Review"Review the open PRs in our repo, summarize the changes, and approve the ones that look good"
CI/CD Debugging"Check the latest Actions run for the main branch and tell me why it failed"
Security Audit"Find all Dependabot alerts in our org's repos and create a summary"
Full Workflow"Create a new branch, push a fix, and open a PR with a description"