An MCP (Model Context Protocol) server enabling LLMs and AI agents to interact with Git repositories. Provides tools for comprehensive Git operations including clone, commit, branch, diff, log, status, push, pull, merge, rebase, worktree, tag management, and more, via the MCP standard. STDIO & HTTP.
{
"mcpServers": {
"git-mcp-server": {
"env": {
"LOGS_DIR": "~/Developer/logs/git-mcp-server/",
"GIT_EMAIL": "casey@caseyjhand.com",
"GIT_BASE_DIR": "~/Developer/",
"GIT_USERNAME": "cyanheads",
"MCP_LOG_LEVEL": "info",
"GIT_SIGN_COMMITS": "true",
"MCP_TRANSPORT_TYPE": "stdio"
},
"args": [
"@cyanheads/git-mcp-server@latest"
],
"type": "stdio",
"command": "npx"
}
}
}An MCP (Model Context Protocol) server enabling LLMs and AI agents to interact with Git repositories. Provides tools for comprehensive Git operations including clone, commit, branch, diff, log, status, push, pull, merge, rebase, worktree, tag management, and more, via the MCP standard. STDIO & HTTP.
Is it safe?
No known CVEs for @cyanheads/git-mcp-server. 1 previously resolved.
No authentication — any process on your machine can connect.
Apache-2.0. View license →
Is it maintained?
Last commit 12 days ago. 206 stars. 2,487 weekly downloads.
Will it work with my client?
Transport: stdio, http. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.
Context cost
28 tools. ~700 tokens (0.4% of 200K). Consider loading selectively.
This server supports HTTP transport. Be the first to test it — help the community know if it works.
No open vulnerabilities. 1 fixed CVE.
git_initInitialize a new git repository
git_cloneClone a repository from a remote source
git_statusCheck the status of a repository
git_cleanClean untracked files from the repository
git_addStage changes for commit
git_commitCreate a commit with staged changes
git_diffCompare changes between versions
git_logView commit history
git_showInspect git objects
git_blameTrace authorship of file changes
Git Working DirectoryThe current session working directory, set via git_set_working_dir
git://working-directory
Git Wrap-upWorkflow protocol for completing git sessions: review, document, commit, and tag changes
This server is missing a description.If you've used it, help the community.
Add informationCVE-2025-53107Fixed@cyanheads/git-mcp-server vulnerable to command injection in several tools
### Summary A command injection vulnerability exists in the `git-mcp-server` MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possib
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.