Is io.github.adelaidasofia/github-mcp safe to use?

io.github.adelaidasofia/github-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install io.github.adelaidasofia/github-mcp?

io.github.adelaidasofia/github-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.adelaidasofia/github-mcp?

io.github.adelaidasofia/github-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.adelaidasofia/github-mcp actively maintained?

io.github.adelaidasofia/github-mcp is actively maintained — last commit was 4 days ago.

io.github.adelaidasofia/github-mcp

Self-hosted GitHub MCP server. PAT auth, stdio transport, transport-agnostic so it works with…

GitHub

No known CVEs

MIT license

Actively maintained

Last commit 4d ago

Works with most clients

Transport: stdio, http

0 tools

Grade F

MCPpedia last refreshed this data 10h ago

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "github": {
      "env": {
        "GITHUB_TOKEN": "${GITHUB_TOKEN}"
      },
      "args": [
        "run",
        "--project",
        "/Users/<you>/.claude/github-mcp",
        "github-mcp"
      ],
      "command": "uv"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-adelaidasofia-github-mcp-adelaidasofia)](https://mcppedia.org/s/io-github-adelaidasofia-github-mcp-adelaidasofia)

Read me

What io.github.adelaidasofia/github-mcp does

Self-hosted GitHub MCP server. Personal-access-token auth, stdio transport, transport-agnostic so it works with Claude Code (any account), Codex CLI, Cursor, or any MCP-compliant client. No claude.ai OAuth dependency.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

42/100across 5 weighted dimensions

How we score →

0255075100

−58

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.adelaidasofia/github-mcp safe to use?: io.github.adelaidasofia/github-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install io.github.adelaidasofia/github-mcp?: io.github.adelaidasofia/github-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.adelaidasofia/github-mcp?: io.github.adelaidasofia/github-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.adelaidasofia/github-mcp actively maintained?: io.github.adelaidasofia/github-mcp is actively maintained — last commit was 4 days ago.

Similar servers

Others in other

View all →

Headroom95

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

62.5k 3

Pi Lean Ctx94

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.4k 6

Sigmap94

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

604 6

Brigade93

One local source for the MCP servers, tools, and memory your AI coding agents share, synced into each tool's native config with a review gate and a receipt for every change. No daemon, no lock-in.

62 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.adelaidasofia/github-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "github": {
      "env": {
        "GITHUB_TOKEN": "${GITHUB_TOKEN}"
      },
      "args": [
        "run",
        "--project",
        "/Users/<you>/.claude/github-mcp",
        "github-mcp"
      ],
      "command": "uv"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-adelaidasofia-github-mcp-adelaidasofia)](https://mcppedia.org/s/io-github-adelaidasofia-github-mcp-adelaidasofia)

Read me

What io.github.adelaidasofia/github-mcp does

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

github-mcp

Written in Python on top of FastMCP. Slots into the same install pattern as other community Python MCP servers.

Why this exists

The official github/github-mcp-server (Go, 60+ tools) is excellent if you want a kitchen-sink server tied to a single agent platform's auth flow. This one is scoped for operators who:

Switch between multiple Claude accounts, Codex CLI, Cursor, or other MCP clients and want the same GitHub auth across all of them.
Prefer a small, audited tool surface scoped to PR + repo file + Dependabot operations.
Want a Python install that lives alongside their other MCP servers.

If neither applies, run github/github-mcp-server instead — that's the right call.

Tool surface (v0.1.0)

Tool	Purpose
`health_check`	Verify the PAT is valid + report rate-limit headroom. First call when wiring up.
`list_prs`	List pull requests with state filter.
`get_pr`	Single PR with check-run status + mergeable state.
`merge_pr`	Squash/merge/rebase with optional branch delete.
`list_dependabot_alerts`	Alert sweep with severity-grouped counts.
`get_file`	Read a file via the Contents API.
`put_file`	Create or update a file via the Contents API (idempotent with SHA).

Future versions expand: workflows, releases, issues, rulesets, secret-scan alerts, branch protection, repo settings.

Secret hygiene (read this first)

v0.1.1+ reads the PAT from macOS Keychain by default. Env-var fallback is still supported for non-macOS / CI, but the Keychain path is the recommended setup because the secret never enters argv or process env — safe from ps aux, pgrep -fl, lsof, /proc/<pid>/environ, panic dumps, CI logs, debuggers, or any LLM agent running an introspection command.

# One-time setup (macOS):
security add-generic-password -s github-mcp -a "$USER" -w "<your-fine-grained-PAT>"

# Update later (e.g. after rotation):
security delete-generic-password -s github-mcp -a "$USER" 2>/dev/null
security add-generic-password -s github-mcp -a "$USER" -w "<new-PAT>"

Do NOT install with an inline --env:

# BAD — bakes the PAT into ~/.claude.json + every Claude child spawn's --mcp-config argv.
# Any pgrep / ps aux dumps it.
claude mcp add github --scope user --env GITHUB_TOKEN=github_pat_... -- <command>

# GOOD — no --env block. The server reads from Keychain at call time.
claude mcp add github --scope user -- <command>

PR/incident lineage: this hygiene path was added 2026-05-19 after a

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

42/100across 5 weighted dimensions

How we score →

0255075100

−58

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.adelaidasofia/github-mcp safe to use?: io.github.adelaidasofia/github-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install io.github.adelaidasofia/github-mcp?: io.github.adelaidasofia/github-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.adelaidasofia/github-mcp?: io.github.adelaidasofia/github-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.adelaidasofia/github-mcp actively maintained?: io.github.adelaidasofia/github-mcp is actively maintained — last commit was 4 days ago.

Similar servers

Others in other

View all →

Headroom95

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

62.5k 3

Pi Lean Ctx94

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.4k 6

Sigmap94

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

604 6

Brigade93

One local source for the MCP servers, tools, and memory your AI coding agents share, synced into each tool's native config with a review gate and a receipt for every change. No daemon, no lock-in.

62 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.adelaidasofia/github-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?