Is io.github.dockndevai/mcp-github-enterprise safe to use?

io.github.dockndevai/mcp-github-enterprise has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.github.dockndevai/mcp-github-enterprise?

io.github.dockndevai/mcp-github-enterprise supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.dockndevai/mcp-github-enterprise?

io.github.dockndevai/mcp-github-enterprise is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.dockndevai/mcp-github-enterprise actively maintained?

io.github.dockndevai/mcp-github-enterprise is actively maintained - last commit was 3 days ago.

io.github.dockndevai/mcp-github-enterprise

@dockndevai/mcp-github-enterprise

Govern GitHub Enterprise orgs, repos, rulesets, security alerts & Actions for AI agents.

558/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 3d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

MCPpedia last refreshed this data 18h ago

Edit this pageView history

io.github.dockndevai/mcp-github-enterprise is an MCP server that govern GitHub Enterprise orgs, repos, rulesets, security alerts & Actions for AI agents. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 60/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-dockndevai-mcp-github-enterprise": {
      "args": [
        "-y",
        "@dockndevai/mcp-github-enterprise"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-dockndevai-mcp-github-enterprise)](https://mcppedia.org/s/io-github-dockndevai-mcp-github-enterprise)

Read me

What io.github.dockndevai/mcp-github-enterprise does

Govern GitHub Enterprise orgs, repos, rulesets, security alerts & Actions for AI agents.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@dockndevai/mcp-github-enterprise' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

60/100across 5 weighted dimensions

How we score →

0255075100

−40

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @dockndevai/mcp-github-enterprise against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.dockndevai/mcp-github-enterprise safe to use?: io.github.dockndevai/mcp-github-enterprise has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.dockndevai/mcp-github-enterprise?: io.github.dockndevai/mcp-github-enterprise supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.dockndevai/mcp-github-enterprise?: io.github.dockndevai/mcp-github-enterprise is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.dockndevai/mcp-github-enterprise actively maintained?: io.github.dockndevai/mcp-github-enterprise is actively maintained - last commit was 3 days ago.

Similar servers

Others in ai-ml

View all →

Vibe Assistant95

A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。

169 3

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.8k 8

Bla95

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

5.5k 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.dockndevai/mcp-github-enterprise and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-dockndevai-mcp-github-enterprise": {
      "args": [
        "-y",
        "@dockndevai/mcp-github-enterprise"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-dockndevai-mcp-github-enterprise)](https://mcppedia.org/s/io-github-dockndevai-mcp-github-enterprise)

Read me

What io.github.dockndevai/mcp-github-enterprise does

Govern GitHub Enterprise orgs, repos, rulesets, security alerts & Actions for AI agents.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@dockndevai/mcp-github-enterprise' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

mcp-github-enterprise

A safe-by-default Model Context Protocol server for administering GitHub Enterprise (Cloud & Server) from an AI agent — organizations, members, teams, repositories, rulesets, security alerts, and Actions — with a built-in security-posture baseline and governance controls so an agent can help run your enterprise without being able to wreck it.

Part of the dockndevai suite of governed infrastructure MCP servers. Read-only by default · org-scoped · audited · human-confirmed.

Why

Handing an agent an admin token to GitHub is risky: one loose instruction can delete a repo, remove a member, or flip an org public. This server puts the agent behind the same controls you'd give a junior admin:

Read-only until you say otherwise. Tools above the current access mode are never advertised.
Pinned blast radius. An org allowlist and protected (read-only-forever) orgs.
Destructive ops double-gated. Admin mode ＋ an explicit delete flag ＋ a typed confirmation ＋ a human prompt. The prompt shows the tool, the exact arguments and a fingerprint; the target's version is pinned across the prompt and the action is refused if it changed; a prompt nobody answers is a refusal.
Secrets never leak. Webhook secrets and secret-scanning values are redacted before anything reaches the model.
Everything audited. A JSON line per operation to stderr.

Plus the part that makes it useful, not just safe: it ships an opinionated security baseline — assess_org_posture scores a live org and harden_org_settings applies the fix — and two operator skills (secure setup + Actions optimization).

Quick start

# Read-only, against GitHub Enterprise Cloud
GHE_TOKEN=your-token GHE_MODE=read-only npx -y @dockndevai/mcp-github-enterprise

Add to Claude Code:

claude mcp add github-enterprise -e GHE_TOKEN="your-token" -e GHE_MODE="read-only" -- npx -y @dockndevai/mcp-github-enterprise

GitHub Enterprise Server: add -e GHE_API_URL="https://HOST/api/v3". Full client configs (Cursor, Windsurf, Codex, VS Code, Claude Desktop) in docs/CLIENTS.md.

First call to run: whoami — confirms the token and base URL are wired correctly.

Configuration

Variable	Default	Purpose
`GHE_TOKEN`	—	Required. Fine-grained PAT, classic PAT, or App installation token. Least privilege.
`GHE_API_URL`	`https://api.github.com`	Cloud default. GHES: `https://HOST/api/v3`.
`GHE_ENTERPRISE`	—	Enterprise slug, for enterprise-level audit log / policy.
`GHE_MODE`	`read-only`	`read-only` → `read-write` → `admin`.
`GHE_ORG_ALLOWLIST`	(all visible)	Comma-separated orgs that may be touched. Pin this.
`GHE_PROTECTED_ORGS`	—	Orgs readable but never mutated.
`GHE_ALLOW_DELETE`	`false`	Required (with admin mode) for any destructive op.
`GHE_REQUIRE_CONFIRMATION`	`true`	Destructive ops need a typed confirmation matching the target.
`GHE_DRY_RUN`	`false`	Validate + log writes without sending them.
`GHE_AUDIT_LOG`	`true`	JSON audit line per op to stderr (also carries the approval receipts).
Interactive confirmation	(automatic)	—

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

60/100across 5 weighted dimensions

How we score →

0255075100

−40

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @dockndevai/mcp-github-enterprise against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.dockndevai/mcp-github-enterprise safe to use?: io.github.dockndevai/mcp-github-enterprise has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.dockndevai/mcp-github-enterprise?: io.github.dockndevai/mcp-github-enterprise supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.dockndevai/mcp-github-enterprise?: io.github.dockndevai/mcp-github-enterprise is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.dockndevai/mcp-github-enterprise actively maintained?: io.github.dockndevai/mcp-github-enterprise is actively maintained - last commit was 3 days ago.