Github Projects Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Github Projects Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that provides tools for managing GitHub Projects V2 through Claude and other MCP clients. This server uses the GitHub GraphQL API for interacting with GitHub Projects V2.
This server can be used with any MCP client, such as Claude Desktop. Add it to your MCP client configuration (e.g., claude_desktop_config.json).
Here's an example configuration using uvx as the command runner:
{
"mcpServers": {
"github-projects": {
"command": "uvx",
"args": [
"mcp-github-projects"
],
"env": {
"GITHUB_TOKEN": "your_pat_here"
}
}
}
}Make sure to replace your_pat_here with your actual GitHub Personal Access Token.
To run the project directly from source code, follow these steps:
#### Setup
git clone [email protected]:Arclio/github-projects-mcp.git
cd github-projects-mcp uv venv
source venv/bin/activate uv pip install -e .Create a GitHub Personal Access Token and give it the necessary permissions. The required permissions are: repo, project, and read:org.
Add the token to your .env file after running this command:
cp .env.example .envThen add the following to your .env file:
export GITHUB_TOKEN=your_personal_access_tokenWhen using from source code, configure your MCP client as follows:
{
"mcpServers": {
"github-projects": {
"command": "uv",
"args": [
"--directory",
"/path/to/github-projects-mcp",
"run",
"mcp-github-projects"
],
"env": {
"GITHUB_TOKEN": "your_pat_here"
}
}
}
}Make sure to replace /path/to/github-projects-mcp and your_pat_here with your actual repository path and GitHub Personal Access Token.
list_projects: List GitHub Projects V2 for a given organization or userget_project_fields: Get fields available in a GitHub Project V2get_project_items: Get items in a GitHub Project V2 (supports filtering bystate or custom single-select fields)
create_issue: Create a new GitHub issueadd_issue_to_project: Add an existing GitHub issue to a Project V2update_project_item_field: Update a field value for a project itemcreate_draft_issue: Create a draft issue directly in a GitHub Project V2delete_project_item: Delete an item from a GitHub Project V2See tool documentation in the server code for detailed usage information.
The project is structured as follows:
src/github_projects_mcp/: Main package directoryserver.py: MCP server implementation with tool definitionsgithub_client.py: GraphQL client for GitHub API interactionsTo contribute, make sure to:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.