Mcp Integration Github — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Integration Github (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A production-ready Model Context Protocol (MCP) Server built with Python that enables AI assistants and MCP clients to interact with GitHub repositories through the GitHub REST API.
This project demonstrates how to build a custom MCP server capable of performing GitHub operations such as listing repositories, retrieving repository information, managing issues, and extending to pull requests, workflows, and code management.
┌─────────────────────┐
│ MCP Client │
│ (Inspector / AI) │
└──────────┬──────────┘
│
▼
┌─────────────────────┐
│ GitHub MCP Server │
│ (Python) │
└──────────┬──────────┘
│
▼
┌─────────────────────┐
│ GitHub REST API │
└──────────┬──────────┘
│
▼
┌─────────────────────┐
│ GitHub Account │
└─────────────────────┘github-mcp/
│
├── server.py
├── .env
├── pyproject.toml
├── uv.lock
├── .gitignore
└── README.mdGenerate a Personal Access Token from:
https://github.com/settings/tokens
Recommended permissions:
Repository Access
Issues: Read & Write
Contents: Read
Pull Requests: Read & WriteCreate a .env file:
GITHUB_TOKEN=your_github_token_hereClone the repository:
git clone <repository-url>
cd github-mcpInitialize project:
uv initInstall dependencies:
uv add mcp requests python-dotenvStart the MCP server:
uv run server.pyThe server will wait for MCP client connections.
Start MCP Inspector:
npx @modelcontextprotocol/inspectorOpen:
http://localhost:6274Connection Settings:
Transport : STDIO
Command:
uv
Arguments:
run server.pyClick Connect.
Returns all repositories accessible by the authenticated user.
{}[
{
"name": "github-mcp",
"full_name": "username/github-mcp",
"private": false
}
]Returns details for a specific repository.
{
"owner": "username",
"repo": "github-mcp"
}{
"name": "github-mcp",
"description": "GitHub MCP Server",
"stars": 10,
"forks": 2
}User
│
▼
MCP Client
│
▼
Tool Call
│
▼
GitHub MCP Server
│
▼
GitHub REST API
│
▼
Response ReturnedThis project demonstrates:
MIT License
Built as a learning and production-ready MCP project for understanding MCP architecture, GitHub integrations, and AI tooling ecosystems.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.