A GitHub API connection that lets a coding agent search code, read and create issues and pull requests, and manage repositories.

Use it to inspect code, track issues, review or open pull requests, and manage GitHub repositories.

It removes the need to switch to GitHub or write API calls for routine repository work.

github — MCP server for Claude Code and Codex by pr-pm

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo

git clone --depth 1 https://github.com/pr-pm/prpm

Made for: Claude Code, Codex, Cursor, Gemini CLI, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/mcp/pr-pm/prpm/github.svg)](https://agentmods.dev/mcp/pr-pm/prpm/github)

Your own site

<a href="https://agentmods.dev/mcp/pr-pm/prpm/github"><img src="https://agentmods.dev/badge/mcp/pr-pm/prpm/github.svg" alt="Measured on agentmods" height="20"></a>

Per session not measured What this adds to a session before it is invoked.

When invoked not measured Not applicable: nothing here is loaded into a session.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Security

Grade A, and why

github scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

8 near-identical copies found in the catalogue:

github — 100% identical, 0 lines differ
github — 100% identical, 0 lines differ
github — 100% identical, 0 lines differ
github — 100% identical, 0 lines differ
github — 100% identical, 0 lines differ
github — 100% identical, 0 lines differ
github — 100% identical, 0 lines differ
github-mcp — 88% identical, 2 lines differ

.mcp.json · 12 lines

What it actually says

{
  "github": {
    "command": "npx",
    "args": [
      "-y",
      "@modelcontextprotocol/server-github"
    ],
    "env": {
      "GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_TOKEN}"
    }
  }
}

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

3d ago First seen · 12 lines scan A 2517f533efe8

Subscribe to this mod's changes

github is an MCP server published in the GitHub repository pr-pm/prpm (120 stars, last pushed 2mo ago), licensed MIT. Its token cost is not measured: an MCP server costs its tool schemas, not its config file. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Claude Code Code review Git and workflow claude cursor cursor-ai-edit cursorrules package-manager

instagit

MCP server for Instagit — AI-powered Git repository analysis for coding agents. Runs locally from the instagit npm package. Needs 1 environment variable to run.

InstalabsAI/instagit · not measured

gate

One ship/no-ship verdict from aiglare, bouncer, tieline & repoctx — the unified merge gate. Runs locally from the @nugehs/gate npm package.

nugehs/gate · not measured

pr-narrator-mcp

MCP server for generating consistent commit messages and PR content based on your custom criteria. Runs locally from the pr-narrator-mcp npm package.

mhaviv/pr-narrator-mcp · not measured

docs-langchain

MCP server "docs-langchain", hosted remotely at docs.langchain.com, as configured in langchain-ai/langchain.

langchain-ai/langchain · not measured

reference-langchain

MCP server "reference-langchain", hosted remotely at reference.langchain.com, as configured in langchain-ai/langchain.