mcp-github

mcp-github is a skill for Claude Code, Codex from scopweb/mcp-go-github. It costs 152 tokens per session (4,550 once invoked), scanned A, original, MIT.

Instructions for using an MCP server that manages Git repositories and GitHub, the code-hosting service for collaboration and review.

In plain words
What is it for?
Checking repositories, committing and syncing code, handling branches and conflicts, managing pull requests and issues, reviewing alerts, and administering GitHub settings.
Why use it?
It organizes repository, branch, pull request, issue, workflow, and administration tasks with safety rules for operations that change data.

Skill for Claude CodeCodex

Which agent this was written for is unclear — built for openclaw. Also seen: built for openclaw.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is go build -o mcp-go-github ./cmd/github-mcp-server/.

Good fit Checking repositories, committing and syncing code, handling branches and conflicts, managing pull requests and issues, reviewing alerts, and administering GitHub settings.

Compare 6 skills from other repositories ↓
Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/scopweb/mcp-go-github
agentmods
npx agentmods add skills/scopweb/mcp-go-github/mcp-github

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mcp-github

README.md
[![agentmods](https://agentmods.dev/badge/skills/scopweb/mcp-go-github/mcp-github/github.svg)](https://agentmods.dev/skills/scopweb/mcp-go-github/mcp-github)
Your own site
<a href="https://agentmods.dev/skills/scopweb/mcp-go-github/mcp-github"><img src="https://agentmods.dev/badge/skills/scopweb/mcp-go-github/mcp-github/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mcp-github

Your own site · 80×15
<a href="https://agentmods.dev/skills/scopweb/mcp-go-github/mcp-github"><img src="https://agentmods.dev/badge/skills/scopweb/mcp-go-github/mcp-github.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 152 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,550 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00152 $0.04550
Opus 5.5 $0.00061 $0.01820
Sonnet 5.5 $0.00030 $0.00910
Haiku 4.5 $0.00015 $0.00455

Measured 2mo ago against content hash 08fdb1e95f46, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

mcp-github scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/mcp-github/SKILL.md · 534 lines

How it starts

The opening of the file, as written. The whole thing — 534 lines — stays where its author put it; the contents beside it link to each section on GitHub.

MCP GitHub Skill

Use the mcp-go-github MCP server to interact with GitHub repositories, Git workflows, pull requests, issues, dashboards, and administrative operations — all through Claude Desktop via MCP protocol.

This skill provides 86 tools organized in categories: Git operations, GitHub API, dashboard, hybrid file ops, Git-free file ops, response/repair, and full admin controls with a 4-tier safety system.

When to Use

USE this skill when:

  • Managing local Git repositories (status, commit, push, pull, branch, merge, rebase)
  • Resolving merge conflicts safely with backup support
  • Creating or reviewing pull requests and issues via MCP
  • Viewing your GitHub dashboard (notifications, assigned issues, PRs to review)
  • Managing repository settings, webhooks, collaborators, or branch protection
  • Creating or updating files with hybrid Git-first/API-fallback strategy
  • Dismissing security alerts (Dependabot, Code Scanning, Secret Scanning)
  • Re-running failed GitHub Actions workflows
  • Performing administrative operations with safety controls

When NOT to Use

DON'T use this skill when:

  • Using gh CLI directly in terminal -> use the github skill instead
  • Working with non-GitHub platforms (GitLab, Bitbucket) -> different tools required
  • Doing local-only file editing without Git context -> use file tools directly
  • Complex web UI interactions (GitHub settings pages) -> use browser
  • Bulk scripting across many repos -> use gh api with scripting

Setup

1. Build the Server

# Clone and build
git clone https://github.com/scopweb/mcp-go-github.git
cd mcp-go-github
go build -o mcp-go-github ./cmd/github-mcp-server/

2. Generate GitHub Token

  1. Go to GitHub Settings > Personal Access Tokens
  2. Click "Generate new token (classic)"
  3. Select scopes:
    • repo (required) - Full control of private repositories
    • delete_repo (optional) - For repository deletion
    • workflow (optional) - For re-running GitHub Actions
    • security_events (optional) - For security alert dismissal
    • admin:repo_hook (optional) - Enhanced webhook management
    • admin:org (optional) - Team management in organizations

Read the full file on GitHub · 534 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 534 lines · 152 tokens per session scan A 08fdb1e95f46

Subscribe to this mod's changes

mcp-github is a skill published in the GitHub repository scopweb/mcp-go-github (0 stars, last pushed 2mo ago), licensed MIT. It adds 152 tokens to every session and 4,550 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

utility-pm-release-conductor

Walk the guided 6-gate release runbook (G0 readiness, G1 adversarial review, G2 version bump and CHANGELOG, G2.5 commit and re-verify, G3 tag and push, G4 post-tag hygiene) via the pm-release-conductor sub-agent. Refuses gate bypasses and tags only the re-verified SHA. Use when cutting a pm-skills release.

product-on-purpose/pm-skills · 90 tokens

deliver-release-notes

Creates user-facing release notes that communicate new features, improvements, and fixes in clear, benefit-focused language. Use when shipping updates to communicate changes to users, customers, or stakeholders.

product-on-purpose/pm-skills · 41 tokens

utility-pm-changelog-curator

Draft CHANGELOG entries from git log via the pm-changelog-curator sub-agent, applying the repo hygiene rules (describe what changed, public paths only, no attribution trailers). Returns a layered draft with a status summary for maintainer review; refuses a dirty working tree unless --committed-only is passed. Use when…

product-on-purpose/pm-skills · 80 tokens

vhs-e2e-gif

Record a test run, a TUI session, or any terminal command as a GIF with VHS and attach it to a GitHub PR as a release-hosted asset, never a repo commit. Use when asked to record an e2e run, demo a fix on a PR, attach a GIF or screen recording to a pull request, show a test passing visually, or produce a terminal…

dimetron/pi-go · 106 tokens

check-linters-before-commit

Before any commit, run linters, vet, tests, and build verification; do not commit until checks pass.

dimetron/pi-go · 30 tokens

critty

Review code changes or a document with Critty's terminal UI and address the reviewer's inline comments round by round. Use when the user or an approval workflow selects Critty; a generic review request does not count.

crittylabs/critty · 46 tokens