// SCAN REPORT

GitHub API MCP Server

26 tools. 11 can modify or destroy data without limits.

11 write tools that can modify data. Rate limits recommended.

Last updated:

11 can modify or destroy data
15 read-only
26 tools total
// TOOL MAP
Read (15) Write / Execute (11) Destructive / Financial (0)
// WHAT CAN GO WRONG
✕

Write operations (add_issue_comment, create_branch, create_issue) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

One command. Full control.

Intercept sits between your agent and GitHub API MCP Server. Every tool call checked against your policy before it executes — so your agent can do its job without breaking things.

npx -y @policylayer/intercept scan -- npx -y @lowkeyrd/servers
Scans every tool. Generates a policy. Starts enforcing.
Works with Claude Code · Cursor · Claude Desktop · Windsurf · any MCP client
// RECOMMENDED RULES
Rate limit write operations
add_issue_comment:
  rules:
    - rate_limit: 30/hour

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
fork_repository:
  rules:
    - rate_limit: 60/minute

Controls API costs and prevents retry loops from exhausting upstream rate limits.

// ALL 26 GITHUB API MCP SERVER TOOLS
WRITE 11 tools
Write add_issue_comment Write create_branch Write create_issue Write create_or_update_file Write create_pull_request Write create_pull_request_review Write create_repository Write merge_pull_request Write push_files Write update_issue Write update_pull_request_branch
READ 15 tools
Read fork_repository Read get_file_contents Read get_issue Read get_pull_request Read get_pull_request_comments Read get_pull_request_files Read get_pull_request_reviews Read get_pull_request_status Read list_commits Read list_issues Read list_pull_requests Read search_code Read search_issues Read search_repositories Read search_users
// FAQ
How do I prevent bulk modifications through GitHub API MCP Server? +

The GitHub API MCP Server server has 11 write tools including add_issue_comment, create_branch, create_issue. Set rate limits in your policy file -- for example, rate_limit: 10/hour prevents an agent from making more than 10 modifications per hour. Intercept enforces this at the transport layer.

How many tools does the GitHub API MCP Server MCP server expose? +

26 tools across 2 categories: Read, Write. 15 are read-only. 11 can modify, create, or delete data.

How do I add Intercept to my GitHub API MCP Server setup? +

One line change. Instead of running the GitHub API MCP Server server directly, prefix it with Intercept: intercept -c lowkeyrd-servers.yaml -- npx -y @lowkeyrd/servers. Download a pre-built policy from policylayer.com/policies/lowkeyrd-servers and adjust the limits to match your use case.

policylayer/intercept

Control every MCP tool call
your agent makes.

Set budgets, approvals, and hard limits across MCP servers.

npx -y @policylayer/intercept init
Protect your agent in 30 seconds. Scans your MCP config and generates enforcement policies for every server.
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.