// SCAN REPORT

Mcp Github

39 tools. 16 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 29 Jun 2026

16 can modify or destroy data

23 read-only

39 tools total

Community server · catalogue entry verified 29/06/2026

How to control Mcp Github ↓

TOOL MAP

What Mcp Github exposes to your agents

Read (23) Write / Execute (15) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Mcp Github tools

Destructive · High delete_webhook Webhook deletion is an irreversible action that cannot be undone without recreating the webhook. Execute · Medium ping_webhook Pinging a webhook sends an outbound HTTP request to an external endpoint, constituting an external operation/trigger. Write · Medium add_issue_comment This tool creates new comment data on a GitHub issue, which is a reversible modification. Write · Medium add_pull_request_review This tool creates new review records on pull requests, which is a reversible modification.

16 of Mcp Github's 39 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Mcp Github

PolicyLayer is an MCP gateway — it sits between your AI agents and Mcp Github, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_webhook": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_issue_comment": {
    "limits": [
      {
        "counter": "add_issue_comment_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "compare_commits": {
    "limits": [
      {
        "counter": "compare_commits_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Mcp Github — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MCP GITHUB →

Instant setup, no code required.

FULL CATALOGUE

All 39 Mcp Github tools

DESTRUCTIVE 1 tools

Destructive delete_webhook Elimina un webhook de un repositorio

EXECUTE 1 tools

Execute ping_webhook Envía un ping a un webhook para verificar que funciona

WRITE 14 tools

Write add_issue_comment Agrega un comentario a un issue Write add_pull_request_review Agrega una review (aprobación, cambios solicitados, comentario) a un pull request Write close_issue Cierra un issue Write close_pull_request Cierra un pull request sin mergearlo Write create_issue Crea un nuevo issue en un repositorio Write create_pull_request Crea un nuevo pull request en un repositorio Write create_release Crea un nuevo release en un repositorio Write create_tag Crea un tag en un repositorio (sin release) Write create_webhook Crea un nuevo webhook en un repositorio Write merge_pull_request Mergea un pull request. Soporta merge, squash y rebase Write protect_branch Protege una rama del repositorio. Requiere PRs para mergear y puede requerir aprobaciones. Write update_issue Actualiza un issue existente (título, cuerpo, estado, labels, asignados) Write update_pull_request Actualiza el título, descripción o estado de un pull request Write update_webhook Actualiza un webhook existente

READ 23 tools

Read compare_commits Compara dos commits o branches y muestra las diferencias Read get_commit Obtiene detalles de un commit específico Read get_file_content Obtiene el contenido de un archivo específico de un repositorio Read get_pull_request Obtiene información detallada de un pull request específico Read get_release Obtiene detalles de un release específico Read get_repository Obtiene información detallada de un repositorio específico Read get_user_info Obtiene información del usuario autenticado Read get_webhook Obtiene detalles de un webhook específico Read list_branches Lista las ramas de un repositorio Read list_commits Lista commits de un repositorio o branch específico Read list_issue_comments Lista los comentarios de un issue Read list_issues Lista los issues de un repositorio. Puedes filtrar por estado, etiquetas, asignado, etc. Read list_pull_request_reviews Lista todas las reviews de un pull request Read list_pull_requests Lista los pull requests de un repositorio Read list_releases Lista los releases de un repositorio Read list_repositories Lista todos los repositorios (públicos y privados) de tu cuenta de GitHub. Puedes filtrar por visibilidad, tip Read list_webhooks Lista los webhooks de un repositorio Read search_code Busca código en repositorios de GitHub. Permite encontrar archivos, funciones, clases, etc. Read search_commits Busca commits en GitHub por mensaje, autor, fecha, etc. Read search_issues Búsqueda avanzada de issues y pull requests en GitHub Read search_repositories Busca repositorios en GitHub usando la API de búsqueda Read search_users Busca usuarios en GitHub por nombre, email, ubicación, etc.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Mcp Github

Can an AI agent delete data through the Mcp Github MCP server? +

Yes. The Mcp Github server exposes 1 destructive tools including delete_webhook. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Mcp Github? +

The Mcp Github server has 14 write tools including add_issue_comment, add_pull_request_review, close_issue. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Mcp Github.

How many tools does the Mcp Github MCP server expose? +

39 tools across 3 categories: Destructive, Read, Write. 23 are read-only. 16 can modify, create, or delete data.

How do I enforce a policy on Mcp Github? +

Register the Mcp Github MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Mcp Github tool call.

Deterministic rules across all 39 Mcp Github tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MCP GITHUB →

Instant setup, no code required.

39 Mcp Github tools catalogued and risk-classified — across an index of 43,000+ MCP servers.