// SCAN REPORT

Git Steer

83 tools. 40 can modify or destroy data without limits.

8 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

40 can modify or destroy data

43 read-only

83 tools total

Community server · catalogue entry verified 30/06/2026

How to control Git Steer ↓

TOOL MAP

What Git Steer exposes to your agents

Read (43) Write / Execute (32) Destructive / Financial (8)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Git Steer tools

Destructive · Critical repo_scrub_history This tool irreversibly modifies git history by rewriting commits and force-pushing changes. Destructive · High branch_reap The tool explicitly performs deletion, which is an irreversible destructive action. Destructive · High config_remove_repo Removing a repository from management is an irreversible action that cannot be undone without manual intervention and reconfiguration. Destructive · High fabric_git_delete_branch Branch deletion is irreversible in normal git workflows.

40 of Git Steer's 83 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Git Steer

PolicyLayer is an MCP gateway — it sits between your AI agents and Git Steer, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "branch_reap": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "actions_secrets": {
    "limits": [
      {
        "counter": "actions_secrets_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "actions_workflows": {
    "limits": [
      {
        "counter": "actions_workflows_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Git Steer — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GIT STEER →

Instant setup, no code required.

FULL CATALOGUE

All 83 Git Steer tools

DESTRUCTIVE 8 tools

Destructive branch_reap Delete stale or merged branches Destructive config_remove_repo Remove a repository from managed repos Destructive fabric_cve_compact [git-fabric] Compact the CVE queue by removing resolved entries older than the retention period. Destructive fabric_git_delete_branch [git-fabric] Delete a branch. Destructive git_steer_branch_reap Delete stale merged branches from a repository. Destructive repo_archive Archive a repository Destructive repo_delete Permanently delete a repository. Requires confirmation. Destructive repo_scrub_history Purge sensitive files from all git history using git-filter-repo. Clones the repo as a mirror, removes specifi

EXECUTE 6 tools

Execute actions_trigger Manually trigger a workflow Execute cert_renew Trigger certificate renewal for expiring certificates. Deletes the certificate Secret to force cert-manager to Execute code_quality_sweep Run linters and SAST tools (ESLint, Ruff, gosec, Bandit) on a repository via GitHub Actions. Auto-detects lang Execute code_review Run AI-powered code review using CodeRabbit CLI. Reviews changes in a local git repository. Execute git_steer_actions_trigger Trigger a GitHub Actions workflow dispatch event. Execute security_fix_pr Dispatch a GitHub Actions workflow to fix security vulnerabilities (no local code needed - runs in ephemeral c

WRITE 26 tools

Write actions_secrets Manage Actions secrets Write branch_protect Apply branch protection rules Write config_add_repo Add a repository to managed repos Write dashboard_generate Generate a static analytics dashboard with SVG charts showing security metrics, MTTR, severity breakdown, and Write fabric_git_commit_files [git-fabric] Commit one or more files to a branch via the GitHub Git Data API. Write fabric_git_create_branch [git-fabric] Create a new branch from an existing branch. Write fabric_git_create_pull_request [git-fabric] Open a pull request. Write fabric_git_merge_pull_request [git-fabric] Merge a pull request. Write git_steer_branch_protect Apply branch protection rules to a repository branch. Write git_steer_pr_create Open a pull request. Write git_steer_pr_merge Merge a pull request. Write git_steer_repo_archive Archive a GitHub repository (read-only, reversible). Write git_steer_repo_commit Commit one or more files to a branch via the GitHub API. Can create a PR from the new branch. Write git_steer_repo_create Create a new GitHub repository. Write git_steer_repo_settings Update repository settings (description, homepage, visibility, etc.). Write oomkill_remediate Auto-bump resource limits for OOMKilled pods by creating a PR to the GitOps repo. Calculates new limits as a m Write pr_dedup_create Create a PR only if no open PR with the same title prefix exists. If a duplicate is found, returns the existin Write repo_commit Commit files directly to a repository via GitHub API (no local clone needed). Supports multiple files in a sin Write repo_create Create a new repository Write repo_settings Update repository settings Write security_dismiss Dismiss a security alert with reason Write security_enforce Ensure Dependabot vulnerability alerts and automated security fixes are enabled on all managed repos (or a spe Write slack_configure Configure Slack webhook URL for notifications. Stores in state repo config. Write slack_notify Send a notification to a Slack channel via webhook. Used for PR events, alerts, and remediation updates. Write steer_sync Force sync state to GitHub Write vex_set Set OpenVEX status on a CVE finding (ADR-004). Persisted to the git-steer-state _vex store. not_affected requi

READ 43 tools

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Git Steer

Can an AI agent delete data through the Git Steer MCP server? +

Yes. The Git Steer server exposes 8 destructive tools including branch_reap, config_remove_repo, fabric_cve_compact. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Git Steer? +

The Git Steer server has 26 write tools including actions_secrets, branch_protect, config_add_repo. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Git Steer.

How many tools does the Git Steer MCP server expose? +

83 tools across 4 categories: Destructive, Execute, Read, Write. 43 are read-only. 40 can modify, create, or delete data.

How do I enforce a policy on Git Steer? +

Register the Git Steer MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Git Steer tool call.

Deterministic rules across all 83 Git Steer tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GIT STEER →

Instant setup, no code required.

83 Git Steer tools catalogued and risk-classified — across an index of 43,000+ MCP servers.