github_create_repo

What github_create_repo does on Github

AI agents use github_create_repo to create or update resources in Github, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Github environment.

Why github_create_repo is rated Medium

Creating a repository is a write operation that adds a new resource to GitHub. While reversible (repos can be deleted), it modifies the user's GitHub account state and can trigger cascading effects (CI/CD setup, visibility changes, team access). Severity is high because unintended repo creation could pollute the user's account, expose private code, or establish incorrect repository configurations.

From the tool's definition Tool name is 'github_create_repo' and server description states it 'Enables comprehensive GitHub operations including repository management' with 'portfolio push tool to create repos from local folders.' This clearly indicates the tool creates new…

The rule that runs github_create_repo safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Github, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For github_create_repo, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "github_create_repo": {
      "limits": [
        {
          "counter": "github_create_repo_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about github_create_repo