github_set_branch_protection

What github_set_branch_protection does on Github

AI agents use github_set_branch_protection to create or update resources in Github, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Github environment.

Why github_set_branch_protection is rated Medium

Setting branch protection rules modifies repository configuration in a reversible manner (rules can be changed or removed later). This is a Write operation because it creates or modifies repository settings. Severity is high because misconfiguring branch protection could weaken security controls, prevent legitimate merges, or lock out development workflows, affecting repository operations significantly.

From the tool's definition Tool name 'github_set_branch_protection' indicates modification of repository branch protection settings. Server description mentions 'repository management' and the context of related tools (archive_repo, audit_repo, batch_commit, workflow operations)…

The rule that runs github_set_branch_protection safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Github, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For github_set_branch_protection, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "github_set_branch_protection": {
      "limits": [
        {
          "counter": "github_set_branch_protection_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about github_set_branch_protection