# github_list_pull_requests List pull requests for a repository Agent View of the PolicyLayer registry record for `github_list_pull_requests`. HTML page: https://policylayer.com/tools/io-github-alifanov-scopegate/github-list-pull-requests ## Facts - Tool: `github_list_pull_requests` - Server: ScopeGate (`https://mcp.scopegate.cloud/{api_key}`) — https://policylayer.com/tools/io-github-alifanov-scopegate.md - Homepage: https://github.com/alifanov/scopegate - Risk category: Read (Low risk) - Registry record: grade F, identity unverified - Server rate-limited: no - Parameters: 0 - Recommended policy verdict: Allowed ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "github_list_pull_requests", "arguments": {} } } ``` ## Why github_list_pull_requests is rated Low Listing pull requests is a read-only operation that retrieves metadata about existing pull requests. It does not create, modify, delete, or execute any actions. The blast radius of misuse is minimal — an agent could enumerate pull requests but cannot alter repository state or trigger external actions. From the tool's own definition: "Tool name contains 'list' and description states 'List pull requests for a repository' — these are query operations that retrieve data without modification or side effects." ## Use case AI agents call github_list_pull_requests to retrieve information from ScopeGate without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere. ## Recommended policy (PolicyLayer) Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches ScopeGate: ```json { "version": "1", "default": "deny", "tools": { "github_list_pull_requests": {} } } ``` ## Other tools on ScopeGate (384) - `airtable_delete_record` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/airtable-delete-record.md - `calendar_delete_event` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/calendar-delete-event.md - `calendly_cancel_event` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/calendly-cancel-event.md - `drive_delete_file` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/drive-delete-file.md - `email_delete_message` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/email-delete-message.md - `googleAds_remove_extension` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googleads-remove-extension.md - `googleAds_remove_keyword` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googleads-remove-keyword.md - `googleAds_remove_negative_keyword` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googleads-remove-negative-keyword.md - `googleTagManager_delete_container` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-container.md - `googleTagManager_delete_environment` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-environment.md - `googleTagManager_delete_folder` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-folder.md - `googleTagManager_delete_tag` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-tag.md - `googleTagManager_delete_trigger` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-trigger.md - `googleTagManager_delete_user_permission` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-user-permission.md - `googleTagManager_delete_variable` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-variable.md - `googleTagManager_delete_version` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-version.md - `googleTagManager_delete_workspace` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-workspace.md - `linkedin_delete_post` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/linkedin-delete-post.md - `notion_delete_block` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/notion-delete-block.md - `salesforce_delete_record` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/salesforce-delete-record.md - `searchConsole_delete_site` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/searchconsole-delete-site.md - `searchConsole_delete_sitemap` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/searchconsole-delete-sitemap.md - `threads_delete_thread` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/threads-delete-thread.md - `twitter_delete_tweet` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/twitter-delete-tweet.md - `twitter_unbookmark_tweet` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/twitter-unbookmark-tweet.md - `youtube_delete_caption` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-caption.md - `youtube_delete_channel_section` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-channel-section.md - `youtube_delete_comment` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-comment.md - `youtube_delete_playlist` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-playlist.md - `youtube_delete_video` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-video.md - …and 354 more: https://policylayer.com/tools/io-github-alifanov-scopegate.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-alifanov-scopegate · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-alifanov-scopegate