GitHub
Generally AvailableGitHub MCP Server enables AI agents to interact with repositories, issues, pull requests, and code through secure OAuth authentication with fine-grained permission controls.
- Developer Tools
- Version Control
- CI/CD
- Authentication
- OAuth 2.0
- Hosting
- Vendor-hosted endpoint
- Required scopes
- 6
- Data actions
- Read and write
How it works
Every agent request passes through Ferentin policy before it reaches GitHub.
- AI agentAsks for something
- Ferentin policies
- Audit logging
- Fine grained permissions
- Secret scanning
- GitHub MCP serverAuthorized connection
- Governed resultMasked, logged, returned
What agents can do
92 tools · you choose which ones agents may callSearch and browse what exists, without opening the content itself.
- List GitHub Actions workflows in a repository
- GitHub Support Docs Search
- List branches
- List code scanning alerts
- List commits
- List Copilot Spaces
- List dependabot alerts
- List discussion categories
- List discussions
- List Gists
- List global security advisories
- List issue fields
- List available issue types
- List issues
- List labels from a repository
- List notifications
- List org repository security advisories
- List pull requests
- List releases
- List repository security advisories
- List secret scanning alerts
- List starred repositories
- List tags
- List GitHub Projects resources
- Search code
- Search commits
- Search issues
- Search organizations
- Search pull requests
- Search repositories
- Search users
- Semantic Issue Similarity Search
- Semantic Issues Search
Permissions requested
The OAuth 2.0 scopes GitHub asks you to approve when you connect.
| Scope | Access |
|---|---|
| repo | Not rated |
| read:org | Read |
| read:user | Read |
| user:email | Not rated |
| read:project | Read |
| workflow | Not rated |
Before you connect
- Fine-grained PATs are recommended over classic tokens for better security and scoping.
- The GitHub MCP Server can be self-hosted via Docker (ghcr.io/github/github-mcp-server) or used via GitHub's hosted endpoint.
- Default toolsets: context, repos, issues, pull_requests, users. Additional toolsets can be enabled on the server.
- Some tools (Copilot-related) require a GitHub Copilot subscription.
2 more technical notes
- GitHub Enterprise Server is supported via the GITHUB_HOST environment variable on the server.
- Tool scoping is path-based, not query-param: append '/x/{toolset}' to the endpoint to load a single toolset (e.g. /x/repos), '/x/all' for everything, '/x/default' for the default set, and '/readonly' to restrict to read-only tools (combinable: /x/repos/readonly). Selecting multiple specific toolsets at once needs the X-MCP-Toolsets header, which isn't configurable per-instance here. See url_options.
About GitHub
GitHub is the world's leading software development platform, offering Git-based version control, code review, project management, and CI/CD through GitHub Actions.
Frequently asked about GitHub
- What can AI agents do with GitHub through Ferentin?
- Ferentin exposes 92 GitHub MCP tools to your AI agents, grouped as Discover (33 tools), Access (25 tools), Manage (21 tools) and Collaborate (6 tools). Every call is checked against your Ferentin policies before it reaches GitHub.
- How is GitHub access secured?
- Requests through the GitHub integration are covered by audit logging, fine grained permissions and secret scanning. These controls are applied by Ferentin, not by GitHub, so they hold across every connected agent.
- What permissions does the GitHub integration require?
- The GitHub integration requests 6 OAuth 2.0 scopes: repo; read:org (read access); read:user (read access); user:email; read:project (read access); workflow
- How do I connect GitHub to Ferentin?
- Open the Ferentin admin console, add GitHub as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
- Is the GitHub integration generally available?
- Yes. The GitHub integration is generally available on Ferentin, including the free tier.
