GithubFetcher
Verified Safeby Cookee24
Overview
This server provides a focused set of GitHub-read endpoints to allow large models to access code files and metadata efficiently, minimizing context noise.
Installation
cargo run -- --token-env GITHUB_AUTH_TOKENEnvironment Variables
- GITHUB_AUTH_TOKEN
Security Notes
The server uses `reqwest` for secure HTTPS communication with the GitHub API. It correctly handles GitHub Personal Access Tokens (PATs) via environment variables or CLI arguments, avoiding hardcoded secrets. Input parameters like line ranges are parsed safely. There is no `eval` or similar dynamic code execution. The ability to override `--api-base` could be a risk if pointed to a malicious endpoint, but this is a configuration choice, not a code vulnerability.
Similar Servers
gh-mcp
A GitHub CLI extension that runs the Model Context Protocol (MCP) server in a Docker container using existing `gh` authentication to provide GitHub context to AI models/agents.
codex-mcp-rs
Acts as an MCP server wrapping the Codex CLI for high-performance AI-assisted coding tasks.
tenets
Serves as a Model Context Protocol (MCP) server for AI coding assistants, automatically finding, ranking, and aggregating relevant codebase files for AI prompts, and providing code intelligence tools.
kodegen
KODEGEN.ᴀɪ is an ultimate MCP (Model Context Protocol) auto-coding toolset, providing a Rust-native server with elite tools for professional, autonomous code generation and context-efficient LLM interactions.