Back to Home
scopweb icon

mcp-go-github

Verified Safe

by scopweb

Overview

A Go-based MCP server that connects GitHub to Claude Desktop, enabling direct local Git and GitHub API repository operations from Claude's interface.

Installation

Run Command
./github-mcp-modular --profile personal

Environment Variables

  • GITHUB_TOKEN

Security Notes

The project demonstrates a strong commitment to security with a dedicated `test/security` suite that includes dependency vulnerability scanning, code security analysis, and module integrity verification. Explicit tests for CWE-22 (Path Traversal) and CWE-78 (Command Injection) are present. The README.md and CHANGELOG.md confirm the implementation of these protections, input validation, and argument injection prevention. Go's built-in memory safety, type safety, and bounds checking are leveraged. Credentials (`GITHUB_TOKEN`) are handled via environment variables. The primary mechanism for local Git operations uses `os/exec.Command`, which is generally safer than direct shell execution. Overall, a high level of security awareness and implementation is evident.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassLow
Avg Tokens5
Stars0
Forks0
Last Update2025-12-01

Tags

GitHubGoVersion ControlAutomationDeveloper Tools