ghas-mcp-server
About
A Model Context Protocol server that enables querying GitHub Advanced Security (GHAS) alerts for GitHub repositories. It provides tools to list Dependabot, secret scanning, and code scanning alerts. Designed for developers and security teams using MCP-compatible editors like VS…
Details
- Author
- MCP-Mirror
- Downloads
- 200
- Categories
- Other, Automation
Jump to
Install via the VS Code install buttons or add the configuration to your MCP client. Use the npx command npx -y @rajbos/ghas-mcp-server with environment variables for authentication: either GITHUB_PERSONAL_ACCESS_TOKEN (PAT) or GITHUB_PERSONAL_ACCESS_TOKEN_USE_GHCLI (to use GitHub CLI). Ensure your PAT has three
ghas-mcp-server
MCP server to make calls to GHAS for GitHub repositories.Currently this has the following tools that are supported:
- list_dependabot_alerts: List all dependabot alerts for a repository
- list_secret_scanning_alerts: List all secret scanning alerts for a repository
- list_code_scanning_alerts: List all code scanning alerts for a repository
Make sure to add these three scopes (read only) to the configured PAT and for the correct organization as well!
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
