Skip to main content
Glama

20 Best GitHub MCP Servers, Compared (September 2026)

Updated 20 of 1,553 GitHub servers in the Glama registryRebuilt weekly

The short answer

Most developers should use GitHub MCP Server (github/github-mcp-server). It is GitHub's official server, still active with a last commit 3 days ago and 209 commits in the last 12 weeks, and it covers the common tasks: browsing code, managing issues and pull requests, and monitoring Actions workflows. If your agent's main job is exploring a repository without reading whole files, github-codemunch-mcp (jgravelle/jcodemunch-mcp) is the better fit because it uses tree-sitter AST parsing to extract signatures and summaries, with 7 tools and a last commit 0 days ago.

Whichever you choose, give it the narrowest access that still works (a read-only credential, a replica, a scratch account), and widen it only once you have watched what your agent actually asks for.

Glama operates the MCP registry these numbers are measured from, and sells MCP hosting and a gateway. No position on this page is paid for. How the registry is built.

Quick picks

  • 1GitHub MCP Server : Developers using GitHub who want AI assistants to browse code, manage issues and pull requests, and monitor Actions workflows.
  • 2github-codemunch-mcp : When an agent must explore a GitHub repository without reading whole files, it indexes symbols with tree-sitter and offers targeted retrieval.
  • 3Octocode MCP : Developers tracing code across local and GitHub/npm codebases: it combines ripgrep, LSP, GitHub PR search, and package lookup in one server.
  • 4idea-reality-mcp : Before building a new project, when an idea needs verification, it exposes idea_check to scan GitHub, npm, PyPI, Hacker News, and Stack Overflow.
  • 5Kindly Web Search MCP Server : Developers debugging cryptic errors in coding assistants who need full conversation content from StackOverflow, GitHub Issues, arXiv, and Wikipedia in one call.

Which one, for your situation

Your situationWhat to use
I need official GitHub API access for issues, PRs, and Actions.Use GitHub MCP Server (github/github-mcp-server); it is official, had a commit 3 days ago, and had 209 commits in the last 12 weeks.
My agent must explore a repo without reading whole files.Use github-codemunch-mcp (jgravelle/jcodemunch-mcp) because it indexes symbols with tree-sitter and exposes 7 tools, with a commit 0 days ago.
I need to search across GitHub and npm codebases.Use Octocode MCP (bgauryy/octocode) because it combines ripgrep, LSP, GitHub PR search, and package lookup, with 13 tools and 2,839 npm downloads in a typical week.
I need vulnerability intelligence from many sources for triage.Use cve-mcp (badchars/cve-mcp) because it unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV, exposing 41 query tools with a tool description grade A.
I need to secure an MCP server before exposing it to agents.Use pipelock (luckyPipewrench/pipelock) because it wraps any MCP server with bidirectional scanning for credential leaks and prompt injection, and had a commit 0 days ago.
I manage GitHub Projects V2 sprints and milestones.Use mcp-github-project-manager (kunwarVivek/mcp-github-project-manager) because it exposes 84 tools for sprint planning and milestone tracking, with a commit 4 days ago.

Top MCP servers for GitHub

Best forProfile
1Developers using GitHub who want AI assistants to browse code, manage issues and pull requests, and monitor Actions workflows.Community favourite32,723+6913 days ago92.4
2When an agent must explore a GitHub repository without reading whole files, it indexes symbols with tree-sitter and offers targeted retrieval.Community favourite2,654+131today80.4
3Developers tracing code across local and GitHub/npm codebases: it combines ripgrep, LSP, GitHub PR search, and package lookup in one server.Community favourite924+2112 days ago66.5
4Before building a new project, when an idea needs verification, it exposes idea_check to scan GitHub, npm, PyPI, Hacker News, and Stack Overflow.Community favourite813+4426 days ago65.7
5Developers debugging cryptic errors in coding assistants who need full conversation content from StackOverflow, GitHub Issues, arXiv, and Wikipedia in one call.Community favourite382+14today58.3
6Coding against a GitHub repository the model hasn't seen: it serves up-to-date docs and code through a remote MCP endpoint with zero setup.Abandoned but popular8,364+53121 days ago56.7
7For teams preparing knowledge bases from documentation, code, PDFs, videos, and wikis for AI skills or RAG: it exposes scraping and packaging tools.Community favourite14,925+21228 days ago54.5
8Finding a starred repo by describing it in natural language: it indexes READMEs via Cloudflare AutoRAG and exposes the documented `search_github_stars` tool.Steady113+1yesterday54.0
9CVE triage by exploitation risk: it exposes 41 query tools pulling CVSS, EPSS, KEV, and exploit data from 11 sources.Community favourite20+162 days ago52.8
10Sprint planning and milestone tracking on GitHub Projects V2: it exposes plan_sprint, sprint metrics, and milestone tools.Steady95+14 days ago52.2
11Securing an existing MCP server before exposing it to agents: it wraps the server and scans both directions for credential leaks and prompt injection.Community favourite834+53today49.8
12Turning a one-line idea or PRD into a built app: loki quickstart prints cost and time estimates and supports dry-run and JSON preview.Community favourite1,054+247 days ago49.5
13Finding duplicate code in a project from an AI agent: it exposes an MCP server that checks snippets and files against a scanned codebase.Community favourite6,146No snapshot historytoday47.8
14For anyone who keeps notes and prompts as GitHub gists: this server exposes create, edit, delete, and comment tools across gists and files.Abandoned but popular203+2233 days ago46.6
15Pre-merge review of multi-language codebases: it exposes analysis, security, quality, secrets, remediation, and validation tools that run locally or as a CI gate.Community favourite664+167today46.6
16AI agent workflows that need oversight of tool use: it sits between the agent and its tools to discover, protect, and review actions.Community favourite210+1yesterday46.3
17Automating GitHub workflows: it enables file operations, repository management, and search through the GitHub API.Abandoned but popular90,122+727411 days ago45.4
18For teams running Claude Code, Cursor, or autonomous agents: its MCP tools add spend caps, verifier gates, and runaway-loop prevention.Emerging47+6today45.4
19Switching an AI assistant between personas and skills stored in a local portfolio: activate_element loads an element from the portfolio, and create/edit/delete tools manage them.Steady41+12 days ago45.1
20AI assistants managing local Git repositories: it exposes Git operations and workflow commands through an MCP interface, plus a CLI wrapper for terminal use.Dormant100165 days ago45.1

The ranking, with the evidence

Each position is a weighted mean of adoption (40%), maintenance (24%), momentum (14%), tool description quality (13%) and trust (9%), multiplied by three attenuators: how directly the server is about GitHub (named for it, declaring it, tagged with it, or merely mentioning it), whether its repository is still moving, and how much independent evidence of adoption it has. Open the score on any entry to see every number, including the ones marked ≈, which were imputed from the median of the other candidates rather than measured. The maintenance grade on each entry is mostly issue responsiveness, release recency and open security alerts rather than commits, so a recent commit beside a low grade is two different measurements rather than a contradiction.

  • Abandoned but popular: People use it, but its default branch has stopped moving. Fine to keep running, risky to adopt.
  • Community favourite: Widely adopted and still actively maintained.
  • Dormant: Neither changing nor widely adopted. Here because it still matches the search.
  • Emerging: Small audience, growing quickly, maintained. The bet with the most upside.
  • Steady: Maintained, modest audience, no surprises in either direction.
  • Best for: Developers using GitHub who want AI assistants to browse code, manage issues and pull requests, and monitor Actions workflows.

    The server connects AI tools to GitHub, enabling repository browsing, issue and pull request management, workflow monitoring, and security review. It is hosted remotely by GitHub, so setup requires an OAuth or personal access token configuration in your MCP host.

    GitHub stars
    32,723
    Stars over the last 90 days: 30,707 at the earliest of 46 readings and 32,816 at the latest, up 2,109.
    Stars / 30 days
    +691
    npm / typical week
    Ships no npm package
    Tools exposed
    never inspected
    Last commit
    3 days ago
    Commits / 12 weeks
    209
    Weekly commits over the last 12 weeks, oldest first: 10, 10, 14, 14, 19, 8, 7, 13, 29, 54, 10, 16. 204 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    Not graded
    Score 92.4: show every number behind it
    • Adoption100 / 100 · weight 40%
      • GitHub stars100
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum76 / 100 · weight 14%
      • Stars gained, relative to size60
      • Stars gained, absolute100
      • npm download trendnot measured
        no npm download history
    • Tool quality68 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integrates100
    Weighted mean of the five
    92.4
    × relevance: the keyword is dedicated here
    1.00
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    92.4
  • Best for: When an agent must explore a GitHub repository without reading whole files, it indexes symbols with tree-sitter and offers targeted retrieval.

    It exposes seven tools for indexing a repository, listing indexed repositories, retrieving file trees and outlines, and fetching individual or multiple symbol definitions. Before choosing it, note that no npm package is published, so installation requires building from the repository.

    GitHub stars
    2,654
    Stars over the last 90 days: 1,917 at the earliest of 53 readings and 2,677 at the latest, up 760.
    Stars / 30 days
    +131
    npm / typical week
    Ships no npm package
    Tools exposed
    7
    Last commit
    today
    Commits / 12 weeks
    848
    Weekly commits over the last 12 weeks, oldest first: 46, 19, 30, 24, 40, 82, 83, 70, 112, 125, 78, 292. 1,001 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    A
    Score 80.4: show every number behind it
    • Adoption86 / 100 · weight 40%
      • GitHub stars86
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum88 / 100 · weight 14%
      • Stars gained, relative to size90
      • Stars gained, absolute86
      • npm download trendnot measured
        no npm download history
    • Tool quality76 / 100 · weight 13%
      • Tool description quality68
      • Built and inspected by Glama100
    • Trust0 / 100 · weight 9%
      • License0
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    80.4
    × relevance: the keyword is dedicated here
    1.00
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    80.4
  • 3

    Octocode MCP

    Community favouriteNo change
    bgauryy/octocode

    Best for: Developers tracing code across local and GitHub/npm codebases: it combines ripgrep, LSP, GitHub PR search, and package lookup in one server.

    The server exposes 13 tools covering GitHub code, repository, and PR search; local ripgrep, file, and structure tools; LSP navigation; and npm/Python package search. Before choosing it, note that it requires Node.js 20.12+ and runs via npx, with GitHub authentication optional unless you need private repositories or higher API rate limits.

    GitHub stars
    924
    Stars over the last 90 days: 868 at the earliest of 25 readings and 926 at the latest, up 58.
    Stars / 30 days
    +21
    npm / typical week
    2.8K
    Tools exposed
    13
    Last commit
    12 days ago
    Commits / 12 weeks
    24
    Weekly commits over the last 12 weeks, oldest first: 0, 0, 0, 2, 2, 4, 2, 9, 2, 2, 1, 0. 24 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    A
    Score 66.5: show every number behind it
    • Adoption85 / 100 · weight 40%
      • GitHub stars74
      • npm downloads73
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance97 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence85
    • Momentum42 / 100 · weight 14%
      • Stars gained, relative to size57
      • Stars gained, absolute54
      • npm download trend0
    • Tool quality100 / 100 · weight 13%
      • Tool description quality93
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    85.3
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    66.5
  • Best for: Before building a new project, when an idea needs verification, it exposes idea_check to scan GitHub, npm, PyPI, Hacker News, and Stack Overflow.

    It exposes one tool, idea_check, that scans GitHub, npm, PyPI, Hacker News, and Stack Overflow and returns a reality score, trend direction, and pivot suggestions. It assumes access to those five sources as its data inputs.

    GitHub stars
    813
    Stars over the last 90 days: 721 at the earliest of 12 readings and 813 at the latest, up 92.
    Stars / 30 days
    +44
    npm / typical week
    Ships no npm package
    Tools exposed
    1
    Last commit
    26 days ago
    Commits / 12 weeks
    36
    Weekly commits over the last 12 weeks, oldest first: 0, 0, 4, 27, 1, 0, 2, 0, 2, 0, 0, 0. 36 in total, and the last figure is the current week so far.
    Maintenance grade
    B
    Tool descriptions
    A
    Score 65.7: show every number behind it
    • Adoption73 / 100 · weight 40%
      • GitHub stars73
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance95 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade80
      • Commit cadence100
    • Momentum80 / 100 · weight 14%
      • Stars gained, relative to size89
      • Stars gained, absolute67
      • npm download trendnot measured
        no npm download history
    • Tool quality93 / 100 · weight 13%
      • Tool description quality85
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    84.2
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    65.7
  • Best for: Developers debugging cryptic errors in coding assistants who need full conversation content from StackOverflow, GitHub Issues, arXiv, and Wikipedia in one call.

    The server exposes web_search and get_content, returning Markdown page content and combining StackExchange, GitHub Issues, arXiv, and Wikipedia results in a single request. Before choosing it, note that no npm package is published, so installation requires using the repository directly.

    GitHub stars
    382
    Stars over the last 90 days: 343 at the earliest of 14 readings and 385 at the latest, up 42.
    Stars / 30 days
    +14
    npm / typical week
    Ships no npm package
    Tools exposed
    never inspected
    Last commit
    today
    Commits / 12 weeks
    163
    Weekly commits over the last 12 weeks, oldest first: 0, 1, 1, 2, 2, 0, 16, 0, 0, 4, 56, 192. 274 in total, and the last figure is the current week so far.
    Maintenance grade
    B
    Tool descriptions
    Not graded
    Score 58.3: show every number behind it
    • Adoption65 / 100 · weight 40%
      • GitHub stars65
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance95 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade80
      • Commit cadence100
    • Momentum60 / 100 · weight 14%
      • Stars gained, relative to size68
      • Stars gained, absolute48
      • npm download trendnot measured
        no npm download history
    • Tool quality68 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    74.7
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    58.3
  • 6

    GitMCP

    Abandoned but popular 1
    idosal/git-mcp

    Best for: Coding against a GitHub repository the model hasn't seen: it serves up-to-date docs and code through a remote MCP endpoint with zero setup.

    GitMCP is a remote MCP server that exposes 32 tools for Git operations, GitHub/Gitea repo management, auth, config, releases, versions, backups, and health checks, while the README presents it as a way to give AI assistants current docs and code from any GitHub project. Before choosing it, note that the service can be pointed at a single repository or used in a generic mode, and the write-capable tools in its toolset are governed by whatever auth token is configured.

    GitHub stars
    8,364
    Stars over the last 90 days: 8,169 at the earliest of 9 readings and 8,376 at the latest, up 207.
    Stars / 30 days
    +53
    npm / typical week
    downloads not counted
    Tools exposed
    32
    Last commit
    121 days ago
    Commits / 12 weeks
    0
    Maintenance grade
    D
    Tool descriptions
    C
    Score 56.7: show every number behind it
    • Adoption98 / 100 · weight 40%
      • GitHub stars98
      • npm downloadsnot measured
        npm names no repository for git-mcp, so its downloads cannot be attributed
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance46 / 100 · weight 24%
      • Last commit touching this server68
      • Repository maintenance grade30
      • Commit cadence5
    • Momentum47 / 100 · weight 14%
      • Stars gained, relative to size32
      • Stars gained, absolute70
      • npm download trendnot measured
        no npm download history
    • Tool quality53 / 100 · weight 13%
      • Tool description quality45
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    72.7
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    56.7
  • Best for: For teams preparing knowledge bases from documentation, code, PDFs, videos, and wikis for AI skills or RAG: it exposes scraping and packaging tools.

    It exposes 40 tools that scrape 18 source types, generate and validate configs, package skills for AI platforms, export to vector databases, and manage workflows. Before choosing it, note that the upload tool requires a platform-specific API key, while enhancement can run locally with an AI coding agent.

    GitHub stars
    14,925
    Stars over the last 90 days: 14,307 at the earliest of 11 readings and 14,925 at the latest, up 618.
    Stars / 30 days
    +212
    npm / typical week
    Ships no npm package
    Tools exposed
    40
    Last commit
    28 days ago
    Commits / 12 weeks
    47
    Weekly commits over the last 12 weeks, oldest first: 3, 0, 3, 0, 15, 1, 17, 8, 0, 0, 0, 0. 47 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    B
    Score 54.5: show every number behind it
    • Adoption100 / 100 · weight 40%
      • GitHub stars100
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum67 / 100 · weight 14%
      • Stars gained, relative to size49
      • Stars gained, absolute94
      • npm download trendnot measured
        no npm download history
    • Tool quality66 / 100 · weight 13%
      • Tool description quality57
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    90.8
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    54.5
  • Best for: Finding a starred repo by describing it in natural language: it indexes READMEs via Cloudflare AutoRAG and exposes the documented `search_github_stars` tool.

    The README documents the MCP tool search_github_stars, which accepts a natural language query and returns matching repositories with README content. Before choosing it, note that it assumes a Cloudflare account with R2 and AutoRAG, plus a GitHub token with repo scope.

    GitHub stars
    113
    Stars over the last 90 days: 111 at the earliest of 12 readings and 113 at the latest, up 2.
    Stars / 30 days
    +1
    npm / typical week
    downloads not counted
    Tools exposed
    never inspected
    Last commit
    yesterday
    Commits / 12 weeks
    15
    Weekly commits over the last 12 weeks, oldest first: 1, 1, 1, 4, 1, 1, 1, 1, 1, 1, 1, 1. 15 in total, and the last figure is the current week so far.
    Maintenance grade
    B
    Tool descriptions
    Not graded
    Score 54.0: show every number behind it
    • Adoption51 / 100 · weight 40%
      • GitHub stars51
      • npm downloadsnot measured
        npm names no repository for mcp-github-stars, so its downloads cannot be attributed
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance92 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade80
      • Commit cadence85
    • Momentum22 / 100 · weight 14%
      • Stars gained, relative to size28
      • Stars gained, absolute14
      • npm download trendnot measured
        no npm download history
    • Tool quality68 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    63.5
    × relevance: the keyword is dedicated here
    1.00
    × continuity: actively changing
    1.00
    × evidence: modest but real audience
    0.85
    Composite score
    54.0
  • 9

    cve-mcp

    Community favourite 1
    badchars/cve-mcp

    Best for: CVE triage by exploitation risk: it exposes 41 query tools pulling CVSS, EPSS, KEV, and exploit data from 11 sources.

    It is an MCP server exposing 41 query tools that pull and correlate CVE details, EPSS scores, KEV status, package advisories, and exploit intelligence from 11 sources. Before choosing it, know that it ships as the npm package cve-mcp running on Bun, and its intended consumer is an MCP-capable AI agent.

    GitHub stars
    20
    Stars over the last 90 days: 8 at the earliest of 11 readings and 24 at the latest, up 16.
    Stars / 30 days
    +1
    npm / typical week
    413
    Tools exposed
    41
    Last commit
    62 days ago
    Commits / 12 weeks
    5
    Weekly commits over the last 12 weeks, oldest first: 0, 2, 0, 3, 0, 0, 0, 0, 0, 0, 0, 0. 5 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    A
    Score 52.8: show every number behind it
    • Adoption61 / 100 · weight 40%
      • GitHub stars33
      • npm downloads56
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance86 / 100 · weight 24%
      • Last commit touching this server88
        dated from the last commit on the default branch, re-read from GitHub at publication; github.com shows a push 4 days ago, which counts every ref; the stored date would have published 25 days ago
      • Repository maintenance grade100
      • Commit cadence65
    • Momentum28 / 100 · weight 14%
      • Stars gained, relative to size34
      • Stars gained, absolute14
      • npm download trend34
    • Tool quality76 / 100 · weight 13%
      • Tool description quality68
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    67.7
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    52.8
  • Best for: Sprint planning and milestone tracking on GitHub Projects V2: it exposes plan_sprint, sprint metrics, and milestone tools.

    It exposes 84 tools covering GitHub projects, milestones, issues, pull requests, sprints, and draft issues. Before choosing it, note that it requires GITHUB_TOKEN, GITHUB_OWNER, and GITHUB_REPO environment variables to run.

    GitHub stars
    95
    Stars over the last 90 days: 90 at the earliest of 81 readings and 96 at the latest, up 6.
    Stars / 30 days
    +1
    npm / typical week
    42
    Tools exposed
    84
    Last commit
    4 days ago
    Commits / 12 weeks
    64
    Weekly commits over the last 12 weeks, oldest first: 0, 0, 0, 21, 4, 0, 0, 38, 0, 0, 0, 5. 68 in total, and the last figure is the current week so far.
    Maintenance grade
    C
    Tool descriptions
    C
    Score 52.2: show every number behind it
    • Adoption55 / 100 · weight 40%
      • GitHub stars50
      • npm downloads35
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance89 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade55
      • Commit cadence100
    • Momentum19 / 100 · weight 14%
      • Stars gained, relative to size31
      • Stars gained, absolute16
      • npm download trend0
    • Tool quality51 / 100 · weight 13%
      • Tool description quality43
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    61.4
    × relevance: the keyword is dedicated here
    1.00
    × continuity: actively changing
    1.00
    × evidence: modest but real audience
    0.85
    Composite score
    52.2
  • 11

    pipelock

    Community favourite 2
    luckyPipewrench/pipelock

    Best for: Securing an existing MCP server before exposing it to agents: it wraps the server and scans both directions for credential leaks and prompt injection.

    Pipelock is a security proxy that wraps an MCP server and scans mediated HTTP, WebSocket, MCP, and A2A traffic for credential leaks, prompt injection, SSRF, tool poisoning, and risky tool-call chains, and it also provides an HTTP fetch proxy with a 9-layer scanner pipeline. Plain CONNECT tunnels without TLS interception are scanned only at the hostname and URL level.

    GitHub stars
    834
    Stars over the last 90 days: 718 at the earliest of 61 readings and 839 at the latest, up 121.
    Stars / 30 days
    +53
    npm / typical week
    Ships no npm package
    Tools exposed
    never inspected
    Last commit
    today
    Commits / 12 weeks
    682
    Weekly commits over the last 12 weeks, oldest first: 30, 35, 62, 74, 54, 52, 49, 52, 60, 59, 78, 83. 688 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    Not graded
    Score 49.8: show every number behind it
    • Adoption73 / 100 · weight 40%
      • GitHub stars73
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum86 / 100 · weight 14%
      • Stars gained, relative to size97
      • Stars gained, absolute70
      • npm download trendnot measured
        no npm download history
    • Tool quality68 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    83.0
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    49.8
  • 12

    Loki Mode

    Community favouriteNo change
    asklokesh/loki-mode

    Best for: Turning a one-line idea or PRD into a built app: loki quickstart prints cost and time estimates and supports dry-run and JSON preview.

    Its MCP server exposes tools over stdio for project state, task queue operations, memory retrieve/store, code search, quality and verification reports, repo hotspots and co-changes, and structured findings and learnings. The CLI assumes Bun for fastest startup, although npm works without it, and quickstart shows a cost and time estimate before any build spends money.

    GitHub stars
    1,054
    Stars over the last 90 days: 980 at the earliest of 45 readings and 1,055 at the latest, up 75.
    Stars / 30 days
    +24
    npm / typical week
    2.8K
    Tools exposed
    never inspected
    Last commit
    7 days ago
    Commits / 12 weeks
    no weekly history
    Maintenance grade
    A
    Tool descriptions
    Not graded
    Score 49.5: show every number behind it
    • Adoption87 / 100 · weight 40%
      • GitHub stars76
      • npm downloads73
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadencenot measured
        no snapshot history yet
    • Momentum43 / 100 · weight 14%
      • Stars gained, relative to size58
      • Stars gained, absolute57
      • npm download trend0
    • Tool quality68 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    82.5
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    49.5
  • 13

    jscpd

    Community favouriteNew
    kucherenko/jscpd

    Best for: Finding duplicate code in a project from an AI agent: it exposes an MCP server that checks snippets and files against a scanned codebase.

    The server exposes an MCP interface over stdio for checking snippets and files against a scanned project. To use it, you must first run jscpd to produce the scan it compares against.

    GitHub stars
    6,146
    Stars / 30 days
    no snapshot history
    npm / typical week
    Ships no npm package
    Tools exposed
    never inspected
    Last commit
    today
    Commits / 12 weeks
    366
    Weekly commits over the last 12 weeks, oldest first: 49, 13, 1, 28, 7, 10, 12, 7, 91, 32, 48, 66. 364 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    Not graded
    Score 47.8: show every number behind it
    • Adoption95 / 100 · weight 40%
      • GitHub stars95
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum0 / 100 · weight 14%
      • Stars gained, relative to sizenot measured
        no snapshot history yet
      • Stars gained, absolutenot measured
        no snapshot history yet
      • npm download trendnot measured
        no npm download history
    • Tool quality68 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integrates100
    Weighted mean of the five
    79.7
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    47.8
  • 14

    GistPad MCP

    Abandoned but popularNo change
    lostintangent/gistpad-mcp

    Best for: For anyone who keeps notes and prompts as GitHub gists: this server exposes create, edit, delete, and comment tools across gists and files.

    The server lets an MCP client list, create, read, update, and delete gists and their files, and manage comments on them. Before using it outside VS Code, you need a GitHub personal access token with only the gist scope.

    GitHub stars
    203
    Stars over the last 90 days: 195 at the earliest of 9 readings and 206 at the latest, up 11.
    Stars / 30 days
    +2
    npm / typical week
    137
    Tools exposed
    never inspected
    Last commit
    233 days ago
    Commits / 12 weeks
    0
    Maintenance grade
    D
    Tool descriptions
    Not graded
    Score 46.6: show every number behind it
    • Adoption61 / 100 · weight 40%
      • GitHub stars58
      • npm downloads23
        downloads show none of the weekday rhythm human traffic has; halved
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance46 / 100 · weight 24%
      • Last commit touching this server68
      • Repository maintenance grade30
      • Commit cadence5
    • Momentum47 / 100 · weight 14%
      • Stars gained, relative to size34
      • Stars gained, absolute21
      • npm download trend100
    • Tool quality68 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    59.7
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    46.6
  • 15

    mcp-skylos

    Community favourite 4
    duriantaco/skylos

    Best for: Pre-merge review of multi-language codebases: it exposes analysis, security, quality, secrets, remediation, and validation tools that run locally or as a CI gate.

    Skylos exposes 12 tools that scan Python, TypeScript, JavaScript, Java, Go, Kotlin, PHP, Rust, Dart, C#, Shell, and deployment config for dead code, security flaws, secrets, dependency CVEs, misconfigurations, and AI-generated mistakes, with remediation and validation tools runnable as a local CLI or CI/CD gate. One thing to know before choosing it: its AI-defect verification reports 'incomplete' for findings it cannot statically prove, such as third-party imports or computed namespace members, instead of a definitive pass or fail.

    GitHub stars
    664
    Stars over the last 90 days: 453 at the earliest of 41 readings and 691 at the latest, up 238.
    Stars / 30 days
    +167
    npm / typical week
    Ships no npm package
    Tools exposed
    12
    Last commit
    today
    Commits / 12 weeks
    154
    Weekly commits over the last 12 weeks, oldest first: 27, 14, 6, 5, 5, 9, 20, 17, 14, 17, 5, 21. 160 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    D
    Score 46.6: show every number behind it
    • Adoption71 / 100 · weight 40%
      • GitHub stars71
      • npm downloadsnot measured
        no npm package
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum96 / 100 · weight 14%
      • Stars gained, relative to size100
      • Stars gained, absolute90
      • npm download trendnot measured
        no npm download history
    • Tool quality23 / 100 · weight 13%
      • Tool description quality15
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    77.7
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    46.6
  • 16

    Best for: AI agent workflows that need oversight of tool use: it sits between the agent and its tools to discover, protect, and review actions.

    The README documents a CLI with scan, posture, and scan-repo commands for auditing agent sessions, host exposure, and repository workflows. Because it operates between the agent and the tools, it can only review or block actions that are routed through it.

    GitHub stars
    210
    Stars over the last 90 days: 204 at the earliest of 35 readings and 210 at the latest, up 6.
    Stars / 30 days
    +1
    npm / typical week
    1.2K
    Tools exposed
    never inspected
    Last commit
    yesterday
    Commits / 12 weeks
    597
    Weekly commits over the last 12 weeks, oldest first: 37, 100, 85, 45, 28, 58, 0, 3, 24, 33, 75, 140. 628 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    Not graded
    Score 46.3: show every number behind it
    • Adoption74 / 100 · weight 40%
      • GitHub stars58
      • npm downloads65
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum41 / 100 · weight 14%
      • Stars gained, relative to size25
      • Stars gained, absolute15
      • npm download trend100
    • Tool quality68 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    77.2
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    46.3
  • Best for: Automating GitHub workflows: it enables file operations, repository management, and search through the GitHub API.

    It is an MCP server for the GitHub API that enables file operations, repository management, and search functionality. Its README is empty, so the specific tools it exposes are not documented.

    GitHub stars
    90,122
    6,437 after dividing by the 14 servers in this repositoryStars over the last 90 days: 87,147 at the earliest of 83 readings and 90,178 at the latest, up 3,031.
    Stars / 30 days
    +727
    npm / typical week
    downloads not counted
    Tools exposed
    never inspected
    Last commit
    411 days ago
    Commits / 12 weeks
    73
    Weekly commits over the last 12 weeks, oldest first: 1, 2, 20, 1, 0, 0, 18, 0, 3, 0, 14, 13. 72 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    Not graded
    Score 45.4: show every number behind it
    • Adoption95 / 100 · weight 40%
      • GitHub stars95
      • npm downloadsnot measured
        npm names no repository for @modelcontextprotocol/server-github, so its downloads cannot be attributed
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance42 / 100 · weight 24%
      • Last commit touching this server42
        dated from the last commit on the default branch, re-read from GitHub at publication; github.com shows a push 4 days ago, which counts every ref
      • Repository maintenance gradenot measured
        repository is active but this server inside it is not
      • Commit cadencenot measured
        repository is active but this server inside it is not
    • Momentum62 / 100 · weight 14%
      • Stars gained, relative to size37
      • Stars gained, absolute100
      • npm download trendnot measured
        no npm download history
    • Tool quality76 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
        no license detected
      • Published by the vendor it integrates100
    Weighted mean of the five
    75.7
    × relevance: the keyword is dedicated here
    1.00
    × continuity: no change in over a year
    0.60
    × evidence: widely adopted
    1.00
    Composite score
    45.4
  • Best for: For teams running Claude Code, Cursor, or autonomous agents: its MCP tools add spend caps, verifier gates, and runaway-loop prevention.

    MartinLoop exposes 24 MCP tools for planning, preflight checks, governed execution, pause/cancel control, and post-run dossiers and PR summaries. It is a governance layer around a coding agent, not a replacement for Git, GitHub, CI, security scanners, or the coding agent itself.

    GitHub stars
    47
    Stars over the last 90 days: 39 at the earliest of 17 readings and 51 at the latest, up 12.
    Stars / 30 days
    +6
    npm / typical week
    245
    Tools exposed
    24
    Last commit
    today
    Commits / 12 weeks
    443
    Weekly commits over the last 12 weeks, oldest first: 62, 47, 14, 5, 36, 31, 2, 0, 50, 147, 21, 65. 480 in total, and the last figure is the current week so far.
    Maintenance grade
    A
    Tool descriptions
    A
    Score 45.4: show every number behind it
    • Adoption57 / 100 · weight 40%
      • GitHub stars42
      • npm downloads51
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance100 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade100
      • Commit cadence100
    • Momentum66 / 100 · weight 14%
      • Stars gained, relative to size69
      • Stars gained, absolute33
      • npm download trend100
    • Tool quality81 / 100 · weight 13%
      • Tool description quality73
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    75.7
    × relevance: the keyword is tagged here
    0.60
    × continuity: actively changing
    1.00
    × evidence: widely adopted
    1.00
    Composite score
    45.4
  • Best for: Switching an AI assistant between personas and skills stored in a local portfolio: activate_element loads an element from the portfolio, and create/edit/delete tools manage them.

    The server exposes five tools, named mcp_aql_create, mcp_aql_read, mcp_aql_update, mcp_aql_delete, and mcp_aql_execute, for managing the element types persona, skill, template, agent, memory, and ensemble, with activation done through the activate_element operation in mcp_aql_read. The thing to know before choosing it is that created, edited, and installed elements all live in a local portfolio folder (~/.dollhouse/portfolio/ on macOS/Linux), and activation and browsing draw from that folder.

    GitHub stars
    41
    Stars over the last 90 days: 35 at the earliest of 33 readings and 41 at the latest, up 6.
    Stars / 30 days
    +1
    npm / typical week
    301
    Tools exposed
    5
    Last commit
    2 days ago
    Commits / 12 weeks
    177
    Weekly commits over the last 12 weeks, oldest first: 0, 41, 24, 14, 0, 0, 8, 59, 0, 0, 27, 4. 177 in total, and the last figure is the current week so far.
    Maintenance grade
    B
    Tool descriptions
    A
    Score 45.1: show every number behind it
    • Adoption45 / 100 · weight 40%
      • GitHub stars41
      • npm downloads26
        downloads show none of the weekday rhythm human traffic has; halved
      • Used through Glama14
    • Maintenance95 / 100 · weight 24%
      • Last commit touching this server100
      • Repository maintenance grade80
      • Commit cadence100
    • Momentum45 / 100 · weight 14%
      • Stars gained, relative to size35
      • Stars gained, absolute15
      • npm download trend100
    • Tool quality93 / 100 · weight 13%
      • Tool description quality85
      • Built and inspected by Glama100
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    68.0
    × relevance: the keyword is declared here
    0.78
    × continuity: actively changing
    1.00
    × evidence: modest but real audience
    0.85
    Composite score
    45.1
  • Best for: AI assistants managing local Git repositories: it exposes Git operations and workflow commands through an MCP interface, plus a CLI wrapper for terminal use.

    The server exposes Git operations as MCP tools and also provides a CLI wrapper with commands such as gstatus, gadd, gcommit, gpush, gpull, gbranch, gcheckout, glog, gdiff, gstash, gpop, greset, gclone, and gremote. It assumes a Node.js environment, since installation is via npx, pnpm, or npm.

    GitHub stars
    10
    Stars over the last 90 days: 10 at the earliest of 9 readings and 10 at the latest, unchanged.
    Stars / 30 days
    0
    npm / typical week
    119
    Tools exposed
    never inspected
    Last commit
    165 days ago
    Commits / 12 weeks
    0
    Maintenance grade
    C
    Tool descriptions
    Not graded
    Score 45.1: show every number behind it
    • Adoption48 / 100 · weight 40%
      • GitHub stars26
      • npm downloads44
      • Used through Glamanot measured
        not used through Glama in the last 30 days
    • Maintenance52 / 100 · weight 24%
      • Last commit touching this server68
      • Repository maintenance grade55
      • Commit cadence5
    • Momentum25 / 100 · weight 14%
      • Stars gained, relative to size0
      • Stars gained, absolute0
      • npm download trend100
    • Tool quality68 / 100 · weight 13%
      • Tool description quality68
        tool descriptions not yet scored
      • Built and inspected by Glamanot measured
        never built and inspected by Glama
    • Trust100 / 100 · weight 9%
      • License100
      • Published by the vendor it integratesnot measured
        not published by the vendor it integrates
    Weighted mean of the five
    53.1
    × relevance: the keyword is dedicated here
    1.00
    × continuity: actively changing
    1.00
    × evidence: modest but real audience
    0.85
    Composite score
    45.1

Questions people ask

How do I choose between the official GitHub MCP Server and github-codemunch-mcp?

The official GitHub MCP Server (github/github-mcp-server) is the safer default for general GitHub tasks because it is official and active, with a last commit 3 days ago and 209 commits in the last 12 weeks. github-codemunch-mcp (jgravelle/jcodemunch-mcp) is better when you need token-efficient code exploration because it uses tree-sitter AST parsing to return signatures and summaries, and it exposes 7 tools. It also had a commit 0 days ago and 848 commits in the last 12 weeks.

Is Octocode MCP worth trying for cross-repository search?

Octocode MCP (bgauryy/octocode) combines ripgrep, LSP, GitHub PR search, and package lookup, so it is useful for tracing code across local and GitHub/npm codebases. It exposes 13 tools with a tool description grade A and had 2,839 npm downloads in a typical week. Its last commit was 12 days ago, with 24 commits in the last 12 weeks.

What should I know before using GitMCP to serve a repo's docs?

GitMCP (idosal/git-mcp) turns a GitHub project into a remote MCP endpoint with zero setup and exposes 32 tools, but its tool description grade is C and its last commit was 121 days ago with 0 commits in the last 12 weeks. The profile label is 'Abandoned but popular', so you should expect it to work but not to receive active fixes.

Can pipelock protect an existing MCP server from prompt injection?

Yes. pipelock (luckyPipewrench/pipelock) wraps any MCP server and scans both directions for credential leaks, prompt injection, and tool description poisoning. It also provides an HTTP fetch proxy with a 9-layer scanner pipeline. It had a commit 0 days ago and 682 commits in the last 12 weeks.

Does mcp-github-project-manager support sprint planning?

mcp-github-project-manager (kunwarVivek/mcp-github-project-manager) integrates with GitHub Projects V2 and exposes 84 tools including plan_sprint, sprint metrics, and milestone tools. Its tool description grade is C, and it had a last commit 4 days ago with 64 commits in the last 12 weeks.

Other comparisons