20 Best GitHub MCP Servers, Compared (September 2026)
The short answer
Most developers should use GitHub MCP Server (github/github-mcp-server). It is GitHub's official server, still active with a last commit 3 days ago and 209 commits in the last 12 weeks, and it covers the common tasks: browsing code, managing issues and pull requests, and monitoring Actions workflows. If your agent's main job is exploring a repository without reading whole files, github-codemunch-mcp (jgravelle/jcodemunch-mcp) is the better fit because it uses tree-sitter AST parsing to extract signatures and summaries, with 7 tools and a last commit 0 days ago.
Whichever you choose, give it the narrowest access that still works (a read-only credential, a replica, a scratch account), and widen it only once you have watched what your agent actually asks for.
Glama operates the MCP registry these numbers are measured from, and sells MCP hosting and a gateway. No position on this page is paid for. How the registry is built.
Quick picks
- 1GitHub MCP Server : Developers using GitHub who want AI assistants to browse code, manage issues and pull requests, and monitor Actions workflows.
- 2github-codemunch-mcp : When an agent must explore a GitHub repository without reading whole files, it indexes symbols with tree-sitter and offers targeted retrieval.
- 3Octocode MCP : Developers tracing code across local and GitHub/npm codebases: it combines ripgrep, LSP, GitHub PR search, and package lookup in one server.
- 4idea-reality-mcp : Before building a new project, when an idea needs verification, it exposes idea_check to scan GitHub, npm, PyPI, Hacker News, and Stack Overflow.
- 5Kindly Web Search MCP Server : Developers debugging cryptic errors in coding assistants who need full conversation content from StackOverflow, GitHub Issues, arXiv, and Wikipedia in one call.
Which one, for your situation
| Your situation | What to use |
|---|---|
| I need official GitHub API access for issues, PRs, and Actions. | Use GitHub MCP Server (github/github-mcp-server); it is official, had a commit 3 days ago, and had 209 commits in the last 12 weeks. |
| My agent must explore a repo without reading whole files. | Use github-codemunch-mcp (jgravelle/jcodemunch-mcp) because it indexes symbols with tree-sitter and exposes 7 tools, with a commit 0 days ago. |
| I need to search across GitHub and npm codebases. | Use Octocode MCP (bgauryy/octocode) because it combines ripgrep, LSP, GitHub PR search, and package lookup, with 13 tools and 2,839 npm downloads in a typical week. |
| I need vulnerability intelligence from many sources for triage. | Use cve-mcp (badchars/cve-mcp) because it unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV, exposing 41 query tools with a tool description grade A. |
| I need to secure an MCP server before exposing it to agents. | Use pipelock (luckyPipewrench/pipelock) because it wraps any MCP server with bidirectional scanning for credential leaks and prompt injection, and had a commit 0 days ago. |
| I manage GitHub Projects V2 sprints and milestones. | Use mcp-github-project-manager (kunwarVivek/mcp-github-project-manager) because it exposes 84 tools for sprint planning and milestone tracking, with a commit 4 days ago. |
Top MCP servers for GitHub
| Best for | Profile | ||||||
|---|---|---|---|---|---|---|---|
| 1 | Developers using GitHub who want AI assistants to browse code, manage issues and pull requests, and monitor Actions workflows. | Community favourite | 32,723 | +691 | 3 days ago | 92.4 | |
| 2 | When an agent must explore a GitHub repository without reading whole files, it indexes symbols with tree-sitter and offers targeted retrieval. | Community favourite | 2,654 | +131 | today | 80.4 | |
| 3 | Developers tracing code across local and GitHub/npm codebases: it combines ripgrep, LSP, GitHub PR search, and package lookup in one server. | Community favourite | 924 | +21 | 12 days ago | 66.5 | |
| 4 | Before building a new project, when an idea needs verification, it exposes idea_check to scan GitHub, npm, PyPI, Hacker News, and Stack Overflow. | Community favourite | 813 | +44 | 26 days ago | 65.7 | |
| 5 | Developers debugging cryptic errors in coding assistants who need full conversation content from StackOverflow, GitHub Issues, arXiv, and Wikipedia in one call. | Community favourite | 382 | +14 | today | 58.3 | |
| 6 | Coding against a GitHub repository the model hasn't seen: it serves up-to-date docs and code through a remote MCP endpoint with zero setup. | Abandoned but popular | 8,364 | +53 | 121 days ago | 56.7 | |
| 7 | For teams preparing knowledge bases from documentation, code, PDFs, videos, and wikis for AI skills or RAG: it exposes scraping and packaging tools. | Community favourite | 14,925 | +212 | 28 days ago | 54.5 | |
| 8 | Finding a starred repo by describing it in natural language: it indexes READMEs via Cloudflare AutoRAG and exposes the documented `search_github_stars` tool. | Steady | 113 | +1 | yesterday | 54.0 | |
| 9 | CVE triage by exploitation risk: it exposes 41 query tools pulling CVSS, EPSS, KEV, and exploit data from 11 sources. | Community favourite | 20 | +1 | 62 days ago | 52.8 | |
| 10 | Sprint planning and milestone tracking on GitHub Projects V2: it exposes plan_sprint, sprint metrics, and milestone tools. | Steady | 95 | +1 | 4 days ago | 52.2 | |
| 11 | Securing an existing MCP server before exposing it to agents: it wraps the server and scans both directions for credential leaks and prompt injection. | Community favourite | 834 | +53 | today | 49.8 | |
| 12 | Turning a one-line idea or PRD into a built app: loki quickstart prints cost and time estimates and supports dry-run and JSON preview. | Community favourite | 1,054 | +24 | 7 days ago | 49.5 | |
| 13 | Finding duplicate code in a project from an AI agent: it exposes an MCP server that checks snippets and files against a scanned codebase. | Community favourite | 6,146 | No snapshot history | today | 47.8 | |
| 14 | For anyone who keeps notes and prompts as GitHub gists: this server exposes create, edit, delete, and comment tools across gists and files. | Abandoned but popular | 203 | +2 | 233 days ago | 46.6 | |
| 15 | Pre-merge review of multi-language codebases: it exposes analysis, security, quality, secrets, remediation, and validation tools that run locally or as a CI gate. | Community favourite | 664 | +167 | today | 46.6 | |
| 16 | AI agent workflows that need oversight of tool use: it sits between the agent and its tools to discover, protect, and review actions. | Community favourite | 210 | +1 | yesterday | 46.3 | |
| 17 | Automating GitHub workflows: it enables file operations, repository management, and search through the GitHub API. | Abandoned but popular | 90,122 | +727 | 411 days ago | 45.4 | |
| 18 | For teams running Claude Code, Cursor, or autonomous agents: its MCP tools add spend caps, verifier gates, and runaway-loop prevention. | Emerging | 47 | +6 | today | 45.4 | |
| 19 | Switching an AI assistant between personas and skills stored in a local portfolio: activate_element loads an element from the portfolio, and create/edit/delete tools manage them. | Steady | 41 | +1 | 2 days ago | 45.1 | |
| 20 | AI assistants managing local Git repositories: it exposes Git operations and workflow commands through an MCP interface, plus a CLI wrapper for terminal use. | Dormant | 10 | 0 | 165 days ago | 45.1 |
The ranking, with the evidence
Each position is a weighted mean of adoption (40%), maintenance (24%), momentum (14%), tool description quality (13%) and trust (9%), multiplied by three attenuators: how directly the server is about GitHub (named for it, declaring it, tagged with it, or merely mentioning it), whether its repository is still moving, and how much independent evidence of adoption it has. Open the score on any entry to see every number, including the ones marked ≈, which were imputed from the median of the other candidates rather than measured. The maintenance grade on each entry is mostly issue responsiveness, release recency and open security alerts rather than commits, so a recent commit beside a low grade is two different measurements rather than a contradiction.
- Abandoned but popular: People use it, but its default branch has stopped moving. Fine to keep running, risky to adopt.
- Community favourite: Widely adopted and still actively maintained.
- Dormant: Neither changing nor widely adopted. Here because it still matches the search.
- Emerging: Small audience, growing quickly, maintained. The bet with the most upside.
- Steady: Maintained, modest audience, no surprises in either direction.
Best for: Developers using GitHub who want AI assistants to browse code, manage issues and pull requests, and monitor Actions workflows.
The server connects AI tools to GitHub, enabling repository browsing, issue and pull request management, workflow monitoring, and security review. It is hosted remotely by GitHub, so setup requires an OAuth or personal access token configuration in your MCP host.
GitHub stars32,723Stars / 30 days+691npm / typical weekShips no npm packageTools exposednever inspectedLast commit3 days agoCommits / 12 weeks209Maintenance gradeATool descriptionsNot gradedScore 92.4: show every number behind it
- Adoption100 / 100 · weight 40%
- GitHub stars100
- npm downloadsnot measuredno npm package
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance100 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadence100
- Momentum76 / 100 · weight 14%
- Stars gained, relative to size60
- Stars gained, absolute100
- npm download trendnot measuredno npm download history
- Tool quality≈68 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glamanot measurednever built and inspected by Glama
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integrates100
- Weighted mean of the five
- 92.4
- × relevance: the keyword is dedicated here
- 1.00
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 92.4
Best for: When an agent must explore a GitHub repository without reading whole files, it indexes symbols with tree-sitter and offers targeted retrieval.
It exposes seven tools for indexing a repository, listing indexed repositories, retrieving file trees and outlines, and fetching individual or multiple symbol definitions. Before choosing it, note that no npm package is published, so installation requires building from the repository.
GitHub stars2,654Stars / 30 days+131npm / typical weekShips no npm packageTools exposed7Last committodayCommits / 12 weeks848Maintenance gradeATool descriptionsAScore 80.4: show every number behind it
- Adoption86 / 100 · weight 40%
- GitHub stars86
- npm downloadsnot measuredno npm package
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance100 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadence100
- Momentum88 / 100 · weight 14%
- Stars gained, relative to size90
- Stars gained, absolute86
- npm download trendnot measuredno npm download history
- Tool quality76 / 100 · weight 13%
- Tool description quality68
- Built and inspected by Glama100
- Trust0 / 100 · weight 9%
- License0
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 80.4
- × relevance: the keyword is dedicated here
- 1.00
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 80.4
Best for: Developers tracing code across local and GitHub/npm codebases: it combines ripgrep, LSP, GitHub PR search, and package lookup in one server.
The server exposes 13 tools covering GitHub code, repository, and PR search; local ripgrep, file, and structure tools; LSP navigation; and npm/Python package search. Before choosing it, note that it requires Node.js 20.12+ and runs via npx, with GitHub authentication optional unless you need private repositories or higher API rate limits.
GitHub stars924Stars / 30 days+21npm / typical week2.8KTools exposed13Last commit12 days agoCommits / 12 weeks24Maintenance gradeATool descriptionsAScore 66.5: show every number behind it
- Adoption85 / 100 · weight 40%
- GitHub stars74
- npm downloads73
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance97 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadence85
- Momentum42 / 100 · weight 14%
- Stars gained, relative to size57
- Stars gained, absolute54
- npm download trend0
- Tool quality100 / 100 · weight 13%
- Tool description quality93
- Built and inspected by Glama100
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 85.3
- × relevance: the keyword is declared here
- 0.78
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 66.5
Best for: Before building a new project, when an idea needs verification, it exposes idea_check to scan GitHub, npm, PyPI, Hacker News, and Stack Overflow.
It exposes one tool, idea_check, that scans GitHub, npm, PyPI, Hacker News, and Stack Overflow and returns a reality score, trend direction, and pivot suggestions. It assumes access to those five sources as its data inputs.
GitHub stars813Stars / 30 days+44npm / typical weekShips no npm packageTools exposed1Last commit26 days agoCommits / 12 weeks36Maintenance gradeBTool descriptionsAScore 65.7: show every number behind it
- Adoption73 / 100 · weight 40%
- GitHub stars73
- npm downloadsnot measuredno npm package
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance95 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade80
- Commit cadence100
- Momentum80 / 100 · weight 14%
- Stars gained, relative to size89
- Stars gained, absolute67
- npm download trendnot measuredno npm download history
- Tool quality93 / 100 · weight 13%
- Tool description quality85
- Built and inspected by Glama100
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 84.2
- × relevance: the keyword is declared here
- 0.78
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 65.7
- 5
Best for: Developers debugging cryptic errors in coding assistants who need full conversation content from StackOverflow, GitHub Issues, arXiv, and Wikipedia in one call.
The server exposes web_search and get_content, returning Markdown page content and combining StackExchange, GitHub Issues, arXiv, and Wikipedia results in a single request. Before choosing it, note that no npm package is published, so installation requires using the repository directly.
GitHub stars382Stars / 30 days+14npm / typical weekShips no npm packageTools exposednever inspectedLast committodayCommits / 12 weeks163Maintenance gradeBTool descriptionsNot gradedScore 58.3: show every number behind it
- Adoption65 / 100 · weight 40%
- GitHub stars65
- npm downloadsnot measuredno npm package
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance95 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade80
- Commit cadence100
- Momentum60 / 100 · weight 14%
- Stars gained, relative to size68
- Stars gained, absolute48
- npm download trendnot measuredno npm download history
- Tool quality≈68 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glamanot measurednever built and inspected by Glama
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 74.7
- × relevance: the keyword is declared here
- 0.78
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 58.3
Best for: Coding against a GitHub repository the model hasn't seen: it serves up-to-date docs and code through a remote MCP endpoint with zero setup.
GitMCP is a remote MCP server that exposes 32 tools for Git operations, GitHub/Gitea repo management, auth, config, releases, versions, backups, and health checks, while the README presents it as a way to give AI assistants current docs and code from any GitHub project. Before choosing it, note that the service can be pointed at a single repository or used in a generic mode, and the write-capable tools in its toolset are governed by whatever auth token is configured.
GitHub stars8,364Stars / 30 days+53npm / typical weekdownloads not countedTools exposed32Last commit121 days agoCommits / 12 weeks0Maintenance gradeDTool descriptionsCScore 56.7: show every number behind it
- Adoption98 / 100 · weight 40%
- GitHub stars98
- npm downloadsnot measurednpm names no repository for git-mcp, so its downloads cannot be attributed
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance46 / 100 · weight 24%
- Last commit touching this server68
- Repository maintenance grade30
- Commit cadence5
- Momentum47 / 100 · weight 14%
- Stars gained, relative to size32
- Stars gained, absolute70
- npm download trendnot measuredno npm download history
- Tool quality53 / 100 · weight 13%
- Tool description quality45
- Built and inspected by Glama100
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 72.7
- × relevance: the keyword is declared here
- 0.78
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 56.7
Best for: For teams preparing knowledge bases from documentation, code, PDFs, videos, and wikis for AI skills or RAG: it exposes scraping and packaging tools.
It exposes 40 tools that scrape 18 source types, generate and validate configs, package skills for AI platforms, export to vector databases, and manage workflows. Before choosing it, note that the upload tool requires a platform-specific API key, while enhancement can run locally with an AI coding agent.
GitHub stars14,925Stars / 30 days+212npm / typical weekShips no npm packageTools exposed40Last commit28 days agoCommits / 12 weeks47Maintenance gradeATool descriptionsBScore 54.5: show every number behind it
- Adoption100 / 100 · weight 40%
- GitHub stars100
- npm downloadsnot measuredno npm package
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance100 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadence100
- Momentum67 / 100 · weight 14%
- Stars gained, relative to size49
- Stars gained, absolute94
- npm download trendnot measuredno npm download history
- Tool quality66 / 100 · weight 13%
- Tool description quality57
- Built and inspected by Glama100
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 90.8
- × relevance: the keyword is tagged here
- 0.60
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 54.5
Best for: Finding a starred repo by describing it in natural language: it indexes READMEs via Cloudflare AutoRAG and exposes the documented `search_github_stars` tool.
The README documents the MCP tool
search_github_stars, which accepts a natural language query and returns matching repositories with README content. Before choosing it, note that it assumes a Cloudflare account with R2 and AutoRAG, plus a GitHub token with repo scope.GitHub stars113Stars / 30 days+1npm / typical weekdownloads not countedTools exposednever inspectedLast commityesterdayCommits / 12 weeks15Maintenance gradeBTool descriptionsNot gradedScore 54.0: show every number behind it
- Adoption51 / 100 · weight 40%
- GitHub stars51
- npm downloadsnot measurednpm names no repository for mcp-github-stars, so its downloads cannot be attributed
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance92 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade80
- Commit cadence85
- Momentum22 / 100 · weight 14%
- Stars gained, relative to size28
- Stars gained, absolute14
- npm download trendnot measuredno npm download history
- Tool quality≈68 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glamanot measurednever built and inspected by Glama
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 63.5
- × relevance: the keyword is dedicated here
- 1.00
- × continuity: actively changing
- 1.00
- × evidence: modest but real audience
- 0.85
- Composite score
- 54.0
Best for: CVE triage by exploitation risk: it exposes 41 query tools pulling CVSS, EPSS, KEV, and exploit data from 11 sources.
It is an MCP server exposing 41 query tools that pull and correlate CVE details, EPSS scores, KEV status, package advisories, and exploit intelligence from 11 sources. Before choosing it, know that it ships as the npm package cve-mcp running on Bun, and its intended consumer is an MCP-capable AI agent.
GitHub stars20Stars / 30 days+1npm / typical week413Tools exposed41Last commit62 days agoCommits / 12 weeks5Maintenance gradeATool descriptionsAScore 52.8: show every number behind it
- Adoption61 / 100 · weight 40%
- GitHub stars33
- npm downloads56
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance86 / 100 · weight 24%
- Last commit touching this server88dated from the last commit on the default branch, re-read from GitHub at publication; github.com shows a push 4 days ago, which counts every ref; the stored date would have published 25 days ago
- Repository maintenance grade100
- Commit cadence65
- Momentum28 / 100 · weight 14%
- Stars gained, relative to size34
- Stars gained, absolute14
- npm download trend34
- Tool quality76 / 100 · weight 13%
- Tool description quality68
- Built and inspected by Glama100
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 67.7
- × relevance: the keyword is declared here
- 0.78
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 52.8
- 10
Best for: Sprint planning and milestone tracking on GitHub Projects V2: it exposes plan_sprint, sprint metrics, and milestone tools.
It exposes 84 tools covering GitHub projects, milestones, issues, pull requests, sprints, and draft issues. Before choosing it, note that it requires GITHUB_TOKEN, GITHUB_OWNER, and GITHUB_REPO environment variables to run.
GitHub stars95Stars / 30 days+1npm / typical week42Tools exposed84Last commit4 days agoCommits / 12 weeks64Maintenance gradeCTool descriptionsCScore 52.2: show every number behind it
- Adoption55 / 100 · weight 40%
- GitHub stars50
- npm downloads35
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance89 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade55
- Commit cadence100
- Momentum19 / 100 · weight 14%
- Stars gained, relative to size31
- Stars gained, absolute16
- npm download trend0
- Tool quality51 / 100 · weight 13%
- Tool description quality43
- Built and inspected by Glama100
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 61.4
- × relevance: the keyword is dedicated here
- 1.00
- × continuity: actively changing
- 1.00
- × evidence: modest but real audience
- 0.85
- Composite score
- 52.2
Best for: Securing an existing MCP server before exposing it to agents: it wraps the server and scans both directions for credential leaks and prompt injection.
Pipelock is a security proxy that wraps an MCP server and scans mediated HTTP, WebSocket, MCP, and A2A traffic for credential leaks, prompt injection, SSRF, tool poisoning, and risky tool-call chains, and it also provides an HTTP fetch proxy with a 9-layer scanner pipeline. Plain CONNECT tunnels without TLS interception are scanned only at the hostname and URL level.
GitHub stars834Stars / 30 days+53npm / typical weekShips no npm packageTools exposednever inspectedLast committodayCommits / 12 weeks682Maintenance gradeATool descriptionsNot gradedScore 49.8: show every number behind it
- Adoption73 / 100 · weight 40%
- GitHub stars73
- npm downloadsnot measuredno npm package
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance100 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadence100
- Momentum86 / 100 · weight 14%
- Stars gained, relative to size97
- Stars gained, absolute70
- npm download trendnot measuredno npm download history
- Tool quality≈68 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glamanot measurednever built and inspected by Glama
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 83.0
- × relevance: the keyword is tagged here
- 0.60
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 49.8
Best for: Turning a one-line idea or PRD into a built app: loki quickstart prints cost and time estimates and supports dry-run and JSON preview.
Its MCP server exposes tools over stdio for project state, task queue operations, memory retrieve/store, code search, quality and verification reports, repo hotspots and co-changes, and structured findings and learnings. The CLI assumes Bun for fastest startup, although npm works without it, and quickstart shows a cost and time estimate before any build spends money.
GitHub stars1,054Stars / 30 days+24npm / typical week2.8KTools exposednever inspectedLast commit7 days agoCommits / 12 weeksno weekly historyMaintenance gradeATool descriptionsNot gradedScore 49.5: show every number behind it
- Adoption87 / 100 · weight 40%
- GitHub stars76
- npm downloads73
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance100 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadencenot measuredno snapshot history yet
- Momentum43 / 100 · weight 14%
- Stars gained, relative to size58
- Stars gained, absolute57
- npm download trend0
- Tool quality≈68 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glamanot measurednever built and inspected by Glama
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 82.5
- × relevance: the keyword is tagged here
- 0.60
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 49.5
Best for: Finding duplicate code in a project from an AI agent: it exposes an MCP server that checks snippets and files against a scanned codebase.
The server exposes an MCP interface over stdio for checking snippets and files against a scanned project. To use it, you must first run jscpd to produce the scan it compares against.
GitHub stars6,146Stars / 30 daysno snapshot historynpm / typical weekShips no npm packageTools exposednever inspectedLast committodayCommits / 12 weeks366Maintenance gradeATool descriptionsNot gradedScore 47.8: show every number behind it
- Adoption95 / 100 · weight 40%
- GitHub stars95
- npm downloadsnot measuredno npm package
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance100 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadence100
- Momentum≈0 / 100 · weight 14%
- Stars gained, relative to sizenot measuredno snapshot history yet
- Stars gained, absolutenot measuredno snapshot history yet
- npm download trendnot measuredno npm download history
- Tool quality≈68 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glamanot measurednever built and inspected by Glama
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integrates100
- Weighted mean of the five
- 79.7
- × relevance: the keyword is tagged here
- 0.60
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 47.8
Best for: For anyone who keeps notes and prompts as GitHub gists: this server exposes create, edit, delete, and comment tools across gists and files.
The server lets an MCP client list, create, read, update, and delete gists and their files, and manage comments on them. Before using it outside VS Code, you need a GitHub personal access token with only the gist scope.
GitHub stars203Stars / 30 days+2npm / typical week137Tools exposednever inspectedLast commit233 days agoCommits / 12 weeks0Maintenance gradeDTool descriptionsNot gradedScore 46.6: show every number behind it
- Adoption61 / 100 · weight 40%
- GitHub stars58
- npm downloads23downloads show none of the weekday rhythm human traffic has; halved
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance46 / 100 · weight 24%
- Last commit touching this server68
- Repository maintenance grade30
- Commit cadence5
- Momentum47 / 100 · weight 14%
- Stars gained, relative to size34
- Stars gained, absolute21
- npm download trend100
- Tool quality≈68 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glamanot measurednever built and inspected by Glama
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 59.7
- × relevance: the keyword is declared here
- 0.78
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 46.6
Best for: Pre-merge review of multi-language codebases: it exposes analysis, security, quality, secrets, remediation, and validation tools that run locally or as a CI gate.
Skylos exposes 12 tools that scan Python, TypeScript, JavaScript, Java, Go, Kotlin, PHP, Rust, Dart, C#, Shell, and deployment config for dead code, security flaws, secrets, dependency CVEs, misconfigurations, and AI-generated mistakes, with remediation and validation tools runnable as a local CLI or CI/CD gate. One thing to know before choosing it: its AI-defect verification reports 'incomplete' for findings it cannot statically prove, such as third-party imports or computed namespace members, instead of a definitive pass or fail.
GitHub stars664Stars / 30 days+167npm / typical weekShips no npm packageTools exposed12Last committodayCommits / 12 weeks154Maintenance gradeATool descriptionsDScore 46.6: show every number behind it
- Adoption71 / 100 · weight 40%
- GitHub stars71
- npm downloadsnot measuredno npm package
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance100 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadence100
- Momentum96 / 100 · weight 14%
- Stars gained, relative to size100
- Stars gained, absolute90
- npm download trendnot measuredno npm download history
- Tool quality23 / 100 · weight 13%
- Tool description quality15
- Built and inspected by Glama100
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 77.7
- × relevance: the keyword is tagged here
- 0.60
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 46.6
Best for: AI agent workflows that need oversight of tool use: it sits between the agent and its tools to discover, protect, and review actions.
The README documents a CLI with scan, posture, and scan-repo commands for auditing agent sessions, host exposure, and repository workflows. Because it operates between the agent and the tools, it can only review or block actions that are routed through it.
GitHub stars210Stars / 30 days+1npm / typical week1.2KTools exposednever inspectedLast commityesterdayCommits / 12 weeks597Maintenance gradeATool descriptionsNot gradedScore 46.3: show every number behind it
- Adoption74 / 100 · weight 40%
- GitHub stars58
- npm downloads65
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance100 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadence100
- Momentum41 / 100 · weight 14%
- Stars gained, relative to size25
- Stars gained, absolute15
- npm download trend100
- Tool quality≈68 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glamanot measurednever built and inspected by Glama
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 77.2
- × relevance: the keyword is tagged here
- 0.60
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 46.3
Best for: Automating GitHub workflows: it enables file operations, repository management, and search through the GitHub API.
It is an MCP server for the GitHub API that enables file operations, repository management, and search functionality. Its README is empty, so the specific tools it exposes are not documented.
GitHub stars90,1226,437 after dividing by the 14 servers in this repositoryStars / 30 days+727npm / typical weekdownloads not countedTools exposednever inspectedLast commit411 days agoCommits / 12 weeks73Maintenance gradeATool descriptionsNot gradedScore 45.4: show every number behind it
- Adoption95 / 100 · weight 40%
- GitHub stars95
- npm downloadsnot measurednpm names no repository for @modelcontextprotocol/server-github, so its downloads cannot be attributed
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance42 / 100 · weight 24%
- Last commit touching this server42dated from the last commit on the default branch, re-read from GitHub at publication; github.com shows a push 4 days ago, which counts every ref
- Repository maintenance gradenot measuredrepository is active but this server inside it is not
- Commit cadencenot measuredrepository is active but this server inside it is not
- Momentum62 / 100 · weight 14%
- Stars gained, relative to size37
- Stars gained, absolute100
- npm download trendnot measuredno npm download history
- Tool quality≈76 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glama100
- Trust≈100 / 100 · weight 9%
- License≈100no license detected
- Published by the vendor it integrates100
- Weighted mean of the five
- 75.7
- × relevance: the keyword is dedicated here
- 1.00
- × continuity: no change in over a year
- 0.60
- × evidence: widely adopted
- 1.00
- Composite score
- 45.4
Best for: For teams running Claude Code, Cursor, or autonomous agents: its MCP tools add spend caps, verifier gates, and runaway-loop prevention.
MartinLoop exposes 24 MCP tools for planning, preflight checks, governed execution, pause/cancel control, and post-run dossiers and PR summaries. It is a governance layer around a coding agent, not a replacement for Git, GitHub, CI, security scanners, or the coding agent itself.
GitHub stars47Stars / 30 days+6npm / typical week245Tools exposed24Last committodayCommits / 12 weeks443Maintenance gradeATool descriptionsAScore 45.4: show every number behind it
- Adoption57 / 100 · weight 40%
- GitHub stars42
- npm downloads51
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance100 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade100
- Commit cadence100
- Momentum66 / 100 · weight 14%
- Stars gained, relative to size69
- Stars gained, absolute33
- npm download trend100
- Tool quality81 / 100 · weight 13%
- Tool description quality73
- Built and inspected by Glama100
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 75.7
- × relevance: the keyword is tagged here
- 0.60
- × continuity: actively changing
- 1.00
- × evidence: widely adopted
- 1.00
- Composite score
- 45.4
- 19
Best for: Switching an AI assistant between personas and skills stored in a local portfolio: activate_element loads an element from the portfolio, and create/edit/delete tools manage them.
The server exposes five tools, named mcp_aql_create, mcp_aql_read, mcp_aql_update, mcp_aql_delete, and mcp_aql_execute, for managing the element types persona, skill, template, agent, memory, and ensemble, with activation done through the activate_element operation in mcp_aql_read. The thing to know before choosing it is that created, edited, and installed elements all live in a local portfolio folder (~/.dollhouse/portfolio/ on macOS/Linux), and activation and browsing draw from that folder.
GitHub stars41Stars / 30 days+1npm / typical week301Tools exposed5Last commit2 days agoCommits / 12 weeks177Maintenance gradeBTool descriptionsAScore 45.1: show every number behind it
- Adoption45 / 100 · weight 40%
- GitHub stars41
- npm downloads26downloads show none of the weekday rhythm human traffic has; halved
- Used through Glama14
- Maintenance95 / 100 · weight 24%
- Last commit touching this server100
- Repository maintenance grade80
- Commit cadence100
- Momentum45 / 100 · weight 14%
- Stars gained, relative to size35
- Stars gained, absolute15
- npm download trend100
- Tool quality93 / 100 · weight 13%
- Tool description quality85
- Built and inspected by Glama100
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 68.0
- × relevance: the keyword is declared here
- 0.78
- × continuity: actively changing
- 1.00
- × evidence: modest but real audience
- 0.85
- Composite score
- 45.1
- 20
Best for: AI assistants managing local Git repositories: it exposes Git operations and workflow commands through an MCP interface, plus a CLI wrapper for terminal use.
The server exposes Git operations as MCP tools and also provides a CLI wrapper with commands such as gstatus, gadd, gcommit, gpush, gpull, gbranch, gcheckout, glog, gdiff, gstash, gpop, greset, gclone, and gremote. It assumes a Node.js environment, since installation is via npx, pnpm, or npm.
GitHub stars10Stars / 30 days0npm / typical week119Tools exposednever inspectedLast commit165 days agoCommits / 12 weeks0Maintenance gradeCTool descriptionsNot gradedScore 45.1: show every number behind it
- Adoption48 / 100 · weight 40%
- GitHub stars26
- npm downloads44
- Used through Glamanot measurednot used through Glama in the last 30 days
- Maintenance52 / 100 · weight 24%
- Last commit touching this server68
- Repository maintenance grade55
- Commit cadence5
- Momentum25 / 100 · weight 14%
- Stars gained, relative to size0
- Stars gained, absolute0
- npm download trend100
- Tool quality≈68 / 100 · weight 13%
- Tool description quality≈68tool descriptions not yet scored
- Built and inspected by Glamanot measurednever built and inspected by Glama
- Trust100 / 100 · weight 9%
- License100
- Published by the vendor it integratesnot measurednot published by the vendor it integrates
- Weighted mean of the five
- 53.1
- × relevance: the keyword is dedicated here
- 1.00
- × continuity: actively changing
- 1.00
- × evidence: modest but real audience
- 0.85
- Composite score
- 45.1
Questions people ask
How do I choose between the official GitHub MCP Server and github-codemunch-mcp?
The official GitHub MCP Server (github/github-mcp-server) is the safer default for general GitHub tasks because it is official and active, with a last commit 3 days ago and 209 commits in the last 12 weeks. github-codemunch-mcp (jgravelle/jcodemunch-mcp) is better when you need token-efficient code exploration because it uses tree-sitter AST parsing to return signatures and summaries, and it exposes 7 tools. It also had a commit 0 days ago and 848 commits in the last 12 weeks.
Is Octocode MCP worth trying for cross-repository search?
Octocode MCP (bgauryy/octocode) combines ripgrep, LSP, GitHub PR search, and package lookup, so it is useful for tracing code across local and GitHub/npm codebases. It exposes 13 tools with a tool description grade A and had 2,839 npm downloads in a typical week. Its last commit was 12 days ago, with 24 commits in the last 12 weeks.
What should I know before using GitMCP to serve a repo's docs?
GitMCP (idosal/git-mcp) turns a GitHub project into a remote MCP endpoint with zero setup and exposes 32 tools, but its tool description grade is C and its last commit was 121 days ago with 0 commits in the last 12 weeks. The profile label is 'Abandoned but popular', so you should expect it to work but not to receive active fixes.
Can pipelock protect an existing MCP server from prompt injection?
Yes. pipelock (luckyPipewrench/pipelock) wraps any MCP server and scans both directions for credential leaks, prompt injection, and tool description poisoning. It also provides an HTTP fetch proxy with a 9-layer scanner pipeline. It had a commit 0 days ago and 682 commits in the last 12 weeks.
Does mcp-github-project-manager support sprint planning?
mcp-github-project-manager (kunwarVivek/mcp-github-project-manager) integrates with GitHub Projects V2 and exposes 84 tools including plan_sprint, sprint metrics, and milestone tools. Its tool description grade is C, and it had a last commit 4 days ago with 64 commits in the last 12 weeks.