Best GitHub MCP Servers
GitHub is a platform and cloud-based service for software development and version control using Git, allowing developers to store and manage their code.
Why this server?
Provides tools for searching GitHub profiles, repositories, and emails via the GitHub REST API.
AlicenseAqualityAmaintenanceAI-powered OSINT framework exposing 10 tools (email, username, breach, WHOIS, IP, subdomain, phone, Shodan, dorks, Pastebin) as an MCP server for Claude Code and Claude Desktop, with an autonomous agent REPL and direct CLI.Last updated2201,177MITWhy this server?
Provides a GitHub Action for gating CI/CD pipelines based on MCP server grades, and allows grading servers from GitHub repository references.

Polygraphofficial
AlicenseAqualityAmaintenanceOpen behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.Last updated124867Apache 2.0Why this server?
Allows syncing GitHub repository data, enabling agents to track code changes and maintain context from repositories.

Loreofficial
AlicenseBqualityBmaintenanceCross-agent memory server: hybrid (vector + full-text + knowledge-graph) recall, per-user private/shared visibility, write-side secret/PII redaction, and as-of-date bi-temporal fact queries. Auto-injection hooks for Claude Code / Cursor / Codex; self-hostable on PostgreSQL or SQLite.Last updated467MITWhy this server?
Provides tools to search for usage of specific GitHub Actions across repositories, audit GitHub API calls made by workflow runs, and list recent workflow runs.

stepsecurity-mcpofficial
AlicenseAqualityDmaintenanceMCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.Last updated3063Apache 2.0Why this server?
Enables retrieval of repository metadata such as stars, forks, and open issues, and allows finding packages associated with specific GitHub repository URLs.
AlicenseAqualityBmaintenanceEnables querying package ecosystem data from ecosyste.ms, including package metadata, versions, security advisories, dependencies, and repository information across 40+ package registries with fast local SQLite lookups and API fallback.Last updated101377MITWhy this server?
Analyzes GitHub repositories for security, code quality, license health, completeness, and provides trust scores with findings and reports.
AlicenseAqualityBmaintenanceEnables AI agents to search and discover verified deep-tech engineering bounties with real funding, using a single search_bounties tool.Last updated185MITWhy this server?
Allows for the submission of GitHub repositories for security audits and the retrieval of security reports, trust scores, and vulnerability findings for GitHub-hosted projects.
Why this server?
Allows interaction with GitHub via MCP tools (e.g., list issues) through the gateway with security controls.
AlicenseAqualityBmaintenanceSecure MCP server for quarantined web content extraction with two-layer prompt injection defense, enabling safe fetching of URLs and reading of files via sanitized markdown output.Last updated149AGPL 3.0Why this server?
Allows scanning GitHub repositories for security vulnerabilities, assessing their trust tier, and generating signed attestations. Provides tools to check security posture and trust scores of any public GitHub repo before use.

agentgraph-trustofficial
AlicenseAqualityCmaintenanceSecurity scanner and trust verification for AI agent tools. Scans GitHub repositories for vulnerabilities and returns signed trust attestations (Ed25519/JWS) with trust-tiered rate limiting recommendations.Last updated103MIT