List repositories for an org or user.

owner: org login or username. owner_type: "org" or "user". type_filter: all | public | private | forks | sources | member (org) / owner|member (user). Returns trimmed repo records (name, visibility, default_branch, archived, pushed_at).

Get full details for a single repository (settings, visibility, permissions).

List members of an organization. role: all | admin | member.

List all teams in an organization (slug, name, privacy, parent).

List members of a team. role: all | maintainer | member.

List collaborators on a repo with their permission level.

affiliation: outside | direct | all.

Get a user's effective permission level on a repo (admin/write/read/none).

Add or update a collaborator's permission on a repo. WRITE OPERATION.

permission: pull | triage | push | maintain | admin. Blocked unless GITHUB_MCP_READ_ONLY=false.

Query an organization's audit log (requires org-owner token w/ read:audit_log).

phrase: GitHub audit-log search syntax, e.g. 'action:repo.create actor:octocat'. include: web | git | all.

List organization-level webhooks (events, active state, target URL).

List secret-scanning alerts for a repo, or for an org if repo is omitted.

state: open | resolved. Requires GHAS/secret-scanning enabled and a token with access.

Get the branch-protection configuration for a branch (404 -> unprotected).

Apply a baseline branch-protection policy. WRITE OPERATION.

Requires PRs with required_reviews approvals, optional Code Owner review, blocks force-push/deletion, requires conversation resolution + linear history. Blocked unless GITHUB_MCP_READ_ONLY=false.

List organization-level rulesets (the modern, scalable branch-protection model).

Get the full definition of a single org ruleset (rules, conditions, bypass actors).

List repositories a team can access, with the team's permission on each.

Grant or update a team's permission on a repo. WRITE OPERATION.

permission: pull | triage | push | maintain | admin. Blocked unless GITHUB_MCP_READ_ONLY=false.

List CodeQL/code-scanning alerts for a repo. state: open | closed | dismissed | fixed.

List Dependabot vulnerability alerts. state: open | dismissed | fixed | auto_dismissed.

Resolve a secret-scanning alert. WRITE OPERATION.

resolution: false_positive | wont_fix | revoked | used_in_tests. Use after the credential has actually been revoked/rotated. Blocked unless GITHUB_MCP_READ_ONLY=false.

Run an arbitrary GraphQL query against GitHub's v4 API.

Useful for nested fetches (e.g. org -> teams -> members) in one round trip.