Allows managing GitHub repository configuration from reusable templates, including merge options, security features, rulesets, branch protection, labels, topics, webhooks, repository files, and git hooks, with plan/apply workflows, bulk operations, audits, and drift detection.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
Octowarden keeps your GitHub repository configuration as reusable templates and applies them to
any repository, one at a time or in bulk. A template can set merge options, security features,
rulesets and branch protection, labels, topics, webhooks, files such as PR and issue templates or
CODEOWNERS, and git hooks. You combine templates into ordered sets, assign sets to repositories,
look at the plan (a diff against what GitHub has now), and apply it. A scheduled audit reports
drift, and every change lands in an audit trail: who, what, when, from where.
It comes as a web UI, a JSON API, an MCP server for agents, and a command line tool that also runs on its own from YAML files.
Docker with Compose v2.24 or newer, to run the server image; or Bun 1.4 or newer to run it from source
Bun 1.4 or newer for the command line tool
GitHub credentials: a personal access token (classic or fine-grained), a GitHub App, or a logged-in GitHub CLI (command line tool only). Required permissions are in docs/configuration.md.
Optional: PostgreSQL 14 or newer instead of the built-in SQLite database
Related MCP server: agentic-sdlc-mcp
Server:
mkdir octowarden && cd octowarden
curl -fsSLO https://raw.githubusercontent.com/rojosinalma/octowarden/main/compose.yaml
curl -fsSL -o .env https://raw.githubusercontent.com/rojosinalma/octowarden/main/.env.example
chmod 600 .env && mkdir -p data # set API_TOKEN (and GITHUB_TOKEN, or add it later in Settings)
docker compose up -dOpen http://localhost:3000. The UI has no login of its own and can change and delete repositories: put it behind your reverse proxy's authentication before you expose it.
Command line tool: download octowarden from the
latest release and put it on your
PATH. It also installs as a GitHub CLI extension (gh octowarden); see docs/cli.md.
In Templates, start from the built-in starter templates (base, security, protect-main,
protect-dev, oss, fork) or write your own; every section has a form.
In Sets, put templates in order (later ones win) and give default values, for example the required status checks.
In Repos, assign a set, open the plan, and apply it. Select several repositories to plan, apply or audit them in bulk.
Audit lists every change and every drift report.
The same from the terminal, without a server:
octowarden plan rojosinalma/example --set house # exit 2 when changes are pending
octowarden apply rojosinalma/example --set house
octowarden plan acme/api -f my-templates.yaml --template base --value required_checks=build
octowarden audit -f manifest.yaml # every repo in the manifestTemplates, sets and manifests are YAML (apiVersion: octowarden/v1), described in
docs/templates.md. More: configuration,
command line, JSON API, MCP,
operations, Octoforge member contract,
design.
bun install
cp .env.example .env
bun run dev # http://localhost:3000, reloads on change
bin/verify # typecheck + tests (TEST_POSTGRES_URL=… adds the Postgres tests)
docker compose -f compose.yaml -f compose.dev.yaml up -d --build # the same in a containerSee CONTRIBUTING.md.
This server cannot be deployed
GitHub security scanning, code audit, and workflow automation for repositories.
Manage repositories, users, releases, and automate GitHub workflows
Screens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.
Zendesk configuration management for AI agents: propose, review, apply and roll back changes.
