Evan
c25a321e88
* fix: pin npm package versions in MCP integration templates Prevent supply chain attacks by pinning exact versions instead of using unpinned `npx -y @package` which pulls latest on every run. 23 of 25 integrations pinned. sqlite-mcp and aws skipped (packages not found on npm registry). * fix: use stable azure/mcp version instead of beta
35 lines
1.1 KiB
TOML
35 lines
1.1 KiB
TOML
id = "github"
|
|
name = "GitHub"
|
|
description = "Access GitHub repositories, issues, pull requests, and organizations through the official MCP server"
|
|
category = "devtools"
|
|
icon = "🐙"
|
|
tags = ["git", "vcs", "code", "issues", "pull-requests", "ci"]
|
|
|
|
[transport]
|
|
type = "stdio"
|
|
command = "npx"
|
|
args = ["-y", "@modelcontextprotocol/server-github@2025.4.8"]
|
|
|
|
[[required_env]]
|
|
name = "GITHUB_PERSONAL_ACCESS_TOKEN"
|
|
label = "GitHub Personal Access Token"
|
|
help = "A fine-grained or classic PAT with repo and read:org scopes"
|
|
is_secret = true
|
|
get_url = "https://github.com/settings/tokens"
|
|
|
|
[oauth]
|
|
provider = "github"
|
|
scopes = ["repo", "read:org"]
|
|
auth_url = "https://github.com/login/oauth/authorize"
|
|
token_url = "https://github.com/login/oauth/access_token"
|
|
|
|
[health_check]
|
|
interval_secs = 60
|
|
unhealthy_threshold = 3
|
|
|
|
setup_instructions = """
|
|
1. Go to https://github.com/settings/tokens and create a Personal Access Token (classic or fine-grained) with 'repo' and 'read:org' scopes.
|
|
2. Paste the token into the GITHUB_PERSONAL_ACCESS_TOKEN field above.
|
|
3. Alternatively, use the OAuth flow to authorize LibreFang directly with your GitHub account.
|
|
"""
|