GitHub MCP Remote Server Tools Report — 2026-02-22 #17701
Replies: 4 comments
-
|
/q update report to provide links to the sources of information. |
Beta Was this translation helpful? Give feedback.
-
Q Report: Source Links UpdateAnalyzed the GitHub MCP Remote Server Tools Report generated by the Finding: The report referenced source files (JSON mapping, instructions file, PRs) as plain text rather than clickable links. Changes made to
A PR has been created with these changes. The next report run will produce a discussion with clickable links to all referenced sources.
|
Beta Was this translation helpful? Give feedback.
-
|
🤖 Beep boop! The smoke test agent was here! Just passing through to make sure everything works. The automation is alive, the tests are running, and the code is compiling. All systems nominal! 🚀
|
Beta Was this translation helpful? Give feedback.
-
|
🎭 The Smoke Test Spectacular has concluded! The Copilot agent danced through 11 tests like a caffeinated robot at a hackathon. Files were created! Pages were navigated! Code was compiled! Discussions were discussed! The only party pooper? Serena MCP decided not to show up (tooling not available). But 10/11 ain't bad! 🤖✨ *takes a bow and exits through the merge queue*
|
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Generated: 2026-02-22
MCP Mode: Remote
Toolsets: All (19)
Previous Report: None (first run)
Executive Summary
This report audits the GitHub MCP remote server tools available in agentic workflows, compares them against the repository's JSON toolset mapping, and documents all discovered tools organized by toolset.
experiments,users)pkg/workflow/data/github_toolsets_permissions.json(v2.0, authoritative)Inconsistency Detection
Toolset Integrity Checks
search_issuesandsearch_pull_requestsappear in bothissues/pull_requestsANDsearchtoolsetslist_label(singular) inlabelstoolset vs typical plural conventionlist_labelsexperiments(0 tools),users(0 tools)Observations:
searchtoolset containssearch_issuesandsearch_pull_requests, which are also listed in theissuesandpull_requeststoolsets. These are likely aliases or cross-references to indicate search capability is available in both contexts.userstoolset is empty in the JSON mapping — this toolset requires a PAT and is not supported byGITHUB_TOKEN, explaining the absence of listed tools.experimentsis intentionally empty (preview features not yet stable).JSON Mapping Comparison
Comparison:
github_toolsets_permissions.json(v2.0) vsgithub_tool_to_toolset.json(migration file)Summary:
New Tools Added to Migration Mapping (31 tools)
get_copilot_spacegithub_support_docs_searchlist_copilot_spacesget_repository_treelist_issue_typesget_dependabot_alertlist_dependabot_alertsget_discussionget_discussion_commentslist_discussion_categoriesget_gistlist_labellist_labels)get_notification_detailslist_org_repository_security_advisoriesget_projectget_project_fieldget_project_itemlist_project_fieldslist_project_itemslist_projectsget_secret_scanning_alertget_global_security_advisorylist_global_security_advisorieslist_repository_security_advisorieslist_starred_repositoriesactions_getget_workflow_run)actions_listlist_workflow_runs)search_codesearch_issuessearch_orgssearch_pull_requestsLegacy Tools (in migration file but not in v2.0 JSON)
These tools are retained in the migration mapping for backward compatibility with existing
allowed:configurations:get_meuserstoolsetget_teamsget_team_membersget_repositoryget_file_contentsorget_repository_treesearch_codesearchtoolsetcreate_issueupdate_issueadd_reactioncreate_issue_commentget_pull_requestpull_requeststoolsetcreate_pull_requestlist_workflowsactions_listlist_workflow_runsactions_listget_workflow_runactions_getdownload_workflow_run_artifactactionstoolsetget_workflow_run_usageactionstoolsetlist_workflow_jobsactionstoolsetlist_workflow_run_artifactsactionstoolsetcreate_code_scanning_alertcreate_discussioncreate_gistlist_labelslist_labelcreate_labelmark_notifications_readget_organizationlist_organizationsget_useruserstoolsetlist_usersuserstoolsetAction: Created pull request with updated migration mapping and documentation.
Changes Since Last Report
No previous report exists. This is the first run.
Tools by Toolset
context Toolset
GitHub Copilot context and support documentation.
get_copilot_spacespace_idgithub_support_docs_searchquerylist_copilot_spacesrepos Toolset
Repository operations. Requires
contentsread permission.get_commitowner,repo,shaget_file_contentsowner,repo,path,refget_latest_releaseowner,repoget_release_by_tagowner,repo,tagget_repository_treeowner,repo,ref,recursiveget_tagowner,repo,taglist_branchesowner,repolist_commitsowner,repo,sha,pathlist_releasesowner,repolist_tagsowner,repoissues Toolset
Issue management. Requires
issuesread/write permission.issue_readowner,repo,issue_numberlist_issue_typesowner,repolist_issuesowner,repo,state,labelssearch_issuesquery,owner,repopull_requests Toolset
Pull request operations. Requires
pull-requestsread/write permission.list_pull_requestsowner,repo,state,basepull_request_readowner,repo,pull_numbersearch_pull_requestsquery,owner,repoactions Toolset
GitHub Actions workflows and CI/CD. Requires
actionsread permission.actions_getowner,repo,run_idactions_listowner,repo,workflow_idget_job_logsowner,repo,job_idcode_security Toolset
Code scanning alerts. Requires
security-eventsread/write permission.get_code_scanning_alertowner,repo,alert_numberlist_code_scanning_alertsowner,repo,state,severitydependabot Toolset
Dependabot vulnerability alerts. Requires
security-eventsread permission.get_dependabot_alertowner,repo,alert_numberlist_dependabot_alertsowner,repo,state,severitydiscussions Toolset
GitHub Discussions. Requires
discussionsread/write permission.get_discussionowner,repo,discussion_numberget_discussion_commentsowner,repo,discussion_numberlist_discussion_categoriesowner,repolist_discussionsowner,repo,category_idexperiments Toolset
Experimental/preview features. Currently empty — no tools available.
gists Toolset
GitHub Gist operations.
get_gistgist_idlist_gistsusernamelabels Toolset
Label management. Requires
issuesread/write permission.get_labelowner,repo,namelist_labelowner,reponotifications Toolset
User notification management.
get_notification_detailsthread_idlist_notificationsall,participatingorgs Toolset
Organization security advisories.
list_org_repository_security_advisoriesorgprojects Toolset
GitHub Projects (classic and new). Requires a PAT — not supported by
GITHUB_TOKEN.get_projectproject_idget_project_fieldproject_id,field_idget_project_itemproject_id,item_idlist_project_fieldsproject_idlist_project_itemsproject_idlist_projectsowner,orgsecret_protection Toolset
Secret scanning alerts. Requires
security-eventsread permission.get_secret_scanning_alertowner,repo,alert_numberlist_secret_scanning_alertsowner,repo,statesecurity_advisories Toolset
Security advisory management. Requires
security-eventsread/write permission.get_global_security_advisoryghsa_idlist_global_security_advisoriesecosystem,severity,cve_idlist_repository_security_advisoriesowner,repo,statestargazers Toolset
Repository star information.
list_starred_repositoriesusernameusers Toolset
User profile information. Currently empty in JSON mapping — requires PAT with additional scopes not available via
GITHUB_TOKEN.search Toolset
Advanced GitHub search across all resource types.
search_codequery,owner,reposearch_issuesquery,sort,ordersearch_orgsquerysearch_pull_requestsquery,sort,ordersearch_repositoriesquery,sort,ordersearch_usersquery,sort,orderRecommended Default Toolsets
Recommended Defaults:
context,repos,issues,pull_requestsRationale:
context: Provides Copilot space awareness and GitHub support documentation search, useful for almost any workflow operating in a Copilot environmentrepos: Core repository access (file contents, commits, branches, releases) is needed for nearly every development workflowissues: Issue tracking is fundamental to development and project management workflowspull_requests: PR operations (listing, reading) are essential for code review and CI-adjacent workflowsSpecialized Toolsets (enable explicitly when needed):
actions— CI/CD monitoring, workflow log analysisdiscussions— Community Q&A, announcementssearch— Cross-repository search operationscode_security,dependabot,secret_protection— Security audit workflowssecurity_advisories— Advisory management and trackingprojects— Project board management (requires PAT)notifications— Notification management workflowslabels— Label automationgists— Gist-based workflowsorgs— Organization-level security advisory listingstargazers— Star/engagement trackingusers— User profile lookups (requires PAT)experiments— Preview/experimental features (currently empty)Toolset Configuration Reference
Available toolset options:
context,repos,issues,pull_requests,actions,code_security,dependabot,discussions,experiments,gists,labels,notifications,orgs,projects,secret_protection,security_advisories,stargazers,users,search,default,allNotes and Observations
Context toolset evolution: The
contexttoolset in v2.0 now contains GitHub Copilot-specific tools (get_copilot_space,list_copilot_spaces,github_support_docs_search) instead of the older team-access tools (get_teams,get_team_members). This reflects a shift toward Copilot-oriented context in agentic workflows.Actions toolset renaming: The actions toolset tools were significantly renamed.
list_workflow_runsandget_workflow_runwere consolidated intoactions_listandactions_get, reducing granularity but simplifying the interface.Search toolset expansion: Several search operations previously embedded in other toolsets (
search_codein repos,search_issuesin issues) have been consolidated into the dedicatedsearchtoolset. This provides better separation of concerns.Write operations: Many write tools (
create_issue,update_issue,create_pull_request, etc.) are NOT listed in the v2.0 JSON mapping despite write permissions being defined. These operations are handled through thesafe-outputsmechanism in agentic workflows, which provides audit trails and proper permission enforcement.Projects toolset previously undocumented: The 6 project management tools were absent from the migration mapping file, indicating they may have been added in a recent MCP server update.
Naming consistency: Minor inconsistency —
list_label(singular) instead of the more conventionallist_labels(plural). This is a v2.0 API quirk to be aware of when using theallowed:pattern.Methodology
pkg/workflow/data/github_toolsets_permissions.json(v2.0, authoritative) cross-referenced withpkg/workflow/data/github_tool_to_toolset.jsonandskills/github-mcp-server/SKILL.mdReferences: §22277200550
Beta Was this translation helpful? Give feedback.
All reactions