
GitHub CI/CD MCP Server
io.github.devstephenke-sysPublished by GitHub account devstephenke-sysv1.2.2Updated Oct 24, 2026
GitHub CI/CD MCP server with 70 tools for repos, PRs, Actions, deployments, billing, and more.
Overview
Lets an assistant manage GitHub repositories, pull requests, issues, Actions, deployments, billing and local git through 70 tools.
- What you can do
- A local MCP server exposing roughly 70 GitHub tools over REST and GraphQL. It covers repository and branch management, commits and CI status, pull requests and reviews, issues and comments, releases and tags, branch protection, GitHub Actions workflows and artifacts, deployments, org and user billing, webhooks, collaborators and teams. It also includes local git commands such as status, commit, push, pull, log and clone.
- When to use it
- Useful when an assistant should drive CI/CD and DevOps work in GitHub from an editor or desktop MCP client: inspecting and rerunning workflows, opening or merging pull requests, creating releases, checking deployments, or running local git operations. Less relevant if you only need read-only browsing of a single repository.
- Requirements
- Runs locally over stdio, typically via npx @kinus/github-cicd-mcp or a built Node.js entry point, so Node.js and npm are needed. Requires a GitHub personal access token supplied as GITHUB_TOKEN (GH_TOKEN is also mentioned), with scopes such as repo, workflow, read:org or admin depending on the operations used. Optional GITHUB_HOST, GITHUB_API_URL and GITHUB_GRAPHQL_URL variables target GitHub Enterprise. Desktop clients only.
Installation
In SourceWeft
- Open GitHub CI/CD MCP Server in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
github-cicd-mcp
GitHub CI/CD MCP server for Model Context Protocol.
[CI] [npm version] [License: MIT] [GitHub CI/CD MCP server]
Model Context Protocol (MCP) server for GitHub REST and GraphQL — built for CI/CD and DevOps workflows in Cursor, Claude Desktop, and other MCP clients.
Give your AI agent tools to manage repos, commits, pull requests, issues, GitHub Actions, deployments, billing, releases, branch protection, webhooks, and local git — without leaving the editor.
Install
npm / npx (recommended)
Set GITHUB_TOKEN (or GH_TOKEN) in your system environment, or replace ${env:GITHUB_TOKEN} with a secret reference your client supports.
From source
Point MCP at node /absolute/path/to/github-cicd-mcp/dist/index.js.
Authentication
Create a personal access token:
Never commit tokens. Use environment variables only.
⚠️ Security: See SECURITY.md for security policies and best practices.
Recent Security Update (v1.2.3): Updated simple-git to v4.0.2 to address critical security vulnerabilities (CVE-2026-102828, CVE-2026-102826, CVE-2026-102827, CVE-2026-6951).
Tool reference
Core & repos
github_get_authenticated_user, github_get_rate_limit, github_create_repository, github_get_repository, github_list_repositories, github_create_branch, github_fork_repository
Commits & CI status
github_list_commits, github_get_commit, github_compare_commits, github_create_commit, github_get_combined_status, github_list_check_runs_for_ref
Pull requests
github_create_pull_request, github_list_pull_requests, github_get_pull_request, github_merge_pull_request, github_update_pull_request, github_list_pull_request_files, github_create_pull_request_review
Issues
github_create_issue, github_list_issues, github_get_issue, github_update_issue, github_add_issue_comment, github_list_issue_comments
Releases & tags
github_list_releases, github_get_release_by_tag, github_create_release, github_list_tags, github_create_tag
Branches & protection
github_list_branches, github_get_branch, github_get_branch_protection, github_update_branch_protection, github_delete_branch_protection
GitHub Actions
github_list_workflows, github_list_workflow_runs, github_get_workflow_run, github_list_workflow_jobs, github_rerun_workflow, github_cancel_workflow_run, github_dispatch_workflow, github_list_actions_secrets, github_list_actions_variables, github_list_workflow_run_artifacts, github_download_workflow_artifact
Deployments (CD)
github_list_deployments, github_create_deployment, github_create_deployment_status, github_list_environments
Billing
github_get_user_billing_actions, github_get_org_billing_actions, github_get_org_billing_overview, github_get_org_billing_usage_report
Webhooks & access
github_list_webhooks, github_create_webhook, github_delete_webhook, github_list_collaborators, github_add_collaborator, github_list_teams
GraphQL
github_graphql_query, github_graphql_mutation, github_graphql_repository_overview
Local git
git_status, git_commit, git_push, git_pull, git_log, git_clone
GitHub Enterprise
GITHUB_HOST— hostname (when notgithub.com)GITHUB_API_URL— REST base, e.g.https://github.example.com/api/v3GITHUB_GRAPHQL_URL— GraphQL endpoint override
Development
Publish your own fork
See RELEASING.md for:
- Public GitHub repo setup
- npm publish (
npm publish --access public) - GitHub Releases and optional MCP directory listings
License
Source: README.md at commit 808c30c
Tools
0Version history
1- v1.2.2LatestOct 13, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts