GitHub MCP Remote Server Tools Report — 2026-03-01

[github-actions[bot]]

Generated: 2026-03-01
MCP Mode: Remote
Toolsets: All
Previous Report: None (first run)

---

Executive Summary

• Total Tools Discovered: 80 (local server) + 4 remote-only = 84 total
• Toolset Categories: 19 (including git and copilot which are newer additions)
• Report Date: 2026-03-01
• Source: github/github-mcp-server README
• Default Toolsets: context, repos, issues, pull_requests, users
• Changes Since Last Report: N/A — first run, no previous cache found

This is the first run of the GitHub MCP tools auditor for this repository. No previous cache was found at /tmp/gh-aw/cache-memory/github-mcp-tools.json, and no pkg/workflow/data/github_toolsets_permissions.json exists in this repository (this is a Unity project repository, not the gh-aw workflow repository). The report has been generated by cross-referencing the live github/github-mcp-server README with Go source files.

---

Inconsistency Detection

Toolset Integrity Checks

The following inconsistencies were detected during systematic exploration:

Issue	Details	Severity
Duplicate tool: get_label	get_label appears in both the issues toolset and the labels toolset	⚠️ Medium
git toolset not in original list	The git toolset (with get_repository_tree) is listed in the README but was not included in the original 18-toolset enumeration in the task prompt	ℹ️ Info
No dedicated search toolset	The task prompt references a search toolset, but it does not exist as a standalone entity — search tools (search_code, search_repositories, search_issues, search_pull_requests, search_users, search_orgs) are distributed across their respective toolsets	ℹ️ Info
experiments toolset (dynamic tools) is beta/local-only	Dynamic toolset discovery tools (enable_toolset, list_available_toolsets, get_toolset_tools) are available in the local server only as a beta feature — not in the remote server	ℹ️ Info
copilot toolset split between local and remote	assign_copilot_to_issue and request_copilot_review are in the local copilot toolset; create_pull_request_with_copilot is remote-only	ℹ️ Info

Detailed Inconsistency Analysis

get_label Duplication

The get_label tool is registered in two toolsets:

• issues toolset (in pkg/github/issues.go)
• labels toolset (in pkg/github/labels.go)

This means if both toolsets are enabled, the tool appears twice. This is likely intentional as label management is closely related to issue management, but it represents an architectural inconsistency. The recommendation would be to make get_label authoritative in the labels toolset only and reference it from issues if needed.

Missing search Toolset

The search toolset referenced in pkg/github/search.go does not register as a standalone toolset in the server configuration. Instead:

• search_orgs is registered under the orgs toolset
• search_users is registered under the users toolset
• search_code and search_repositories are registered under the repos toolset
• search_issues is registered under the issues toolset
• search_pull_requests is registered under the pull_requests toolset

The search.go source file exists but serves as a shared file contributing tools to multiple toolsets.

git Toolset

The git toolset containing get_repository_tree is available but was not listed in the original 18-toolset enumeration. This toolset provides low-level Git API operations. The current tool count is 1 (get_repository_tree), suggesting this may be an area for future expansion.

---

JSON Mapping Comparison

No JSON File Found

The file pkg/workflow/data/github_toolsets_permissions.json does not exist in this repository (norrietaylor/tt2). This is a Unity project repository and does not contain the gh-aw workflow infrastructure. No comparison or update was performed.

Action: No pull request created — the target file path does not exist in this repository.

---

Changes Since Last Report

No previous cache data available — this is the first run.

---

Tools by Toolset

Actions Toolset

GitHub Actions workflows and CI/CD operations.

Source: pkg/github/actions.go

Tool Name	Purpose	Key Parameters
actions_get	Get details of GitHub Actions resources	method, owner, repo, resource_id
actions_list	List workflows, runs, jobs, or artifacts	method, owner, repo, resource_id
actions_run_trigger	Trigger/cancel/rerun workflow actions	method, owner, repo, workflow_id, run_id
get_job_logs	Get workflow job logs (URL or content)	owner, repo, job_id, run_id, failed_only

---

Code Security Toolset

Code security related tools (GitHub Code Scanning).

Source: pkg/github/code_scanning.go

Tool Name	Purpose	Key Parameters
get_code_scanning_alert	Get a specific code scanning alert	owner, repo, alertNumber
list_code_scanning_alerts	List code scanning alerts	owner, repo, state, severity, tool_name, ref

---

Context Toolset ⭐ (Default)

Tools that provide context about the current user and GitHub environment.

Source: pkg/github/context_tools.go

Tool Name	Purpose	Key Parameters
get_me	Get current authenticated user profile	None required
get_team_members	Get members of a GitHub team	org, team_slug
get_teams	Get teams for a user or organization	user (optional)

---

Copilot Toolset

Copilot-related tools (available in both local and remote servers).

Source: Local server — various; Remote-only tools available via copilot and copilot_spaces endpoints.

Tool Name	Purpose	Key Parameters
assign_copilot_to_issue	Assign Copilot coding agent to an issue	owner, repo, issue_number
request_copilot_review	Request a Copilot review on a PR	owner, repo, pullNumber
create_pull_request_with_copilot (remote only)	Create PR via Copilot coding agent	owner, repo, problem_statement, title
get_copilot_space (remote only)	Get a specific Copilot Space	owner, name
list_copilot_spaces (remote only)	List all Copilot Spaces	None required

---

Dependabot Toolset

Dependabot security alert tools.

Source: pkg/github/dependabot.go

Tool Name	Purpose	Key Parameters
get_dependabot_alert	Get a specific Dependabot alert	owner, repo, alertNumber
list_dependabot_alerts	List Dependabot alerts for a repo	owner, repo, state, severity

---

Discussions Toolset

GitHub Discussions tools.

Source: pkg/github/discussions.go

Tool Name	Purpose	Key Parameters
get_discussion	Get a specific discussion	owner, repo, discussionNumber
get_discussion_comments	Get comments on a discussion	owner, repo, discussionNumber, after, perPage
list_discussion_categories	List discussion categories	owner, repo (optional)
list_discussions	List discussions	owner, repo, category, orderBy, direction

---

Experiments Toolset (Beta — Local Server Only)

Dynamic tool discovery tools. Not available in the Remote GitHub MCP Server.

Source: pkg/github/dynamic_tools.go

Tool Name	Purpose	Key Parameters
enable_toolset	Enable a specific toolset dynamically	toolset_name
list_available_toolsets	List all available toolsets	None
get_toolset_tools	Get all tools in a toolset	toolset_name

---

Gists Toolset

GitHub Gist operations.

Source: pkg/github/gists.go

Tool Name	Purpose	Key Parameters
create_gist	Create a new Gist	filename, content, description, public
get_gist	Get content of a Gist	gist_id
list_gists	List Gists for a user	username, page, perPage, since
update_gist	Update an existing Gist	gist_id, filename, content, description

---

Git Toolset (Newer Addition)

Low-level Git API operations.

Source: pkg/github/repositories.go

Tool Name	Purpose	Key Parameters
get_repository_tree	Get Git tree structure of a repository	owner, repo, tree_sha, recursive, path_filter

---

Issues Toolset ⭐ (Default)

GitHub Issues management.

Source: pkg/github/issues.go

Tool Name	Purpose	Key Parameters
add_issue_comment	Add a comment to an issue	owner, repo, issue_number, body
get_label	Get a specific label ⚠️ also in labels	owner, repo, name
issue_read	Read issue data (get/comments/sub-issues/labels)	owner, repo, issue_number, method
issue_write	Create or update an issue	owner, repo, method, title, body
list_issue_types	List available issue types for an org	owner
list_issues	List issues for a repository	owner, repo, state, labels, since
search_issues	Search issues using GitHub syntax	query, owner, repo
sub_issue_write	Add/remove/reprioritize sub-issues	owner, repo, issue_number, method, sub_issue_id

---

Labels Toolset

GitHub Label management.

Source: pkg/github/labels.go

Tool Name	Purpose	Key Parameters
get_label	Get a specific label ⚠️ also in issues	owner, repo, name
label_write	Create, update, or delete labels	owner, repo, method, name, color
list_label	List labels for a repository	owner, repo

---

Notifications Toolset

GitHub Notifications management.

Source: pkg/github/notifications.go

Tool Name	Purpose	Key Parameters
dismiss_notification	Dismiss a notification thread	threadID, state
get_notification_details	Get details of a notification	notificationID
list_notifications	List notifications	owner, repo, filter, since, before
manage_notification_subscription	Manage thread subscription	notificationID, action
manage_repository_notification_subscription	Manage repo notification subscription	owner, repo, action
mark_all_notifications_read	Mark all notifications as read	owner, repo, lastReadAt

---

Organizations Toolset (orgs)

GitHub Organization tools.

Source: pkg/github/search.go

Tool Name	Purpose	Key Parameters
search_orgs	Search GitHub organizations	query, sort, order, page, perPage

---

Projects Toolset

GitHub Projects management.

Source: pkg/github/projects.go

Tool Name	Purpose	Key Parameters
projects_get	Get GitHub Projects resources	method, owner, project_number
projects_list	List GitHub Projects resources	method, owner, project_number
projects_write	Modify GitHub Project items	method, owner, project_number

---

Pull Requests Toolset ⭐ (Default)

GitHub Pull Request tools.

Source: pkg/github/pullrequests.go

Tool Name	Purpose	Key Parameters
add_comment_to_pending_review	Add comment to pending review	owner, repo, pullNumber, body, path
add_reply_to_pull_request_comment	Reply to a PR comment	owner, repo, pullNumber, commentId, body
create_pull_request	Open a new pull request	owner, repo, title, head, base
list_pull_requests	List pull requests	owner, repo, state, head, base
merge_pull_request	Merge a pull request	owner, repo, pullNumber, merge_method
pull_request_read	Read PR data (get/diff/status/files/reviews/comments/checks)	owner, repo, pullNumber, method
pull_request_review_write	Create/submit/delete PR reviews	owner, repo, pullNumber, method
search_pull_requests	Search pull requests	query, owner, repo
update_pull_request	Edit a pull request	owner, repo, pullNumber
update_pull_request_branch	Update PR branch (rebase/merge)	owner, repo, pullNumber

---

Repositories Toolset ⭐ (Default)

GitHub Repository operations.

Source: pkg/github/repositories.go

Tool Name	Purpose	Key Parameters
create_branch	Create a new branch	owner, repo, branch, from_branch
create_or_update_file	Create or update a file	owner, repo, path, content, message, branch
create_repository	Create a new repository	name, description, private, organization
delete_file	Delete a file	owner, repo, path, message, branch
fork_repository	Fork a repository	owner, repo, organization
get_commit	Get commit details	owner, repo, sha
get_file_contents	Get file or directory contents	owner, repo, path, ref, sha
get_latest_release	Get the latest release	owner, repo
get_release_by_tag	Get a release by tag	owner, repo, tag
get_tag	Get tag details	owner, repo, tag
list_branches	List repository branches	owner, repo
list_commits	List repository commits	owner, repo, sha, author
list_releases	List repository releases	owner, repo
list_tags	List repository tags	owner, repo
push_files	Push multiple files in one commit	owner, repo, branch, files, message
search_code	Search code across GitHub	query
search_repositories	Search GitHub repositories	query

---

Secret Protection Toolset

Secret scanning alert tools.

Source: pkg/github/secret_scanning.go

Tool Name	Purpose	Key Parameters
get_secret_scanning_alert	Get a specific secret scanning alert	owner, repo, alertNumber
list_secret_scanning_alerts	List secret scanning alerts	owner, repo, state, secret_type, resolution

---

Security Advisories Toolset

Security advisory tools.

Source: pkg/github/security_advisories.go

Tool Name	Purpose	Key Parameters
get_global_security_advisory	Get global security advisory by GHSA ID	ghsaId
list_global_security_advisories	List global security advisories	severity, ecosystem, cveId, ghsaId
list_org_repository_security_advisories	List org repository advisories	org, state, sort, direction
list_repository_security_advisories	List repository advisories	owner, repo, state

---

Stargazers Toolset

Repository star management.

Source: pkg/github/repositories.go

Tool Name	Purpose	Key Parameters
list_starred_repositories	List starred repositories for a user	username, sort, direction
star_repository	Star a repository	owner, repo
unstar_repository	Unstar a repository	owner, repo

---

Users Toolset ⭐ (Default)

GitHub User tools.

Source: pkg/github/search.go

Tool Name	Purpose	Key Parameters
search_users	Search GitHub users	query, sort, order

---

Remote-Only Toolsets

Copilot Spaces (remote only)

Tool Name	Purpose	Key Parameters
get_copilot_space	Get a specific Copilot Space	owner, name
list_copilot_spaces	List all Copilot Spaces	None

GitHub Support Docs Search (remote only)

Tool Name	Purpose	Key Parameters
github_support_docs_search	Search GitHub documentation for support questions	query

---

Recommended Default Toolsets

Based on analysis of the available tools, the current default configuration is appropriate:

Recommended Defaults: context, repos, issues, pull_requests, users

Rationale:

Toolset	Reason for Default
context	Provides get_me for user identity and team information — essential for any workflow
repos	Core repository operations (read files, list commits, create branches) — needed by nearly all agents
issues	Issue management is a fundamental GitHub workflow — covers creation, reading, and searching
pull_requests	PR management is central to code review workflows — covers full PR lifecycle
users	User search provides search_users for finding collaborators and team members

Specialized Toolsets (enable explicitly when needed):

Toolset	When to Enable
actions	CI/CD monitoring, workflow automation tasks
code_security	Code scanning alert triage and remediation workflows
copilot	When using Copilot coding agent features
dependabot	Dependency security alert management
discussions	Community discussion workflows
gists	Gist creation/management workflows
git	Low-level Git tree inspection
labels	Label management automation
notifications	Notification triage workflows
orgs	Organization discovery and management
projects	GitHub Projects board management
secret_protection	Secret scanning alert management
security_advisories	Security advisory research and management
stargazers	Repository star tracking
experiments	Dynamic tool discovery (local server, beta only)

---

Toolset Configuration Reference

When configuring the GitHub MCP server in agentic workflows, enable specific toolsets:

tools:
  github:
    mode: "remote"
    toolsets: [all]  # or specific: [context, repos, issues, pull_requests, users]

Remote Server URL: https://api.githubcopilot.com/mcp/

Authentication: Bearer token via Authorization: Bearer (token) header

Read-only mode: Add /readonly to any toolset URL, or use X-MCP-Readonly: true header

Insiders mode: Use URL https://api.githubcopilot.com/mcp/insiders or header X-MCP-Insiders: true

Per-toolset URLs:

• All tools: https://api.githubcopilot.com/mcp/
• Actions only: https://api.githubcopilot.com/mcp/x/actions
• Issues only: https://api.githubcopilot.com/mcp/x/issues
• Pull Requests only: https://api.githubcopilot.com/mcp/x/pull_requests
• Repos only: https://api.githubcopilot.com/mcp/x/repos

---

Notes and Observations

1. Consolidation pattern: Many toolsets use consolidated multi-method tools (e.g., issue_read with method parameter for get/comments/sub-issues/labels; pull_request_read with 8 method options). This reduces tool count while maintaining full functionality.

2. get_label duplication: This tool is intentionally in both issues and labels toolsets so that users of the issues toolset don't need to separately enable labels just to look up a label.

3. git toolset: Currently contains only get_repository_tree. This is a newer addition and may expand to include other low-level Git API operations (refs, blobs, trees, commits via Git Data API).

4. search source file: pkg/github/search.go contributes tools to multiple toolsets (repos, issues, pull_requests, orgs, users) rather than having its own toolset — this is by design to keep related search tools co-located with their domain toolsets.

5. Remote-only tools: The remote GitHub MCP server has additional tools not available locally: Copilot coding agent integration (create_pull_request_with_copilot), Copilot Spaces, and GitHub Support Documentation Search.

6. Lockdown mode: The server supports a lockdown mode that restricts content from public repositories to authors with push access — affecting issue_read:get, pull_request_read:get, and filtering comments/reviews.

---

Methodology

• Discovery Method: Cross-reference of the github/github-mcp-server README.md (automated tools section) with Go source file inspection
• MCP Configuration: Remote mode with all toolsets enabled
• Categorization: Based on toolset metadata in source files and README
• MCP Server Source: github/github-mcp-server
• Cache Saved: /tmp/gh-aw/cache-memory/github-mcp-tools.json

---

References:

• §22542496194
• github-mcp-server README
• github-mcp-server source

AI generated by GitHub MCP Remote Server Tools Report Generator

• expires on Mar 8, 2026, 11:36 AM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-03-08T11:36:34.841Z.

Closed by Workflow