
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
@kinus/github-cicd-mcp
Advanced tools
MCP server for GitHub REST & GraphQL — repos, commits, PRs, issues, Actions CI/CD, releases, billing, and local git
GitHub CI/CD MCP server for Model Context Protocol.
Model Context Protocol (MCP) server for GitHub REST and GraphQL — built for CI/CD and DevOps workflows in Cursor, Claude Desktop, and other MCP clients.
Give your AI agent tools to manage repos, commits, pull requests, issues, GitHub Actions, deployments, billing, releases, branch protection, webhooks, and local git — without leaving the editor.
{
"mcpServers": {
"github-cicd": {
"command": "npx",
"args": ["-y", "@kinus/github-cicd-mcp"],
"env": {
"GITHUB_TOKEN": "${env:GITHUB_TOKEN}"
}
}
}
}
Set GITHUB_TOKEN (or GH_TOKEN) in your system environment, or replace ${env:GITHUB_TOKEN} with a secret reference your client supports.
git clone https://github.com/devstephenke-sys/Github-Free-MCPs.git
cd Github-Free-MCPs
npm install
npm run build
Point MCP at node /absolute/path/to/github-cicd-mcp/dist/index.js.
Create a personal access token:
| Need | Scopes / permissions |
|---|---|
| Repos, PRs, commits, issues | repo or fine-grained Contents, Pull requests, Issues |
| Actions | workflow |
| Org billing | read:org + org billing role |
| Admin (branch protection, webhooks) | Admin access on the repo/org |
Never commit tokens. Use environment variables only.
⚠️ Security: See SECURITY.md for security policies and best practices.
Recent Security Update (v1.2.3): Updated simple-git to v4.0.2 to address critical security vulnerabilities (CVE-2026-102828, CVE-2026-102826, CVE-2026-102827, CVE-2026-6951).
github_get_authenticated_user, github_get_rate_limit, github_create_repository, github_get_repository, github_list_repositories, github_create_branch, github_fork_repository
github_list_commits, github_get_commit, github_compare_commits, github_create_commit, github_get_combined_status, github_list_check_runs_for_ref
github_create_pull_request, github_list_pull_requests, github_get_pull_request, github_merge_pull_request, github_update_pull_request, github_list_pull_request_files, github_create_pull_request_review
github_create_issue, github_list_issues, github_get_issue, github_update_issue, github_add_issue_comment, github_list_issue_comments
github_list_releases, github_get_release_by_tag, github_create_release, github_list_tags, github_create_tag
github_list_branches, github_get_branch, github_get_branch_protection, github_update_branch_protection, github_delete_branch_protection
github_list_workflows, github_list_workflow_runs, github_get_workflow_run, github_list_workflow_jobs, github_rerun_workflow, github_cancel_workflow_run, github_dispatch_workflow, github_list_actions_secrets, github_list_actions_variables, github_list_workflow_run_artifacts, github_download_workflow_artifact
github_list_deployments, github_create_deployment, github_create_deployment_status, github_list_environments
github_get_user_billing_actions, github_get_org_billing_actions, github_get_org_billing_overview, github_get_org_billing_usage_report
github_list_webhooks, github_create_webhook, github_delete_webhook, github_list_collaborators, github_add_collaborator, github_list_teams
github_graphql_query, github_graphql_mutation, github_graphql_repository_overview
git_status, git_commit, git_push, git_pull, git_log, git_clone
GITHUB_HOST — hostname (when not github.com)GITHUB_API_URL — REST base, e.g. https://github.example.com/api/v3GITHUB_GRAPHQL_URL — GraphQL endpoint overridenpm install
npm run build
npm run verify
See RELEASING.md for:
npm publish --access public)FAQs
MCP server for GitHub REST & GraphQL — repos, commits, PRs, issues, Actions CI/CD, releases, billing, and local git
The npm package @kinus/github-cicd-mcp receives a total of 0 weekly downloads. As such, @kinus/github-cicd-mcp popularity was classified as not popular.
We found that @kinus/github-cicd-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.