
Security News
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.
🇬🇧 English | 🇹🇷 Turkce
✨ A production-ready, stdio-first GitHub MCP server built on
@vaur94/mcpbase.
mcp-gitpro gives AI agents a compact GitHub tool surface without drifting into local git, filesystem mutation, shell execution, or browser automation. The goal is simple: high-value GitHub workflows, low context waste, and clear safety boundaries.
@vaur94/mcpbase package instead of a local fork>=22.14.0>=10MCP_GITPRO_GITHUB_TOKENThe setup below is for a local checkout of this repository.
Preferred repo-local setup:
bash ./scripts/install-local.sh
This installs dependencies, builds the server, and runs npm test once.
The commands below assume you are running from a clone of this repository, where scripts/install-local.sh and mcp-gitpro.config.json are available.
bash ./scripts/install-local.sh
export MCP_GITPRO_GITHUB_TOKEN=YOUR_GITHUB_TOKEN
node ./dist/index.js --config ./mcp-gitpro.config.json
npm run ci:check
Common host values:
node/absolute/path/to/mcp-gitpro/dist/index.js--config /absolute/path/to/mcp-gitpro/mcp-gitpro.config.jsonMCP_GITPRO_GITHUB_TOKEN=...Each guide follows the same pattern:
bash ./scripts/install-local.shdist/index.js--config /absolute/path/to/mcp-gitpro/mcp-gitpro.config.jsonMCP_GITPRO_GITHUB_TOKEN| Host | Integration model | Guide |
|---|---|---|
| OpenCode | opencode.json local MCP entry with command array | OpenCode |
| Codex CLI / IDE | config.toml with [mcp_servers.<name>] | Codex |
| VS Code | workspace MCP JSON with command, args, and env | VS Code |
| Antigravity | mcpServers JSON entry with absolute executable paths | Antigravity |
contextrepossearchissuespull_requestsactionsgithub_contextrepository_readrepository_comparesearch_githubissue_readissue_writepull_request_readpull_request_writeactions_readactions_writeConfiguration precedence:
mcp-gitpro.config.jsonMCP_GITPRO_* environment variablesmcpbaseImportant fields:
auth.githubTokendefaults.ownerdefaults.repodefaults.apiBaseUrlcontext.readOnlycontext.toolsetscontext.toolsoutput.pageSizeoutput.maxFileLinesoutput.maxDiffLinesoutput.maxBodyCharsmcp-gitpro/
|- src/
| |- config/
| |- core/
| |- github/
| |- shared/
| |- tools/
|- tests/
| |- unit/
| |- protocol/
|- docs/
| |- en/
| |- tr/
|- scripts/
mcp-gitpro depends on the published @vaur94/mcpbase package from npmApplicationRuntime, createMcpServer, and startStdioServermcpbase through createRuntimeConfigSchema and loadConfigBaseToolExecutionContext with GitHubClientdocs/en/index.mddocs/tr/index.mddocs/en/quick-start.mddocs/en/usage.mddocs/en/configuration.mddocs/tr/configuration.mdSECURITY.mdCONTRIBUTING.mdSUPPORT.mdnpm run build
npm run typecheck
npm run test
npm run test:coverage
npm run test:protocol
npm run ci:check
This repository intentionally excludes:
Security controls include token-based auth, read-only mode, tool allowlists, output caps, and out-of-band Actions log delivery.
MIT - see LICENSE.
Last updated: 2026-03-10
FAQs
Stdio-first GitHub-focused MCP server scaffold built on @vaur94/mcpbase.
We found that mcp-gitpro demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.

Research
/Security News
Thirteen malicious Packagist themes expose visitors on unpatched iPhones to a WebKit-to-kernel exploit chain that steals device data and wallet seeds.