
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
mcp-server-github-actions
Advanced tools
MCP server for GitHub Actions — view workflow runs, read logs, re-run failed jobs, and manage CI/CD from your IDE
Manage GitHub Actions workflows from your AI assistant. List runs, read logs, re-run failed jobs, cancel builds, and trigger deployments without leaving your editor.
npx mcp-server-github-actions
Works with Claude Desktop, Cursor, VS Code Copilot, and any MCP client. Requires a GitHub token with Actions permissions.

Demo built with remotion-readme-kit
GitHub's official MCP server covers repos, issues, and PRs, but it doesn't touch Actions. That means when your CI fails, you still have to open a browser, find the run, click through to the logs, and figure out what went wrong. This server fills that gap. You can ask your assistant "why did the last CI run fail?" or "re-run the failed jobs" and get answers right where you're working. It uses the same GitHub REST API you'd use manually, just without the context switching.
| Tool | Description |
|---|---|
list_workflows | List all workflow files in a repository |
list_runs | List workflow runs (optionally filter by workflow or status) |
get_run | Get details of a specific workflow run |
get_run_logs | Get the logs URL for a run (zip file download) |
rerun_workflow | Re-run an entire workflow run |
rerun_failed_jobs | Re-run only the failed jobs from a run |
cancel_run | Cancel an in-progress or queued run |
list_artifacts | List artifacts produced by a workflow run |
trigger_workflow | Trigger a workflow via workflow_dispatch |
Add to your Cursor MCP settings (e.g. ~/.cursor/mcp.json or project-level):
{
"mcpServers": {
"github-actions": {
"command": "npx",
"args": ["-y", "mcp-server-github-actions"],
"env": {
"GITHUB_TOKEN": "<your-token>"
}
}
}
}
Add to claude_desktop_config.json:
{
"mcpServers": {
"github-actions": {
"command": "npx",
"args": ["-y", "mcp-server-github-actions"],
"env": {
"GITHUB_TOKEN": "<your-token>"
}
}
}
}
Configure your MCP client to run:
npx mcp-server-github-actions
Make sure GITHUB_TOKEN is set in the environment (e.g. in your shell profile or client config).
Create a GitHub Personal Access Token:
repo scope (includes Actions)npm install
npm run typecheck
npm run build
npm test
npm run lint
npm run format
More MCP servers and developer tools on my portfolio.
README built with README Builder
MIT © 2026 Ofer Shapira
FAQs
MCP server for GitHub Actions — view workflow runs, read logs, re-run failed jobs, and manage CI/CD from your IDE
The npm package mcp-server-github-actions receives a total of 26 weekly downloads. As such, mcp-server-github-actions popularity was classified as not popular.
We found that mcp-server-github-actions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.