Week 45, updated 2 Nov 2026

Agent skills & MCP GitHub MCP Server

Is GitHub MCP Server safe?

Short answer: No issues found. StackGrade's weekly scan of github/github-mcp-server found no issues: no critical-severity dependency advisories, no downloading install hooks, no remote-code patterns and no risky agent instruction files. It does list 1 high-severity advisory in runtime dependencies, which doesn't change the label. Automated scan of commit f2a07cd on 2 Nov 2026, not a manual audit.

Updated : the last week its score, rank or safety result changed.

GitHub's official MCP server for repos, issues and pull requests.

  • 34,149 stars
  • pushed 30 Oct
  • MIT
  • Go

github.com/github/github-mcp-server

41score out of 100

#40of 52 overall#8in Agent skills & MCP▼ 9 vs Week 44

  • Maintenance 30%34
  • Adoption 30%28
  • Docs 20%69
  • Community 20%–
W42W43W44W45

Score over the last 4 weeks: 55, 49, 50, 41.

No issues found

All checks clean in the scan of 2 Nov 2026.

How this score works

Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.

  • Maintenance: Last push 30 Oct 2026. Last 10 GitHub releases within 48 days (about 5.6 per 30 days), latest release 21 Oct 2026. Median 92 h to close an issue (13 closed issues).
  • Adoption: 34,149 stars (70%), 5,271 forks (30%).
  • Docs: README 120,041 characters, 37 headings, 37 code blocks, install section: yes.

Methodology

#8 of 9 in Agent skills & MCP

Ranked by score. The yellow row is this tool.

Agent skills & MCP, Week 45score 0–100, safety
  1. 1Superpowers#13 overall62No dependencies scanned
  2. 2Context7#19 overall57Caution
  3. 3Agent Skills#25 overall53No issues found
  4. 4MCP reference servers#29 overall48No issues found
  5. 5awesome-mcp-servers#30 overall47No dependencies scanned
  6. 6Playwright MCP#32 overall45No issues found
  7. 7wshobson/agents#38 overall42No issues found
  8. 8GitHub MCP Server#40 overall41No issues found
Show the other 1
  1. 9skill-recorder#52 overall22No issues found

Safety scan, 2 Nov 2026

Automated scan of commit f2a07cd, 388 files. Not a manual audit.

No issues found

  • 0Critical dependency advisories1 high, 1 medium, 0 low. OSV, runtime dependencies only.
  • 0Install hooksNo npm install scripts found.
  • 0Remote-code patternsFor example eval(fetch(…)).
  • 1Agent files checked0 phrases flagged for review.
  • 0curl | sh installersIn docs or program code. Information only.
Why this label?

No issues found by the automated scan.

Known vulnerabilities in runtime dependencies (OSV): 0 critical, 1 high, 1 medium, 0 low, 2 unrated

Also found (informational, does not change the label):

  • 1 high-severity known vulnerability in runtime dependencies (OSV)

Notes:

  • 1 affected package only in dev/test/docs manifests, not counted
  • Telemetry/analytics references in code: telemetry

Automated scan of commit f2a07cd on 2 Nov 2026, not a manual audit. 388 files checked. What we check

Repo activity

From the GitHub API, fetched 2 Nov 2026.

  • 10+Releases, 90 daysLatest v2.0.3, 21 Oct
  • 4dMedian issue closeOver 13 closed issues
  • 34.1kStars+188 since 26 Oct
  • 5.3kForks398 open issues
  • 2025Repo created4 Mar 2025
30 days ago2 Nov
5 releases in the last 30 days, one mark each (GitHub releases feed, last 10 entries).

5 releases in the last 30 days (GitHub releases feed, last 10 entries):

Questions about GitHub MCP Server

Answers use this week's StackGrade data.

Is GitHub MCP Server safe to use?

No issues found. StackGrade's weekly scan of github/github-mcp-server found no issues: no critical-severity dependency advisories, no downloading install hooks, no remote-code patterns and no risky agent instruction files. It does list 1 high-severity advisory in runtime dependencies, which doesn't change the label. Automated scan of commit f2a07cd on 2 Nov 2026, not a manual audit.

How does StackGrade score GitHub MCP Server?

GitHub MCP Server scores 41 out of 100 in Week 45: #40 of 52 tracked tools overall and #8 in Agent skills & MCP. The score combines maintenance (34), adoption (28) and docs (69) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.

What are the alternatives to GitHub MCP Server?

The highest-scored other tools in Agent skills & MCP this week: Superpowers (62, No dependencies scanned), Context7 (57, Caution), Agent Skills (53, No issues found), MCP reference servers (48, No issues found). StackGrade has not tested them hands-on.

What licence does GitHub MCP Server use?

The licence listed for github/github-mcp-server is MIT. Read the licence text before commercial use.

Compare and use it

All facts and sources
Type
MCP server
License
MIT
Language
Go
Created
4 Mar 2025
Owner
github (Organization)
Forks
5,271

GitHub description: “GitHub's official MCP Server”

Sources: github.com/github/github-mcp-server, api.github.com/repos/github/github-mcp-server, raw.githubusercontent.com/github/github-mcp-server/main/READ. Fetched 2 Nov 2026.

Know when GitHub MCP Server changes label

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.