GitHub MCP servers: which one to use

Q: How do I make the GitHub MCP server read-only?

On the hosted server, add /readonly to the end of the address. Locally, start it with the read-only flag. Either way, every tool that changes anything is removed.

Use GitHub's official server for almost everything. Pick a community one only for a narrow job, like security audits or a GitHub CLI workflow.

Servers: 81; active
Official: 1; by GitHub
Hosted: 20; nothing to install
Local: 41; runs on your machine
OAuth: 1; sign in, no key

GitHub publishes its own MCP server, and it covers repos, issues, pull requests and Actions. It runs hosted or on your computer, and it has a read-only option. The community servers each do a narrower job, so choose one only if the official server does not fit. Whichever you use, give it a token that reaches only the repos you need.

Good for

Developers who want Claude Code or Cursor to open pull requests and triage issues
Teams on GitHub Enterprise Server who need a self-hosted setup
Security teams auditing org settings, Actions and secrets
Anyone who wants an assistant to read repos but never change them

Which GitHub MCP server to use

Start with GitHub's official server, using the read-only option until you trust it. Pare GitHub suits people who already use the GitHub CLI, and GitHub Security MCP suits audits of org and Actions settings.

Server	Official	Runs	Sign-in	Read-only option	Tools	GitHub stars
GitHubThis page	Official	HostedLocal	Account or token	URL or flag	96	34.1K
Pare GitHub	Community	Local	GitHub CLI	–	14	–
GitHub Security MCP	Community	Local	Token	–	39	16
GitHub Enterprise MCP	Community	Local	Token	–	–	2
github-repos-manager	Community	Local	Token	–	–	–

All GitHub MCP servers

81 active · 1 official · official first, then by GitHub stars

Show all 81

Questions

Is there an official GitHub MCP server?

Yes. GitHub makes it, and it is free for every GitHub user on any plan. It runs hosted at https://api.githubcopilot.com/mcp/ or on your own computer.

How do I make the GitHub MCP server read-only?

On the hosted server, add /readonly to the end of the address. Locally, start it with the read-only flag. Either way, every tool that changes anything is removed.

Does it work with GitHub Enterprise Server?

Yes, if you run the official server on your own machine and point it at your server. GitHub does not host it for Enterprise Server. GitHub Enterprise MCP is a community option built for custom Enterprise addresses.

Should I sign in with GitHub or use a token?

Sign in with GitHub where your app supports it. Elsewhere use a fine-grained personal access token limited to the repos you need, set to expire in 90 days or less.

What is the old @modelcontextprotocol/server-github package?

An older reference server that GitHub says it has not supported since April 2025. Use GitHub's own server instead.

Is the cyanheads GitHub server still worth using?

No. Its README says the repository is deprecated and points to GitHub's official server.

What does Pare GitHub do differently?

It wraps the GitHub CLI and returns typed results for pull requests, issues, workflow runs, secrets and variables. It has 14 tools, so it uses less context than the official server's 96. It can also set and delete Actions secrets.

What is GitHub Security MCP for?

Auditing your security setup. Its README lists 39 tools for org settings, repos, Actions, secrets and supply chain, and suggests a fine-grained token with read-only permissions.

Is it safe to give an assistant access to GitHub?

Only with limits. The official server can push files and merge pull requests. A planted public issue has tricked an assistant into leaking private code, so start read-only with a narrow token.

How do I add GitHub to Claude Code or Cursor?

Open the GitHub server's page and use its install box. In both apps you paste a personal access token for the hosted server.