[mcp-tools-report] GitHub MCP Remote Server Tools Report — 2026-06-14

[github-actions[bot]]

GitHub MCP Remote Server Tools Report

Generated: 2026-06-14 · MCP Mode: Remote · Toolsets: All · Previous Report: 2026-06-07

Executive Summary

• Total Tools Discovered: 57 (read-only session)
• Toolset Categories: 21 distinct groupings observed
• Source: github_toolsets_permissions.json · Instructions: .github/aw/github-mcp-server.md
• Changes Since Last Report: None — surface identical to 2026-06-07. New: 0 · Removed: 0 · Unchanged: 57

Read-only scope: This enumerates tools exposed to a read-only session. Write tools (issue_write, create_pull_request, label_write, push_files, ...) exist in the server and in the JSON mapping but are not visible here, so are excluded from the 57.

Inconsistency Detection

✅ No actionable inconsistencies — all 57 observable tools map cleanly to exactly one toolset.

• Duplicates / Orphaned / Miscategorized: None.
• Naming: Minor singular/plural drift (get_label/list_label vs. list_branches) matching upstream; no action.
• Grouping nuance: search_issues lives under issues, search_pull_requests under pull_requests in the JSON (vs. a search grouping) — intentional, consistent across runs.
• Not exposed (expected for read-only): context (get_me, get_teams, get_team_members) and experiments tools.

JSON Mapping Comparison

✅ JSON mapping is accurate and matches the MCP server. Discrepancies: 0 (Missing: 0 · Extra: 0 · Moved: 0). Every read-only tool observed is present in the JSON under an appropriate toolset; the JSON is a correct superset that also enumerates write operations.

Action: No updates needed. No pull request created.

Changes Since Last Report

No tools were added, removed, or moved since 2026-06-07. All 57 read-only tools unchanged.

Tools by Toolset

Full tool inventory (57 tools across 21 groupings)

Toolset	Source	Tools
actions	actions.go	actions_get, actions_list, get_job_logs
code_security	code_scanning.go	get_code_scanning_alert, list_code_scanning_alerts
copilot_spaces	remote toolset	get_copilot_space, list_copilot_spaces
dependabot	dependabot.go	get_dependabot_alert, list_dependabot_alerts
discussions	discussions.go	get_discussion, get_discussion_comments, list_discussion_categories, list_discussions
gists	gists.go	get_gist, list_gists
git	repositories.go	get_repository_tree
github_support_docs_search	remote toolset	github_support_docs_search
issues	issues.go	issue_read, list_issue_fields, list_issue_types, list_issues, search_issues
labels	labels.go	get_label, list_label
notifications	notifications.go	get_notification_details, list_notifications
orgs	security_advisories.go	list_org_repository_security_advisories
projects	projects.go	projects_get, projects_list
pull_requests	pullrequests.go	list_pull_requests, pull_request_read, search_pull_requests
repos	repositories.go	get_commit, get_file_contents, get_latest_release, get_release_by_tag, get_tag, list_branches, list_commits, list_releases, list_repository_collaborators, list_tags
search	search.go	search_code, search_commits, search_orgs, search_repositories, search_users, semantic_issue_similarity_search, semantic_issues_search
secret_protection	secret_scanning.go	get_secret_scanning_alert, list_secret_scanning_alerts, run_secret_scanning
security_advisories	security_advisories.go	check_dependency_vulnerabilities, get_global_security_advisory, list_global_security_advisories, list_repository_security_advisories
stargazers	repositories.go	list_starred_repositories

Method-dispatch tools (actions_get, actions_list, issue_read, pull_request_read, projects_get, projects_list) fan out to multiple sub-operations via a method parameter, keeping the count low while preserving breadth.

Recommended Default Toolsets

Recommended Defaults: context, repos, issues, pull_requests, users

Rationale: repos/issues/pull_requests cover most day-to-day agentic work; context adds identity grounding at zero extra scope; users (search_users) is low-risk and common. None require security-events or write scopes by default.

Specialized (enable explicitly): actions (CI/logs); code_security/dependabot/secret_protection/security_advisories (security, need security-events); discussions/labels/notifications/projects (collaboration); gists/stargazers/orgs/git/search (utility); experiments/copilot_spaces/github_support_docs_search (remote/experimental).

Toolset Configuration Reference

tools:
  github:
    mode: "remote"  # or "local"
    toolsets: [all]  # or e.g. [repos, issues, pull_requests]

Options: context, repos, issues, pull_requests, actions, code_security, dependabot, discussions, experiments, gists, labels, notifications, orgs, projects, secret_protection, security_advisories, stargazers, users, all.

Notes and Observations

• Read-only surface has been stable across the last two reports (57 tools, identical composition).
• The JSON mapping remains the authoritative read+write superset; this audit confirms its read-tool entries are accurate.

Methodology

• Discovery: Self-inspection of tools exposed to this read-only remote session.
• Comparison: Set diff of current tools vs. cached 2026-06-07 snapshot and vs. the repository JSON mapping.
• Categorization: By GitHub API domain and upstream github/github-mcp-server toolset organization.

Generated by 📊 GitHub MCP Remote Server Tools Report Generator · 173.5 AIC · ⌖ 16 AIC · ⊞ 9.8K · ◷

• expires on Jun 17, 2026, 5:07 AM UTC-08:00

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-06-17T13:07:00.063Z.

Closed by Workflow