From 45519f4f79676e28fe96572198050a933d11cf86 Mon Sep 17 00:00:00 2001 From: tonytrg Date: Mon, 17 Nov 2025 17:44:51 +0100 Subject: [PATCH 1/3] adding remote server header for lockdown configuration --- docs/remote-server.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/docs/remote-server.md b/docs/remote-server.md index b263d70aa..fc5f8cc92 100644 --- a/docs/remote-server.md +++ b/docs/remote-server.md @@ -61,6 +61,9 @@ The Remote GitHub MCP server has optional headers equivalent to the Local server - `X-MCP-Readonly`: Enables only "read" tools. - Equivalent to `GITHUB_READ_ONLY` env var for Local server. - If this header is empty, "false", "f", "no", "n", "0", or "off" (ignoring whitespace and case), it will be interpreted as false. All other values are interpreted as true. +- `X-MCP-Lockdown`: Enables lockdown mode, hiding public issue details created by users without push access + - Equivalent to `GITHUB_LOCKDOWN_MODE` env var for Local server. + - If this header is empty, "false", "f", "no", "n", "0", or "off" (ignoring whitespace and case), it will be interpreted as false. All other values are interpreted as true and lockdown mode will be enabled. Example: @@ -70,7 +73,8 @@ Example: "url": "https://api.githubcopilot.com/mcp/", "headers": { "X-MCP-Toolsets": "repos,issues", - "X-MCP-Readonly": "true" + "X-MCP-Readonly": "true", + "X-MCP-Lockdown": "false" } } ``` From 45c0d39389487862f9ea77ae938c57ea4da95fb2 Mon Sep 17 00:00:00 2001 From: Tony Truong Date: Mon, 17 Nov 2025 17:58:22 +0100 Subject: [PATCH 2/3] Apply suggestion from @Copilot Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- docs/remote-server.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/remote-server.md b/docs/remote-server.md index fc5f8cc92..3dd3d597f 100644 --- a/docs/remote-server.md +++ b/docs/remote-server.md @@ -61,7 +61,7 @@ The Remote GitHub MCP server has optional headers equivalent to the Local server - `X-MCP-Readonly`: Enables only "read" tools. - Equivalent to `GITHUB_READ_ONLY` env var for Local server. - If this header is empty, "false", "f", "no", "n", "0", or "off" (ignoring whitespace and case), it will be interpreted as false. All other values are interpreted as true. -- `X-MCP-Lockdown`: Enables lockdown mode, hiding public issue details created by users without push access +- `X-MCP-Lockdown`: Enables lockdown mode, hiding public issue details created by users without push access. - Equivalent to `GITHUB_LOCKDOWN_MODE` env var for Local server. - If this header is empty, "false", "f", "no", "n", "0", or "off" (ignoring whitespace and case), it will be interpreted as false. All other values are interpreted as true and lockdown mode will be enabled. From 9d71a3ec78fa300cc95f7302b65f39bf59cb6c5b Mon Sep 17 00:00:00 2001 From: Tony Truong Date: Mon, 17 Nov 2025 17:58:29 +0100 Subject: [PATCH 3/3] Apply suggestion from @Copilot Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- docs/remote-server.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/remote-server.md b/docs/remote-server.md index 3dd3d597f..5ee6aea64 100644 --- a/docs/remote-server.md +++ b/docs/remote-server.md @@ -63,7 +63,7 @@ The Remote GitHub MCP server has optional headers equivalent to the Local server - If this header is empty, "false", "f", "no", "n", "0", or "off" (ignoring whitespace and case), it will be interpreted as false. All other values are interpreted as true. - `X-MCP-Lockdown`: Enables lockdown mode, hiding public issue details created by users without push access. - Equivalent to `GITHUB_LOCKDOWN_MODE` env var for Local server. - - If this header is empty, "false", "f", "no", "n", "0", or "off" (ignoring whitespace and case), it will be interpreted as false. All other values are interpreted as true and lockdown mode will be enabled. + - If this header is empty, "false", "f", "no", "n", "0", or "off" (ignoring whitespace and case), it will be interpreted as false. All other values are interpreted as true. Example: