[mcp-tools-report] GitHub MCP Remote Server Tools Report — 2026-05-24 #34424

2026-05-24T12:50:31Z

github-actions[bot]
Bot May 24, 2026

Generated: 2026-05-24
MCP Mode: Remote (read-only session)
Toolsets: All
Previous Report: None (first run — no cache found at /tmp/gh-aw/cache-memory/github-mcp-tools.json)

Executive Summary

Total Tools Discovered (read-only session): 55
Toolset Categories Mapped: 22
Source of Truth: pkg/workflow/data/github_toolsets_permissions.json
Instructions File: .github/aw/github-mcp-server.md
MCP Server Source: github/github-mcp-server
Discrepancies Found: 1 (fixed via PR)
Inconsistencies: 0 critical

Note on read-only visibility: The tools enumerated below are those exposed to a read-only MCP session (X-MCP-Readonly: true). The JSON mapping in this repo contains the full toolset, including write operations (e.g. issue_write, create_pull_request, label_write, merge_pull_request, star_repository). This report documents both: visible read tools are listed in tables, and write-only tools registered in the JSON mapping are surfaced in the "Write Tools (not visible in this session)" callouts.

Inconsistency Detection

Toolset Integrity Checks

✅ No duplicate tool names across toolsets in the JSON mapping.
✅ Naming patterns are consistent: read operations use get_*/list_*/search_* prefixes; write operations use *_write/create_*/update_*/merge_* patterns or aggregated *_write resource tools (e.g. issue_write, label_write).
⚠️ Empty toolset detected: The users toolset has zero registered tools — search_users actually lives in the search toolset. This is intentional but worth flagging.
⚠️ Naming asymmetry: list_label (singular) vs. list_labels would be more consistent with list_issues, list_commits, etc. This name comes from the upstream MCP server, so it cannot be changed locally; flagged here for awareness.
⚠️ Stale users entry in github_tool_to_toolset.json: that file references get_user / list_users under users, but neither tool exists in the current MCP server. The authoritative mapping is github_toolsets_permissions.json. Recommend a follow-up to reconcile or deprecate github_tool_to_toolset.json.

JSON Mapping Comparison

Discrepancies Between MCP Server and JSON Mapping

Summary:

Total Discrepancies: 1
Missing Tools (in JSON but not in MCP): 0
Extra Tools (in MCP but not in JSON): 1
Moved Tools (different toolset): 0

Extra Tools (in MCP but not in JSON)

Toolset	Tool Name	Action Taken
`repos`	`list_repository_collaborators`	✅ Added to `repos` toolset in JSON mapping

Why this matters: list_repository_collaborators is already referenced by the workflow at .github/workflows/daily-doc-healer.md:98 (where the agent inspects collaborators to classify PR closure intent). Without an entry in the toolsets/permissions mapping, the compiler cannot route the tool to its contents read permission.

Action: Opened PR with branch update-github-mcp-tools-mapping adding the tool to the repos toolset and updating documentation.

Changes Since Last Report

No previous cache file existed, so no diff is computable for this run. A baseline cache has been written to /tmp/gh-aw/cache-memory/github-mcp-tools.json and will enable diff reporting on the next run.

Tools by Toolset

context

Description: GitHub Actions context and environment (identity, teams).
Source: pkg/github/context_tools.go

Not visible in this read-only session, but registered in the JSON mapping:
get_me, get_team_members, get_teams

repos

Description: Repository operations.
Source: pkg/github/repositories.go

Tool	Purpose	Key Parameters
`get_commit`	Get details for a commit	`owner`, `repo`, `sha`, `include_diff`
`get_file_contents`	Read a file or directory at a ref	`owner`, `repo`, `path`, `ref`
`get_latest_release`	Get the latest release	`owner`, `repo`
`get_release_by_tag`	Get a release by tag name	`owner`, `repo`, `tag`
`get_tag`	Get git tag details	`owner`, `repo`, `tag`
`list_branches`	List branches in the repository	`owner`, `repo`, `page`, `perPage`
`list_commits`	List commits with filters	`owner`, `repo`, `sha`, `path`, `author`, `since`, `until`
`list_releases`	List releases	`owner`, `repo`, `page`, `perPage`
`list_repository_collaborators` ✨	List collaborators with affiliation filter	`owner`, `repo`, `affiliation`, `page`, `perPage`
`list_tags`	List git tags	`owner`, `repo`, `page`, `perPage`

Write tools (not visible in this session): create_branch, create_or_update_file, create_repository, delete_file, fork_repository, push_files.

git

Description: Git API operations (tree, refs).
Source: pkg/github/repositories.go

Tool	Purpose	Key Parameters
`get_repository_tree`	Get the file tree of a repository	`owner`, `repo`, `tree_sha`, `recursive`, `path_filter`

issues

Description: Issue management.
Source: pkg/github/issues.go

Tool	Purpose	Key Parameters
`issue_read`	Read issue (get, comments, sub-issues, labels)	`owner`, `repo`, `issue_number`, `method`
`list_issue_types`	List supported issue types for an org	`owner`
`list_issues`	List issues with filters	`owner`, `repo`, `state`, `labels`, `orderBy`
`search_issues`	Search issues across GitHub	`query`, `owner`, `repo`, `sort`

Write tools (not visible in this session): add_issue_comment, issue_write, sub_issue_write.

pull_requests

Description: Pull request operations.
Source: pkg/github/pullrequests.go

Tool	Purpose	Key Parameters
`list_pull_requests`	List PRs in a repository	`owner`, `repo`, `state`, `head`, `base`, `sort`
`pull_request_read`	PR details/diff/status/files/reviews/comments/check_runs	`owner`, `repo`, `pullNumber`, `method`
`search_pull_requests`	Search PRs across GitHub	`query`, `owner`, `repo`, `sort`

Write tools (not visible in this session): add_comment_to_pending_review, add_reply_to_pull_request_comment, create_pull_request, merge_pull_request, pull_request_review_write, update_pull_request, update_pull_request_branch.

actions

Description: GitHub Actions workflows.
Source: pkg/github/actions.go

Tool	Purpose	Key Parameters
`actions_get`	Get workflow/run/job/artifact details	`owner`, `repo`, `method`, `resource_id`
`actions_list`	List workflows, runs, jobs, artifacts	`owner`, `repo`, `method`, `resource_id`
`get_job_logs`	Get logs for workflow jobs	`owner`, `repo`, `job_id` or `run_id`+`failed_only`

Write tools (not visible in this session): actions_run_trigger.

code_security

Description: Code scanning alerts.
Source: pkg/github/code_scanning.go

Tool	Purpose	Key Parameters
`get_code_scanning_alert`	Get a code scanning alert	`owner`, `repo`, `alertNumber`
`list_code_scanning_alerts`	List code scanning alerts	`owner`, `repo`, `state`, `severity`, `tool_name`

dependabot

Description: Dependabot alerts.
Source: pkg/github/dependabot.go

Tool	Purpose	Key Parameters
`get_dependabot_alert`	Get a Dependabot alert	`owner`, `repo`, `alertNumber`
`list_dependabot_alerts`	List Dependabot alerts	`owner`, `repo`, `state`, `severity`

discussions

Description: GitHub Discussions.
Source: pkg/github/discussions.go

Tool	Purpose	Key Parameters
`get_discussion`	Get a specific discussion	`owner`, `repo`, `discussionNumber`
`get_discussion_comments`	Get comments from a discussion	`owner`, `repo`, `discussionNumber`, `includeReplies`
`list_discussion_categories`	List discussion categories	`owner`, `repo`
`list_discussions`	List discussions for a repo/org	`owner`, `repo`, `category`, `orderBy`, `direction`

gists

Description: Gist operations.
Source: pkg/github/gists.go

Tool	Purpose	Key Parameters
`get_gist`	Get a gist by ID	`gist_id`
`list_gists`	List gists for a user	`username`, `since`, `page`

Write tools (not visible in this session): create_gist, update_gist.

labels

Description: Label management.
Source: pkg/github/labels.go

Tool	Purpose	Key Parameters
`get_label`	Get a specific label	`owner`, `repo`, `name`
`list_label`	List labels in a repository	`owner`, `repo`

Write tools (not visible in this session): label_write.

notifications

Description: Notification management.
Source: pkg/github/notifications.go

Tool	Purpose	Key Parameters
`get_notification_details`	Get details of a notification	`notificationID`
`list_notifications`	List notifications for the user	`filter`, `since`, `before`, `owner`, `repo`

Write tools (not visible in this session): dismiss_notification, manage_notification_subscription, manage_repository_notification_subscription, mark_all_notifications_read.

orgs

Description: Organization operations.
Source: pkg/github/security_advisories.go (for list_org_repository_security_advisories)

Tool	Purpose	Key Parameters
`list_org_repository_security_advisories`	List security advisories across all repos in an org	`org`, `state`, `sort`, `direction`

Note: search_orgs is registered under the search toolset, not orgs.

projects

Description: GitHub Projects (requires PAT — GITHUB_TOKEN lacks project scope).
Source: pkg/github/projects.go

Tool	Purpose	Key Parameters
`projects_get`	Get project, field, item, or status update	`method`, `owner`, `project_number`, `item_id`, `field_id`
`projects_list`	List projects, fields, items, or status updates	`method`, `owner`, `project_number`, `query`

Write tools (not visible in this session): projects_write.

search

Description: Advanced search across GitHub (keyword + semantic).
Source: pkg/github/search.go

Tool	Purpose	Key Parameters
`search_code`	Code search across GitHub	`query`, `sort`, `order`
`search_orgs`	Search organizations by name/location/metadata	`query`, `sort`, `order`
`search_repositories`	Find repos by name/description/topics	`query`, `sort`, `order`, `minimal_output`
`search_users`	Find users by username/profile	`query`, `sort`, `order`
`semantic_issue_similarity_search`	Find issues semantically similar to a given issue	`owner`, `repo`, `issue_number`, `threshold`
`semantic_issues_search`	Natural-language issues search	`query`, `owner`, `repo`, `sort`

secret_protection

Description: Secret scanning.
Source: pkg/github/secret_scanning.go

Tool	Purpose	Key Parameters
`get_secret_scanning_alert`	Get a secret scanning alert	`owner`, `repo`, `alertNumber`
`list_secret_scanning_alerts`	List secret scanning alerts	`owner`, `repo`, `state`, `resolution`, `secret_type`
`run_secret_scanning`	Scan provided file contents/diffs for secrets	`files`, `owner`, `repo`

security_advisories

Description: Security advisories.
Source: pkg/github/security_advisories.go

Tool	Purpose	Key Parameters
`check_dependency_vulnerabilities`	Check deps against the Advisory Database	`owner`, `repo`, `dependencies`
`get_global_security_advisory`	Get a global security advisory	`ghsaId`
`list_global_security_advisories`	List global advisories	`type`, `severity`, `ecosystem`, `cveId`
`list_repository_security_advisories`	List advisories for a repo	`owner`, `repo`, `state`, `sort`

stargazers

Description: Repository stars.
Source: pkg/github/repositories.go

Tool	Purpose	Key Parameters
`list_starred_repositories`	List repositories starred by a user	`username`, `sort`, `direction`

Write tools (not visible in this session): star_repository, unstar_repository.

users

Description: User information.
Source: pkg/github/search.go (for search_users)

⚠️ Empty toolset: No tools are registered under users in the current JSON mapping. User search is provided by search_users in the search toolset.

copilot_spaces (remote-only)

Description: GitHub Copilot Spaces — only available in remote MCP mode.
Source: github-mcp-server remote endpoints (not in local pkg/github/)

Tool	Purpose	Key Parameters
`get_copilot_space`	Get a specific Copilot Space with documents	`owner`, `name`
`list_copilot_spaces`	List Copilot Spaces accessible to the user	—

github_support_docs_search (remote-only)

Description: GitHub support documentation search — remote MCP mode only.

Tool	Purpose	Key Parameters
`github_support_docs_search`	Search GitHub support documentation	`query`

experiments

Description: Experimental — dynamic toolset management.
Source: pkg/github/dynamic_tools.go

Not visible in this read-only session, but registered in the JSON mapping:
enable_toolset, get_toolset_tools, list_available_toolsets

Recommended Default Toolsets

Recommended Defaults (current and confirmed): context, repos, issues, pull_requests

Rationale:

context — get_me/get_teams provide identity awareness needed by almost every workflow.
repos — File reads, commits, branches, releases, tags, collaborators (newly added). Foundational for any code-aware agent.
issues — Issue triage, listing, and search are central to CI/CD automation.
pull_requests — Code review, diff inspection, and merge automation depend on this toolset.

Note: The currently-documented defaults exclude users because that toolset is empty (user search is provided by search.search_users). No changes are recommended here.

Specialized Toolsets (enable explicitly):

actions — workflow introspection / triggering
code_security, dependabot, secret_protection, security_advisories — security workflows
discussions — community/Q&A workflows
gists, labels, notifications, orgs, stargazers — narrow automation needs
projects — requires PAT (not GITHUB_TOKEN)
search — cross-repo discovery
copilot_spaces, github_support_docs_search — remote-mode only
experiments — toolset-management meta tools

Toolset Configuration Reference

tools:
  github:
    toolsets: [default]   # context, repos, issues, pull_requests
    # or:
    # toolsets: [default, discussions, actions]
    # toolsets: [all]

Full list of toolset names

actions, code_security, context, copilot_spaces, dependabot, discussions, experiments, gists, git, github_support_docs_search, issues, labels, notifications, orgs, projects, pull_requests, repos, search, secret_protection, security_advisories, stargazers, users

Notes and Observations

Read-only session limits visibility: Only 55 tools were visible to this enumeration run because X-MCP-Readonly: true filters out write operations. The full MCP server exposes ~90 tools across all toolsets.
Single discrepancy found and fixed: list_repository_collaborators was the only tool present in the MCP server but missing from the JSON mapping. PR opened to fix.
Aggregated resource tools: The MCP server uses aggregated tools like pull_request_read (with method parameter for sub-operations: get, get_diff, get_files, get_reviews, etc.), actions_get/actions_list, issue_read, projects_get/projects_list. Workflow authors should reference the method parameter for fine-grained operations.
users toolset is intentionally empty: User-related queries live in search_users under the search toolset.
Documentation is now in sync with the corrected JSON mapping.

Methodology

Discovery: Self-inspection of mcp__github__* tools exposed in this read-only MCP session.
Comparison Source: pkg/workflow/data/github_toolsets_permissions.json v2.2.
Cross-reference: github/github-mcp-server pkg/github/ source files.
Cache baseline: Written to /tmp/gh-aw/cache-memory/github-mcp-tools.json to enable diff reporting on subsequent runs.

References:

§26361545579

Generated by 📊 GitHub MCP Remote Server Tools Report Generator · ● opu47 12.7M · ◷

expires on May 27, 2026, 12:50 PM UTC

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[mcp-tools-report] GitHub MCP Remote Server Tools Report — 2026-05-24 #34424

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

[mcp-tools-report] GitHub MCP Remote Server Tools Report — 2026-05-24 #34424

Uh oh!

github-actions[bot] Bot May 24, 2026

Executive Summary

Inconsistency Detection

Toolset Integrity Checks

JSON Mapping Comparison

Discrepancies Between MCP Server and JSON Mapping

Extra Tools (in MCP but not in JSON)

Changes Since Last Report

Tools by Toolset

context

repos

git

issues

pull_requests

actions

code_security

dependabot

discussions

gists

labels

notifications

orgs

projects

search

secret_protection

security_advisories

stargazers

users

copilot_spaces (remote-only)

github_support_docs_search (remote-only)

experiments

Recommended Default Toolsets

Toolset Configuration Reference

Notes and Observations

Methodology

Replies: 0 comments

github-actions[bot]
Bot May 24, 2026