generated: '2026-06-20'
method: searched
status: published
source: https://github.com/github/github-mcp-server
description: GitHub operates an official remote MCP server at https://api.githubcopilot.com/mcp/ (HTTP
  transport, OAuth / PAT authenticated) and ships the same server for local use via a Docker image and
  the VS Code / Copilot ecosystem. The server exposes 19 toolsets; the `actions` toolset covers the GitHub
  Actions REST surface (workflows, runs, jobs, artifacts, logs). Tool list captured from the server README.
server:
  name: github
  transport: http
  url: https://api.githubcopilot.com/mcp/
  auth: oauth2
  toolsets: 19
local:
  name: github/github-mcp-server
  transport: stdio
  image: ghcr.io/github/github-mcp-server
  source: https://github.com/github/github-mcp-server
docs: https://docs.github.com/en/copilot/how-tos/provide-context/use-mcp-in-your-ide/use-the-github-mcp-server
toolset: actions
tools:
- name: actions_list
  description: List Actions workflows, runs, jobs and artifacts.
- name: actions_get
  description: Retrieve details of a workflow, run, job or artifact.
- name: actions_run_trigger
  description: Trigger workflow runs and manage execution (dispatch, rerun, cancel).
- name: get_job_logs
  description: Retrieve GitHub Actions workflow job logs.
note: The Actions toolset consolidates the many REST operations in openapi/github-actions-openapi.yml
  behind four coarse-grained MCP tools; it is not a 1:1 operation-to-tool mapping.
deployment:
  mode: both
  endpoint: https://api.githubcopilot.com/mcp/
  install: docker run -i --rm -e GITHUB_PERSONAL_ACCESS_TOKEN ghcr.io/github/github-mcp-server
  package: https://github.com/github/github-mcp-server
  auth: oauth
  verified: probed
  probe:
    tools_list:
      url: https://api.githubcopilot.com/mcp/
      method: 'POST {"jsonrpc":"2.0","id":1,"method":"tools/list"}'
      http_status: 401
      body: 'bad request: missing required Authorization header'
      note: >-
        The live tool schemas are auth-gated. The tool list below is therefore
        read verbatim from the server's own README (github/github-mcp-server,
        main branch) rather than from an authenticated introspection.
    protected_resource:
      url: https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp
      http_status: 200
      file: well-known/github-actions-oauth-protected-resource.json
      authorization_servers: [https://github.com/login/oauth]
  checked: '2026-09-17'
  release: v1.12.2 (2026-09-16)
  note: >-
    BOTH, not remote-only: GitHub hosts the server at
    https://api.githubcopilot.com/mcp/ (HTTP transport, OAuth or PAT) AND ships
    the same server as a self-hosted binary / ghcr.io image for MCP hosts that
    cannot reach a remote server. An agent can call the hosted endpoint today
    without anyone installing anything.