41
grade D
13 days ago
glama

GitHub MCP App Shim

A lightweight stdio-to-http relay that enables the GitHub MCP server to authenticate using a GitHub App instead of a Personal Access Token. It automatically manages fine-grained permissions and short-lived tokens for secure, organizational AI agent workflows.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/incognita-labs-github-mcp-shim-14aj3o)](https://m8ven.ai/mcp/incognita-labs-github-mcp-shim-14aj3o)
commit: e3b22e486db051ed4ca12a75d3faedc5076e5c01
code hash: 3f5e16adfd534411f694fe2f91c399a2fca1bd81ed443bf8c92663c71870b82d
verified: 4/11/2026, 2:49:14 PM
view raw JSON →