71
/ 100
10 days ago
glama
MCP GitHub App Server
Provides GitHub App authentication for Git and API operations, enabling temporary token generation for private repository access.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 1 credential: GITHUB_PRIVATE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
GITHUB_APP_ID— Your GitHub App IDconfig
GITHUB_INSTALLATION_ID— Your GitHub App installation ID🔐 secret
GITHUB_PRIVATE_KEY— Your GitHub App private key (PEM format)config
GITHUB_API_HOST// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/legido-ai-mcp-github-app-auth-mb07fe)commit: 55953e4f532ae0c3bb30b0af934682990509f855
code hash: 395176cf347a3d38a578f0505a079ac600a1735af3e75af4949313828e45f881
verified: 7/21/2026, 9:01:49 AM