git-steer (ry-ops/git-steer) is an MCP server listed on the M8ven Trust Index. It scores 58 out of 100, grade D. It declares 83 tools. No publisher has claimed this listing.

Caution

58/100

git-steer

Item: git-steer
Rating: 58
Author: M8ven

An autonomous GitHub management engine that enables control over repositories, branches, security alerts, and Actions workflows through natural language. It utilizes a zero-local-footprint architecture by storing all configuration and audit logs within a private state repository on GitHub.

→ ry-ops/git-steer · listed on glama

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

ry-ops

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored here

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings

🚨

Known vulnerabilities in dependencies: 1 critical, 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 2 credentials: GITHUB_TOKEN, GIT_STEER_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// tools this server exposes83 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

fabric_cve_scan

[git-fabric] Scan managed repos for vulnerable dependencies via GitHub Advisory Database. Queues findings to state/cve-queue.jsonl.

fabric_cve_enrich

[git-fabric] Fetch enriched vulnerability details for a CVE from NVD. Returns severity, CVSS, NVD status, CWE, and references.

fabric_cve_queue

[git-fabric] List CVE queue entries filtered by status and severity.

fabric_cve_stats

[git-fabric] CVE queue health dashboard: totals by status/severity, oldest pending, top repos.

fabric_cve_compact

[git-fabric] Compact the CVE queue by removing resolved entries older than the retention period.

fabric_git_list_repos

[git-fabric] List repositories for an org or the authenticated user.

fabric_git_get_file

[git-fabric] Get the content of a file from a repository.

fabric_git_list_files

[git-fabric] List files and directories at a path in a repository.

fabric_git_commit_files

[git-fabric] Commit one or more files to a branch via the GitHub Git Data API.

fabric_git_list_commits

[git-fabric] List recent commits on a branch.

fabric_git_get_commit

[git-fabric] Get full details for a commit including changed files.

fabric_git_compare_commits

[git-fabric] Compare two refs to see divergence and changed files.

fabric_git_list_branches

[git-fabric] List branches in a repository.

fabric_git_create_branch

[git-fabric] Create a new branch from an existing branch.

fabric_git_delete_branch

[git-fabric] Delete a branch.

fabric_git_list_pull_requests

[git-fabric] List pull requests in a repository.

fabric_git_get_pull_request

[git-fabric] Get full details for a pull request.

fabric_git_create_pull_request

[git-fabric] Open a pull request.

fabric_git_merge_pull_request

[git-fabric] Merge a pull request.

git_steer_repo_list

List GitHub repositories accessible to the token. Optionally filter by org.

git_steer_repo_create

Create a new GitHub repository.

git_steer_repo_archive

Archive a GitHub repository (read-only, reversible).

git_steer_repo_settings

Update repository settings (description, homepage, visibility, etc.).

git_steer_branch_list

List branches in a repository with stale detection.

git_steer_branch_protect

Apply branch protection rules to a repository branch.

git_steer_branch_reap

Delete stale merged branches from a repository.

git_steer_security_alerts

Get Dependabot security alerts for a repository.

git_steer_security_digest

Get security alert summary across multiple repositories. Pass repo list or uses authenticated user repos.

git_steer_actions_workflows

List GitHub Actions workflows in a repository.

git_steer_actions_trigger

Trigger a GitHub Actions workflow dispatch event.

git_steer_workflow_runs

Get recent workflow run status for a repository.

git_steer_repo_read_file

Read the content of a file from a GitHub repository.

git_steer_repo_list_files

List files and directories at a path in a GitHub repository.

git_steer_repo_commit

Commit one or more files to a branch via the GitHub API. Can create a PR from the new branch.

git_steer_pr_list

List pull requests in a repository.

git_steer_pr_create

Open a pull request.

git_steer_pr_merge

Merge a pull request.

actions_workflows

List workflows in a repository

actions_trigger

Manually trigger a workflow

actions_secrets

Manage Actions secrets

branch_list

List branches with staleness information

branch_protect

Apply branch protection rules

branch_reap

Delete stale or merged branches

oomkill_detect

Detect pods that have been OOMKilled. Returns pods with OOMKill events, their current resource limits, and restart counts.

oomkill_remediate

Auto-bump resource limits for OOMKilled pods by creating a PR to the GitOps repo. Calculates new limits as a multiplier of current limits (default: 1.5x). Uses PR dedup to avoid duplicate remediation PRs.

cert_check

Detect TLS certificates approaching expiration in the cluster. Checks cert-manager Certificate resources and returns certificates expiring within the threshold.

cert_renew

Trigger certificate renewal for expiring certificates. Deletes the certificate Secret to force cert-manager to re-issue, or creates a PR to update certificate manifests.

slack_notify

Send a notification to a Slack channel via webhook. Used for PR events, alerts, and remediation updates.

slack_configure

Configure Slack webhook URL for notifications. Stores in state repo config.

code_quality_sweep

Run linters and SAST tools (ESLint, Ruff, gosec, Bandit) on a repository via GitHub Actions. Auto-detects language stack.

code_review

Run AI-powered code review using CodeRabbit CLI. Reviews changes in a local git repository.

steer_status

Show git-steer status, rate limits, and health

steer_sync

Force sync state to GitHub

steer_logs

Show recent audit log entries

config_show

Display current configuration

config_add_repo

Add a repository to managed repos

config_remove_repo

Remove a repository from managed repos

ops_metrics

Get operational metrics: alert frequency, mean time to remediation, auto-merge success rate, and PR dedup hit rate.

report_generate

Generate compliance and security reports from git-steer state data. Templates: executive-summary, change-records, vulnerability-report, full-audit.

dashboard_generate

Generate a static analytics dashboard with SVG charts showing security metrics, MTTR, severity breakdown, and repo risk scores. Deploys to GitHub Pages.

workflow_status

Check status of dispatched workflows

pr_dedup_check

Check if an open PR with a matching title prefix already exists. Returns the existing PR if found, or null. Use before creating alert/remediation PRs to avoid duplicates.

pr_dedup_create

Create a PR only if no open PR with the same title prefix exists. If a duplicate is found, returns the existing PR instead. Prevents alert PR spam from automated observers.

repo_list

List all repositories git-steer has access to

repo_create

Create a new repository

repo_archive

Archive a repository

repo_delete

Permanently delete a repository. Requires confirmation.

repo_settings

Update repository settings

repo_commit

Commit files directly to a repository via GitHub API (no local clone needed). Supports multiple files in a single commit.

repo_read_file

Read a file from a repository

repo_list_files

List files in a repository directory

repo_scrub_history

Purge sensitive files from all git history using git-filter-repo. Clones the repo as a mirror, removes specified paths from every commit, and force-pushes the rewritten history. DESTRUCTIVE: rewrites all commit SHAs.

security_alerts

List security alerts (Dependabot, code scanning)

security_dismiss

Dismiss a security alert with reason

security_digest

Generate security summary across all managed repos

security_scan

Scan repositories for security vulnerabilities with detailed fix information

security_fix_pr

Dispatch a GitHub Actions workflow to fix security vulnerabilities (no local code needed - runs in ephemeral cloud compute)

security_enforce

Ensure Dependabot vulnerability alerts and automated security fixes are enabled on all managed repos (or a specific repo)

sbom_generate

Generate an SPDX Software Bill of Materials (SBOM) for a repository using GitHub's dependency graph

vex_set

Set OpenVEX status on a CVE finding (ADR-004). Persisted to the git-steer-state _vex store. not_affected requires a justification; affected requires an actionStatement.

vex_history

Look up VEX history from the append-only vex.jsonl ledger (who/what/when, before -> after). Filter by repo and/or cveId. Returns chronological history plus the current status.

policy_eval

Evaluate managed repos against security policies (Dependabot, secret scanning, branch protection, advanced security). Reports pass/fail per control.

attestation_list

List GitHub Artifact Attestations for a repository

// known CVEs in dependencies1 critical3 high6 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@4.0.18GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

high@fastify/static@9.0.0GHSA-83w8-p2f5-377r

@fastify/static vulnerable to route guard bypass via path traversal

highfastify@5.3.0GHSA-jx2c-rxcm-jvmq

Fastify's Content-Type header tab character allows body validation bypass

highfastify@5.3.0GHSA-mg2h-6x62-wpwc

Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass

low@fastify/static@9.0.0GHSA-8pvw-jcv7-9cmj

@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

🔐 secretGITHUB_TOKEN

🔐 secretGIT_STEER_TOKEN

configMANAGED_REPOS

configRATE_LIMIT_MAX

configRATE_LIMIT_WINDOW

configSTATE_REPO

Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.

deployPORT

deployREDIS_URL

// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

83/83 tools missing one or more hints — fabric_cve_scan (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); fabric_cve_enrich (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); fabric_cve_queue (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +80 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

38/83 tools referenced in tests (46%)

Write tests that reference each tool by name so every tool has at least one test.

Production dependencies are patched

0 critical, 3 high severity in production deps — @fastify/static@9.0.0 (high), fastify@5.3.0 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Dev dependencies

1 critical/high in dev-only deps (does not ship to users)

Upgrade dev dependencies when convenient.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Verified](https://m8ven.ai/badge/mcp/ry-ops/git-steer?variant=verified)](https://m8ven.ai/mcp/ry-ops/git-steer)

Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.

commit: 4fa7103f63dadc79b6e33343302a0e3d9dc18b93

code hash: 75fe947b7c0af930a8018a55fb5883acb98b7f0d46ab9672174a6fc669bf5b42

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client