{
"canonical_url": "github.com/github/github-mcp-server",
"category": "Open-source project",
"classification": {
"matched": {
"technology": [
"github",
"mcp"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": false,
"compliance": [
{
"certificate_id": "github, inc.",
"covers_resource": "unknown",
"credited": false,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "GitHub, Inc.",
"terms": [
"star_level_1",
"star_level_2",
"caiq",
"certification"
]
},
"display": "STAR Level 2: found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/github, inc.",
"framework": "csa_star",
"issued": "2018-05-30",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:26:28Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "STAR_LEVEL_2"
},
{
"certificate_id": "FR1812058188",
"covers_resource": "partial",
"credited": false,
"detail": {
"cso": "GitHub Enterprise Cloud",
"csp": "GitHub",
"deployment_model": "Public Cloud",
"fedramp_status": "FedRAMP Authorized",
"impact_level": "LI-SaaS"
},
"display": "FedRAMP LI-SaaS: FedRAMP Authorized (FedRAMP Marketplace, 2026-10-26)",
"evidence_url": "https://marketplace.fedramp.gov/products/FR1812058188",
"framework": "fedramp",
"issued": "2018-10-04",
"issuer": "Agency / 3PAO Coalfire Systems, Inc.",
"match_confidence": 0.933,
"next_check": "2026-11-02",
"payload_hash": "64bc98d4cebbc137a6e7b94442b8678790eefa29e4347928a0de8620b56a168a",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:09Z",
"review_reason": "entity 1.00, offering 0.85",
"reviewer": null,
"scope": "product",
"source": "fedramp",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "FEDRAMP_LI_SAAS"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://github.com/security",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "d5170ae8744fe6f60f0a1d2eb1f0a3b7eb05bad69b6bd7b4c6aa5039d4872a75",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:39Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://github.com/security",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "d5170ae8744fe6f60f0a1d2eb1f0a3b7eb05bad69b6bd7b4c6aa5039d4872a75",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:39Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": "self-hosted",
"description": "GitHub's official MCP Server",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"technology": {
"components": {
"adoption": 26.26,
"docs": 7.0,
"domain_fit": 56.4,
"ecosystem": 4.5,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.564,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "technology",
"rank": null,
"score": 73.5,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
}
},
"external_ids": {
"github": "github/github-mcp-server"
},
"first_seen": "2026-10-26T12:17:57Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_dc8ab03e1140b470",
"identity": {
"evidence": [
"repository_ownership"
],
"rules_version": "identity-1.1",
"tier": 3
},
"issues": {
"advisories": 0,
"cves": 1,
"incidents": 0,
"links": [
{
"date": "2026-09-30",
"kind": "cve",
"title": "CVE-2026-102906",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102906"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:17:57Z",
"license": "MIT",
"name": "github-mcp-server",
"news": [
{
"cluster_size": 1,
"date": "2026-10-21T09:52:29Z",
"headline": "github-mcp-server: GitHub MCP Server 2.0.3",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "## What's Changed\r\n* build(deps): bump @modelcontextprotocol/client from 2.2.0 to 2.3.1 in /ui by @dependabot[bot] in https://github.com/github/github-mcp-server/pull/3462\r\n* build(deps-dev): bump @vitejs/plugin-react from 6.1.1 to 6.1.2 in",
"tag": "product_update",
"url": "https://github.com/github/github-mcp-server/releases/tag/v2.0.3"
},
{
"cluster_size": 1,
"date": "2026-10-08T11:33:15Z",
"headline": "github-mcp-server: GitHub MCP Server 2.0.2",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "## Bugfix release\r\n\r\n* fix(inventory): restore typed tool HTTP header validation by @SamMorrowDrums in https://github.com/github/github-mcp-server/pull/3454\r\n\r\n\r\n**Full Changelog**: https://github.com/github/github-mcp-server/compare/v2.0.1",
"tag": "product_update",
"url": "https://github.com/github/github-mcp-server/releases/tag/v2.0.2"
}
],
"news_checked": true,
"protocols": {
"a2a": {
"not_checked": "code_host",
"status": "unknown"
},
"ard": {
"not_checked": "code_host",
"status": "unknown"
},
"mcp": {
"evidence_url": "https://github.com/github/github-mcp-server",
"note": "named in the resource's own tags",
"source": "self_description",
"status": "claimed"
}
},
"publisher_domain": "github.com",
"resource_type": "mcp_server",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:41:05Z",
"cves": 1,
"source": "nvd",
"tier": 1
},
"signals": {
"github_archived": false,
"github_created_at": "2025-03-04T16:42:04Z",
"github_forks": 5231,
"github_language": "Go",
"github_open_issues": 410,
"github_pushed_at": "2026-10-23T21:21:33Z",
"github_stars": 33970,
"github_topic": "mcp-server",
"homepage": null
},
"slug": "github-github-mcp-server",
"sources": [
{
"payload_hash": "d76eaa058aa288670383231a55e62e110c4f50ce7a03b7a667b6108f224db189",
"retrieved_at": "2026-10-26T12:17:57Z",
"system": "github",
"url": "https://github.com/github/github-mcp-server"
}
],
"tags": [
"github",
"mcp",
"mcp-server"
],
"tenant": null,
"traces": [],
"trust": {
"compliance": 1,
"identity": 3,
"issues": 3,
"protocols": 3,
"security": 1,
"traces": 5,
"vendor_compliance": 1
},
"url": "https://github.com/github/github-mcp-server",
"vendor": "github"
}