How is this different from connecting GitHub MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the GitHub MCP API changes?

We track the GitHub MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different GitHub tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in GitHub?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the GitHub MCP server myself?

No. TrustGate connects to the GitHub MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to GitHub directly.

Connect GitHub MCP to your AI agents, securely.

Q: Is GitHub MCP secure?

The server itself exposes 96 tools, and some of them can write to your GitHub account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches GitHub.

One secured endpoint for every GitHub call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try GitHub MCP now

What your agents can ask once GitHub MCP is connected.

“List open issues assigned to me across repositories”
“Open a pull request from this branch”
“Check this repository for exposed secrets”

“Summarise what changed in the last 10 commits”
“Find every repository using a deprecated dependency”
“Show which workflows failed on main this week”

Select the tools your AI agents can call

96 tools from the GitHub MCP schema.

Showing 96 tools

actions_getreadInspect a workflow, run, job, or artifact.
actions_listreadBrowse workflows, runs, jobs, and artifacts.
actions_run_triggerhigh riskDispatch workflows or manage existing runs.
get_job_logsreadRetrieve job logs to investigate workflow failures.
get_code_quality_findingreadInspect an individual code quality finding.
get_code_scanning_alertreadInspect a specific code scanning alert.
list_code_scanning_alertsreadBrowse repository code scanning alerts.
get_mereadView the authenticated GitHub user's profile.
get_team_membersreadView the members of an organization team.
get_teamsreadFind teams associated with a user.
assign_copilot_to_issuewriteAssign an issue to Copilot coding agent.
request_copilot_reviewwriteAsk Copilot to review a pull request.
assign_copilot_to_issue_with_intentwriteAssign or suggest Copilot with rationale and confidence.
get_dependabot_alertreadInspect an individual Dependabot vulnerability alert.
list_dependabot_alertsreadBrowse dependency vulnerability alerts for a repository.
discussion_comment_writewriteAdd, edit, delete, or mark discussion answers.
get_discussionreadRead an individual GitHub discussion.
get_discussion_commentsreadRead discussion comments and optionally their replies.
list_discussion_categoriesreadBrowse available discussion categories.
list_discussionsreadFind discussions within a repository or organization.
create_gistwritePublish a new single-file gist.
get_gistreadRead a gist's contents.
list_gistsreadBrowse a user's gists.
update_gistwriteModify a gist's file content or description.
get_repository_treereadExplore repository files and folders at a ref.
create_repository_rulesetwriteDefine rules at repository, organization, or enterprise level.
custom_properties_readreadRead repository property values or organizational property definitions.
custom_properties_writewriteSet repository properties or maintain property definitions.
repository_ruleset_readreadInspect rulesets, applicable branch rules, and rule evaluations.
add_issue_commentwriteComment or react on an issue or pull request.
get_labelreadLook up a repository label by name.
issue_readreadRead issue details, comments, labels, and hierarchy.
issue_writewriteCreate issues or update their fields and state.
list_issue_fieldsreadDiscover custom issue fields for a repository or organization.
list_issue_typesreadDiscover issue types available for a repository or organization.
list_issuesreadBrowse repository issues with filters and pagination.
search_issuesreadFind issues matching a search query.
sub_issue_writewriteAttach, detach, move, or reorder sub-issues.
label_writewriteCreate, edit, or delete repository labels.
list_labelreadBrowse the labels defined in a repository.
ui_getreadFetches UI data for MCP Apps, such as labels, assignees, milestones, issue types, branches, issue fields and reviewers.
update_issue_commentwriteUpdate the body of an existing issue or pull request conversation comment. This tool cannot update pull request review comments.
dismiss_notificationwriteMark a notification as read or done.
get_notification_detailsreadInspect an individual notification.
list_notificationsreadBrowse notifications with repository and time filters.
manage_notification_subscriptionwriteWatch, ignore, or unsubscribe from a notification thread.
manage_repository_notification_subscriptionwriteManage notification subscriptions for a repository.
mark_all_notifications_readwriteMark notifications as read, optionally within a repository.
search_orgsreadFind GitHub organizations matching a query.
projects_getreadInspect project items, fields, views, and status updates.
projects_listreadBrowse projects and their associated resources.
projects_writewriteManage projects, items, field values, views, and status updates.
add_comment_to_pending_reviewwriteAdd a code comment to a pending PR review.
add_reply_to_pull_request_commentwriteReply or react to a pull request review comment.
create_pull_requestwriteOpen a pull request between two branches.
list_pull_requestsreadBrowse repository pull requests with filters.
merge_pull_requesthigh riskMerge a pull request using merge, squash, or rebase.
pull_request_readreadInspect PR details, diffs, commits, reviews, and checks.
pull_request_review_writewriteManage PR reviews and resolve or reopen review threads.
search_pull_requestsreadFind pull requests matching a search query.
update_pull_requestwriteEdit PR details, reviewers, state, or draft status.
update_pull_request_branchwriteUpdate a PR branch with changes from its base.
create_branchwriteCreate a branch from an existing branch.
create_or_update_filehigh riskCommit a new or updated file to a branch.
create_repositorywriteCreate a personal or organization repository.
delete_filehigh riskCommit the deletion of a repository file.
delete_repositoryhigh riskDelete a GitHub repository.
fork_repositorywriteFork a repository into a personal account or organization.
get_commitreadInspect a commit and its changed files.
get_file_contentsreadRead a file or directory at a specific ref.
get_latest_releasereadRetrieve a repository's latest release.
get_release_by_tagreadFind the release associated with a tag.
get_tagreadInspect a repository tag.
list_branchesreadBrowse branches in a repository.
list_commitsreadBrowse commit history with author, path, and date filters.
list_releasesreadBrowse releases published in a repository.
list_repository_collaboratorsreadView repository collaborators, optionally filtered by affiliation.
list_tagsreadBrowse tags in a repository.
push_fileshigh riskCommit multiple files to a repository branch.
search_codereadFind code using keywords and GitHub search qualifiers.
search_commitsreadFind commits by message, author, date, and other qualifiers.
search_repositoriesreadFind repositories by keywords, topics, and other filters.
get_secret_scanning_alertreadInspect an individual secret scanning alert.
list_secret_scanning_alertsreadBrowse repository alerts for exposed secrets.
get_global_security_advisoryreadLook up a global security advisory by GHSA ID.
list_global_security_advisoriesreadBrowse global advisories by package, ecosystem, or severity.
list_org_repository_security_advisoriesreadBrowse repository security advisories across an organization.
list_repository_security_advisoriesreadBrowse security advisories for a specific repository.
list_starred_repositoriesreadBrowse repositories a user has starred.
star_repositorywriteAdd a repository to your starred list.
unstar_repositorywriteRemove a repository from your starred list.
search_usersreadFind GitHub users matching a search query.
create_pull_request_with_copilotwriteAsk Copilot coding agent to implement a task and open a PR.
get_copilot_spacereadRetrieve a Copilot Space by owner and name.
list_copilot_spacesreadBrowse available Copilot Spaces.
github_support_docs_searchreadFind documentation for GitHub product and support questions.

What GitHub MCP exposes

GitHub MCP groups its 96 tools into 15 categories, each with a suggested starting policy.

Category	Covers	Access	Suggested policy
Repositories & Files	Files, branches, commits, releases, tags, collaborators, and stars	Read / Write	Scope repositories; approve destructive changes
Search	Search code, commits, repositories, issues, PRs, users, and organizations	Read	Limit access to intended resources
Issues & Labels	Issues, comments, sub-issues, custom fields, types, and labels	Read / Write	Audit changes
Pull Requests	PR details, diffs, reviews, branch updates, and merges	Read / Write	Require approval for merges
Actions	Workflows, runs, jobs, artifacts, and logs	Read / Write	Restrict workflow execution
Projects	Projects, items, fields, views, and status updates	Read / Write	Scope projects; audit changes
Discussions	Discussions, categories, comments, replies, and answers	Read / Write	Audit publishing and deletion
Security	Code scanning, Dependabot, exposed secrets, and security advisories	Read	Limit access to security findings
Code Quality	Individual code quality findings	Read	Scope repository access
Governance	Rulesets and custom properties	Read / Write	Require approval for policy changes
People & Teams	Authenticated profile, teams, and team members	Read	Limit organization access
Notifications	Notification details, read status, and subscriptions	Read / Write	Keep changes scoped to the user
Gists	Gist content, creation, and updates	Read / Write	Review content before publishing
Copilot	Issue assignments, automated reviews, coding tasks, and Spaces	Read / Write	Approve agent task execution
Documentation	GitHub product and support documentation search	Read	Allow documentation searches