Git

Overview

From the repository's own README, as read at the audited commit.

# GitMCP<p align="center">  <img width="884" alt="image" src="https://github.com/user-attachments/assets/2bf3e3df-556c-49c6-ab7b-36c279d53bba" /></p><p align="center">  <a href="#-what-is-gitmcp">What is GitMCP</a> •  <a href="#-features">Features</a> •  <a href="#-getting-started">Getting Started</a> •  <a href="#-how-it-works">How It Works</a> •  <a href="#-badge">Badge</a> •  <a href="#-examples">Examples</a> •  <a href="#-faq">FAQ</a> •  <a href="#-privacy">Privacy</a> •  <a href="#-contributing">Contributing</a> •  <a href="#-license">License</a></p><div align="center">[![GitMCP](https://img.shields.io/endpoint?url=https://gitmcp.io/badge/idosal/git-mcp)](https://gitmcp.io/idosal/git-mcp)[![Twitter Follow](https://img.shields.io/twitter/follow/idosal1?style=social)](https://twitter.com/idosal1)[![Twitter Follow](https://img.shields.io/twitter/follow/liadyosef?style=social)](https://twitter.com/liadyosef)</div><div align="center">  <a href="https://www.pulsemcp.com/servers/idosal-git-mcp"><img src="https://www.pulsemcp.com/badge/top-pick/idosal-git-mcp" width="400" alt="Pulse MCP Badge"></a></div>## 🤔 What is GitMCP?**Stop vibe-hallucinating and start vibe-coding!**[GitMCP](https://gitmcp.io) is a free, open-source, remote [Model Context Protocol (MCP)](https://docs.anthropic.com/en/docs/agents-and-tools/mcp) server that transforms **any** GitHub project (repositories or GitHub pages) into a documentation hub. It enables AI tools like Cursor to access up-to-date documentation and code, even if the LLM has never encountered them, thereby eliminating code hallucinations seamlessly.GitMCP supports **two flavors** -*   **Specific Repository (`gitmcp.io/{owner}/{repo}` or `{owner}.gitmcp.io/{repo}`):** Use these when you primarily work with a select number of libraries. This ensures your AI assistant always targets the correct project, enhancing security and relevance by preventing access to unintended repositories.*   **Generic Server (`gitmcp.io/docs`):** Use this 

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add git-mcp --env GITHUB_TOKEN=${GITHUB_TOKEN} -- npx -y [email protected]

{
  "mcpServers": {
    "git-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "GITHUB_TOKEN": "${GITHUB_TOKEN}"
      }
    }
  }
}

Exposed tools (9) 9 read · 0 write · 0 destructive

Details

Source

idosal/git-mcp

npm

git-mcp@1.0.0

Transports

sse

Credentials it reads

GITHUB_TOKEN

License

Apache-2.0

Stars

8,383 · pushed 127d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (5 observation(s))

Network

declared (4 observation(s))

Shell

declared (2 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (17)

exec(input?: (string | URLPatternInit), baseURL?: string): URLPatternResult | null;

exec(query: string): Promise<D1ExecResult>;

static/img

import type { Info as Parent0 } from "../../+types/root.js"

import type { Info as Parent0 } from "../../+types/root.js"

import type { Info as Parent0 } from "../../+types/root.js"

import type { UrlType } from "../../src/shared/repoData";

import { generateServerName } from "../../src/shared/nameUtils";

atob(data: string): string;

declare function atob(data: string): string;

@ai-sdk/anthropic, @ai-sdk/cohere, @ai-sdk/google, @ai-sdk/groq, @ai-sdk/openai, @ai-sdk/react, @ai-sdk/xai, @cloudflare/workers-oauth-provider

- Add any necessary environment variables (ask project maintainers if you need access to specific API keys)

img/GitMCP_PW.mp4

img/GitMCP_final.mp4

img/cover.png

public/img/GitMCP_PW.mp4

public/img/GitMCP_final.mp4

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha fbd3556f2e5f · full audit: observations/trust-audit/mcp-server/idosal__git-4.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions