registry / record
github.com/github/github-mcp-server
Does github.com/github/github-mcp-server MCP work in Claude Code and Cursor? Throne executed github.com/github/github-mcp-server mcp in a single-use Firecracker microVM and replayed both recorded client behaviours. Compatibility verdict: inconclusive. Is github.com/github/github-mcp-server mcp safe? Static security scan: 4 finding(s) to review under security ruleset v1. The full per-step results, security findings, scan date, and evidence hash are below.
> throne registry github.com/github/github-mcp-server
sealed
- scan id
- 88c4507c908d40af9f3b910b2f8cf855
- target
- https://github.com/github/github-mcp-server
- sealed at
- 2026-06-16 16:46:40Z
- evidence hash
- sha256:cef75fad8be35a176a1c3f0bc0a0f2bb93ffd415e49918646271572d12b4fe77
server never launched: no package.json or pyproject.toml at the repository root, Throne can launch Node (npm/pnpm/yarn) and Python (uv) projects
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
server never launched: no package.json or pyproject.toml at the repository root, Throne can launch Node (npm/pnpm/yarn) and Python (uv) projects
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
Token assigned a literal value 0123… (40 chars), verify it is not a live credential
github-mcp-server-HEAD/pkg/http/middleware/pat_scope_test.go:10213 non-local endpoint host(s) referenced in code, verify each is expected for this server's purpose: api (github-mcp-server-HEAD/pkg/utils/api.go:108), api.githubcopilot.com (github-mcp-server-HEAD/cmd/github-mcp-server/generate_docs.go:377), avatars.githubusercontent.com (github-mcp-server-HEAD/pkg/github/ui_resources.go:37), docs.github.com (github-mcp-server-HEAD/pkg/github/copilot.go:161), hostname (github-mcp-server-HEAD/pkg/utils/api.go:167), insiders.vscode.dev (github-mcp-server-HEAD/cmd/github-mcp-server/generate_docs.go:377), primer.style (github-mcp-server-HEAD/pkg/github/tools.go:19), raw (github-mcp-server-HEAD/pkg/utils/api.go:123), raw.hostname (github-mcp-server-HEAD/pkg/utils/api.go:176), spec.graphql.org (github-mcp-server-HEAD/internal/githubv4mock/query.go:75), uploads (github-mcp-server-HEAD/pkg/utils/api.go:118), uploads.github.com (github-mcp-server-HEAD/pkg/utils/api.go:72), uploads.hostname (github-mcp-server-HEAD/pkg/utils/api.go:164)
github-mcp-server-HEAD/cmd/github-mcp-server/generate_docs.go:377obsolete protocol version string '2024-11-05' in source
github-mcp-server-HEAD/cmd/mcpcurl/main.go:467obsolete protocol version string '2024-11-05' in source
github-mcp-server-HEAD/cmd/mcpcurl/main_test.go:151- target
- https://github.com/github/github-mcp-server github
- engine
- sandboxed
- claude code
- calibration: partial recorded=9,spec=0,assumed=9
- cursor
- calibration: partial recorded=11,spec=0,assumed=7
- chatgpt desktop
- calibration: unavailable recorded=0,spec=2,assumed=16
- steps exercised
- 18 of 18
- test suite
- v1.0.0
- security ruleset
- v1.0.0
- sealed at
- 2026-06-16 16:46:40Z
- evidence hash
- sha256:cef75fad8be35a176a1c3f0bc0a0f2bb93ffd415e49918646271572d12b4fe77
- valid until
- 2026-09-14
maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.
this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.