mcp-github
GitHub MCP server for Lume — the first non-built-in plugin in the Lume marketplace, used to validate the third-party plugin flow end to end.
Read-only in v1. Lets the assistant search and read GitHub repos, issues, pull requests, commits, and file contents on the user's behalf, scoped to whatever the user's personal access token can see.
Tools (read-only v1)
| Tool | Purpose |
|---|---|
search_repositories | Search repos using GitHub query syntax |
search_issues | Search issues across visible repos |
search_code | Search code across visible repos |
list_issues | List issues in a specific repo |
get_issue | Read full body and metadata of one issue |
list_pull_requests | List PRs in a specific repo |
get_pull_request | Read PR body, branches, diff stats |
list_commits | List recent commits in a repo |
get_file_contents | Read a file at a path/ref |
Authentication
Per-user model: the api process injects a JSON X-PA-Credentials header on each call; this server reads github_token from it. Falls back to the GITHUB_TOKEN env var only when no header is present (bootstrap admin).
To configure as a Lume user:
- Create a personal access token at https://github.com/settings/tokens. Fine-grained or classic; read-only scopes are sufficient (
repo:read,read:org, etc.). - In Lume → Settings → Plugins → GitHub, paste the token. The server retrieves it on every tool call via the encrypted credential vault.
Running
The plugin is intended to run as a sidecar to the PA-iOS docker-compose stack. To install:
- Clone this repo next to your PA-iOS clone:
git clone https://github.com/bryarpatch36/mcp-github.git - Merge the
compose.fragment.ymlsnippet into yourPA-iOS/docker-compose.yml. docker compose up -d --build mcp-github.- Install the plugin in Lume from Settings → Plugins → Discover.
Manifest
The Lume plugin manifest lives at manifest.json and is fetched by Lume's marketplace catalog from https://raw.githubusercontent.com/bryarpatch36/mcp-github/main/manifest.json.
Roadmap
- v1.0 — read-only (this release)
- v1.1 — issue and PR comments behind Lume's two-phase confirmation protocol
- v1.2 — issue and PR creation behind confirmation
- Forks, branches, merges remain explicitly out of scope; those should run from a real shell, not an LLM tool call.
License
MIT