Ghas MCP Server

🚀 ghas-mcp-server Project Documentation

ghas-mcp-server is an MCP (Multi-Platform Controller) server designed to interact with the GitHub Advanced Security (GHAS) API. Currently, the server supports the following features:

1. dependabot alerts: Retrieve and manage security warnings related to dependencies.
2. secret scanning alerts: Detect and handle sensitive information leaks in repositories.
3. code scanning alerts: Scan code to identify potential security vulnerabilities.

🚀 Quick Start

📦 Installation

Install dependencies using npm

npm install

Compile the project

npm run build

💻 Configuration Examples

Log in using GitHub CLI

{
    "mcp": {
        "inputs": []
    },
    "servers": {
        "ghas-mcp-server": {
            "command": "npx",
            "args": [
                "@rajbos/ghas-mpc-server"
            ],
            "env": {
                "GITHUB_PERSONAL_ACCESS_TOKEN_USE_GHCLI": "true"
            }
        }
    }
}

Use a personal access token

{
    "mcp": {
        "inputs": [
            {
                "id": "github_personal_access_token",
                "description": "GitHub Personal Access Token",
                "type": "promptString",
                "password": true
            }
        ]
    },
    "servers": {
        "ghas-mcp-server": {
            "command": "npx",
            "args": [
                "@rajbos/ghas-mpc-server"
            ],
            "env": {
                "GITHUB_PERSONAL_ACCESS_TOKEN": "${input:github_personal_access_token}"
            }
        }
    }
}

📊 Execution Results

🏗️ Project Structure

ghas-mcp-server/
├── src/
│   ├── operations/      # MCP toolkit
│   │   └── security.ts
│   └── index.ts         # Server entry file
├── package.json
└── tsconfig.json

🤝 Contribution Guidelines

Contributions are welcome! If you have any suggestions for new features or improvements, please feel free to submit issues or pull requests.

Quick Start for Contributors

1. Clone the project repository.
2. Install dependencies: npm install
3. Compile the project: npm run build

📚 Learning Resources

• MCP Framework GitHub Link
• MCP Framework Documentation