Connect GitHub to Andromity with the GitHub MCP server

GitHub runs an official remote MCP server at https://api.githubcopilot.com/mcp/. Connected to Andromity, it lets the agent look things up on GitHub while it works in your repository: the issue it is fixing, the review comments on a pull request, or the log of a failed Actions run.

GitHub’s remote server does not let clients register themselves for sign-in, so Andromity connects with a personal access token instead. Andromity checks the token with GitHub before saving it and keeps it in its encrypted token store, not in a config file.

What the agent can do with GitHub

• Read repository content, branches, commits, tags and releases, and search code across GitHub.
• Read and create issues and comments, and manage labels.
• Read pull requests and create new ones.
• Inspect GitHub Actions workflow runs.
• Read code scanning, secret scanning and Dependabot alerts, and security advisories.
• Work with discussions, gists, notifications, projects and organizations.

Example prompts

Ask for the work in plain language. Naming the server helps, for example “use the GitHub MCP server”.

• Read issue #482 in this repository, find the cause in the code, fix it and add a regression test.
• Summarize the unresolved review comments on my open pull request and address the ones about error handling.
• The latest CI run on main failed. Read the failing job’s log and tell me which test broke and why.
• List open Dependabot alerts for this repository and propose the smallest safe upgrade for each.

Connect GitHub

1. Create a fine-grained personal access token at github.com/settings/personal-access-tokens/new. Give it access only to the repositories the agent should see, and only the permissions it needs.
2. In VS Code, open Andromity Hub → MCP Servers → Discover. In the terminal app, open /settings → MCP → + Connect an app. Find GitHub and select Connect.
3. Paste the token. Andromity sends a test request to GitHub; if GitHub rejects the token, nothing is saved.
4. Ask the agent to use GitHub, for example “use the github MCP server to read issue #12”.

See Connect an app for how Andromity stores connectors and tokens.

Access and safety

• The agent can do whatever the token allows, including write actions such as pushing files or creating pull requests. Prefer a fine-grained token limited to specific repositories.
• GitHub documents a read-only mode: the /readonly path or the X-MCP-Readonly header exposes only read tools. To use it, add a server with the URL https://api.githubcopilot.com/mcp/readonly and paste your token on its card.
• Andromity’s permission modes apply to every GitHub tool call. In SAFE mode each call asks for approval; in TRUST mode, tools whose names contain words such as create, push or delete ask.

In an untrusted folder, MCP servers don’t start at all. Read workspace trust and permission modes for the full model.

Limits to know

• The remote server does not support GitHub Enterprise Server. GitHub points Enterprise Server users to its local server instead.
• GitHub notes that organization policies can affect access to the remote server.

Questions

Does Andromity support the GitHub MCP server?

Yes. Andromity connects to GitHub’s official remote MCP server with a personal access token, and the agent can read code, issues, pull requests and Actions runs.

Why does GitHub use a token instead of a browser sign-in?

GitHub’s remote MCP server only accepts OAuth sign-ins from apps registered with GitHub in advance. A personal access token works with any client, and you control exactly what it can reach.

Can I make the GitHub connection read-only?

Yes. GitHub documents a read-only endpoint, https://api.githubcopilot.com/mcp/readonly, that exposes only read tools. Add it as a server in mcp.json with your token.

Sources

This guide is based on GitHub’s own documentation. The app controls its server, so tools can change; check the source for the current list.

• GitHub MCP server README
• GitHub remote MCP server documentation

GitHub is a trademark of its owner. Andromity is not affiliated with or endorsed by GitHub.