Back to Browse

Oss Issues MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server with derived GitHub issue tools: normalized fetch, new-issue watch, claim status.

About

MCP server with derived GitHub issue tools: normalized fetch, new-issue watch, claim status.

Security Report

5.2
Moderate5.2Moderate Risk

Well-designed MCP server with strong security fundamentals. Implements repository allowlist to prevent arbitrary repo access, uses read-only GitHub token, and keeps business logic separate from HTTP/auth layers for testability. Minor code quality findings around error handling and input validation do not materially impact security posture. Supply chain analysis found 3 known vulnerabilities in dependencies (1 critical, 1 high severity). Package verification found 1 issue.

7 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Fine-grained GitHub personal access token, read-only (public repos: Issues, Metadata, Contents).Required

Environment variable: GITHUB_TOKEN

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-amrmohamed17-oss-issues-mcp": {
      "env": {
        "GITHUB_TOKEN": "your-github-token-here"
      },
      "args": [
        "oss-issues-mcp"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

oss-issues-mcp

An MCP server exposing derived, triage-oriented GitHub issue tools — not a passthrough of the GitHub API.

Where GitHub's own MCP server returns raw API responses, this server does task-specific work: stripping issue-template scaffolding, resolving whether an issue is already claimed from multiple signals, and filtering a watch-list of repositories to what is new and open.

Tools

ToolPurpose
get_actionable_issueFetch an issue, strip template furniture, return only triage-relevant fields
(planned) list_new_issuesNew open issues across a watch-list, pull requests excluded
(planned) get_claim_statusIs this already being worked on? (assignees + linked PRs)
(planned) get_repo_contextCONTRIBUTING.md and issue-template rules

Security

  • Repository allowlist — the server refuses any repo not explicitly allowed.
  • Read-only — no write tools exist until a human-approval gate governs them.
  • Requires a fine-grained, read-only GITHUB_TOKEN.

Run

export GITHUB_TOKEN=github_pat_...
uv sync
uv run oss-issues-mcp

License

MIT

Reviews

No reviews yet

Be the first to review this server!