Skip to content

GITHUB_PERSONAL_ACCESS_TOKEN env var name assumes a PAT will be used #357

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
AArnott opened this issue Apr 28, 2025 · 0 comments
Open
Labels
bug Something isn't working

Comments

@AArnott
Copy link

AArnott commented Apr 28, 2025

The GitHub MCP server must be spawned with GITHUB_PERSONAL_ACCESS_TOKEN as an environment variable set with a value to use in GitHub API calls.
But the very name of this environment variable specifies too much. A personal access token is an access token that is provisioned manually by the user (through https://github.com/settings/tokens). This is tedious and a 'last resort' for authorizing apps.

A far preferable way to get an access token (which presumably works for this MCP server) is to use OAuth 2.0. For example, the Visual Studio keychain can produce such a token automatically for the user. But this is not a personal access token, but rather merely an access token.

The environment variable name suggests it must be a PAT, but in fact it's just an access token that's required.

Please consider adding support for GITHUB_ACCESS_TOKEN as an environment variable, document that, and deprecate use of the old environment variable name.

@AArnott AArnott added the bug Something isn't working label Apr 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant