Git
A Model Context Protocol (MCP) server that provides tools for LLMs to read, search, and manipulate Git repositories.
Project links
How to use it
- Open the listing page and read the server's documentation.
- Copy the configuration or command into your MCP client.
- Restart the client and try one of the server's tools.
Copy setup details
Use these instructions in your own environment. Copying text here does not run it.
MCP configuration
Copy into a client that accepts mcpServers JSON. Other clients may use a different configuration format.
{
"mcpServers": {
"git": {
"command": "uvx",
"args": [
"mcp-server-git",
"--repository",
"path/to/git/repo"
]
}
}
}Security checks
Automated checks, last run Nov 2, 2026. They can miss problems and do not guarantee a listing is safe. Read the source and what you are asked to run before you use it.
- NoteKnown vulnerabilities in the packageLayer 2
OSV.dev lists advisories for some versions of this package. Make sure you install a release that fixes them.
Evidence (8)
- mcp-server-git (any version): GHSA-5cgr-j3jf-jw3v
- mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
- mcp-server-git (any version): GHSA-9xwc-hfwc-8w59
- mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
- mcp-server-git (any version): GHSA-j22h-9j4x-23w5
- mcp-server-git has missing path validation when using --repository flag
- mcp-server-git (any version): GHSA-vjqx-cfc4-9h6v
- mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
- mcp-server-git (any version): PYSEC-2026-1621
- mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
- mcp-server-git (any version): PYSEC-2026-1622
- mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
- mcp-server-git (any version): PYSEC-2026-1623
- mcp-server-git has missing path validation when using --repository flag
- mcp-server-git (any version): PYSEC-2026-2630
- mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
Source: OSV.dev
- PassedSetup commands and descriptionLayer 1
No blocking patterns. Notes are listed in the evidence.
Evidence (1)
- note: unpinned-package
- git: uvx runs "mcp-server-git" without a pinned version, so whoever owns that package name can change what runs
Source: AIWantsThis screening rules
- PassedSource repositoryLayer 2
The repository is public, not archived and has recent activity.
Evidence (3)
- Last push
- 2026-10-29
- Archived
- no
- License
- none declared
Source: GitHub