An MCP (Model Context Protocol) server enabling LLMs and AI agents to interact with Git repositories. Provides tools for comprehensive Git operations including clone, commit, branch, diff, log, status, push, pull, merge, rebase, worktree, tag management, and more, via the MCP standard. STDIO & HTTP.
MCPpedia last refreshed this data
Git MCP Server is an MCP server that an MCP (Model Context Protocol) server enabling LLMs and AI agents to interact with Git repositories. Provides tools for comprehensive Git operations including clone, commit, branch, diff, log, status, push, pull, merge, rebase, worktree, tag management, and more, via the MCP standard. STDIO & HTTP. Its tool list has not been published yet over stdio and http, requires no API key, and scores 88/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"git-mcp-server": {
"env": {
"LOGS_DIR": "~/Developer/logs/git-mcp-server/",
"GIT_EMAIL": "casey@caseyjhand.com",
"GIT_BASE_DIR": "~/Developer/",
"GIT_USERNAME": "cyanheads",
"MCP_LOG_LEVEL": "info",
"GIT_SIGN_COMMITS": "true",
"MCP_TRANSPORT_TYPE": "stdio"
},
"args": [
"@cyanheads/git-mcp-server@latest"
],
"type": "stdio",
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Works with both Bun and Node.js. Runtime is auto-detected.
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Five weighted categories — click any category to see the underlying evidence.
@cyanheads/git-mcp-server vulnerable to command injection in several tools
### Summary A command injection vulnerability exists in the `git-mcp-server` MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possib
Click any tool to inspect its schema.
Git Working DirectoryThe current session working directory, set via git_set_working_dir
git://working-directory
Git Wrap-upWorkflow protocol for completing git sessions: review, document, commit, and tag changes
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in developer-tools
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
MCP server for using the GitLab API
Manage Supabase projects — databases, auth, storage, and edge functions
Chrome DevTools for coding agents
MCP Security Weekly
Get CVE alerts and security updates for Git Mcp Server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.