cosmic-mcp

All servers

GitHub Actions Security Audit

io.github.tylerscomic-lab/github-actions-audit-mcp · version 1.0.0

Community listing. Not installed or verified by cosmic-mcp. Read the source and its permissions before you run it.

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

https://github.com/tylerscomic-lab/github-actions-audit-mcp

Quick facts

  • Listing: Community
  • Published Oct 1, 23:20 UTC
  • Transport: streamable-http
  • Listed by cosmic-mcp: Nov 9, 04:27 UTC

Security Git and code hosting Workflow automation

Setup snippets

Generated from the registry entry. cosmic-mcp has not run or reviewed this server; values in angle brackets are yours to fill in.

Remote MCP URL (Claude and ChatGPT custom connectors)

https://github-actions-audit-mcp.mcpize.run/mcp

Claude Code

claude mcp add --transport http 'github-actions-audit-mcp' 'https://github-actions-audit-mcp.mcpize.run/mcp'

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "github-actions-audit-mcp": {
      "url": "https://github-actions-audit-mcp.mcpize.run/mcp"
    }
  }
}

VS Code (.vscode/mcp.json)

{
  "servers": {
    "github-actions-audit-mcp": {
      "type": "http",
      "url": "https://github-actions-audit-mcp.mcpize.run/mcp"
    }
  }
}

Related servers

  • docs-mcp Verified domain
    Remote MCP server for Tandem docs, install guides, SDKs, workflows, and agent setup help.
  • spotdb Verified domain
    Ephemeral data sandbox for AI workflows with guardrails and security
  • AgentTrust — Identity & Trust for A2A Agents Verified domain
    Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.
  • EXTREMELY agency Verified domain
    Your agency of AI agents in your AI app: what agents did, approvals, requests, jobs and reports.
  • A1 Lane Verified domain
    Draft, schedule and publish social posts and videos; delivery receipts, read-back where available.
  • Auten Verified domain
    Computer use for Claude Code, Codex, Cursor or any MCP client: your computer + Android phone (beta)