@artificable/github-mcp-server

Artificable fork of github/github-mcp-server with a --token-command flag for short-lived credentials (GitHub App installation tokens, Vault dynamic secrets, etc.). The upstream server reads GITHUB_PERSONAL_ACCESS_TOKEN once at startup; this fork also accepts an external command that mints a token on demand and caches it with an expiry.

Install

npx -y @artificable/github-mcp-server --version

Or install globally:

npm install -g @artificable/github-mcp-server
artificable-github-mcp-server --version

This is a launcher package. On install it pulls in one of the platform-specific binary packages via optionalDependencies:

• @artificable/github-mcp-server-linux-x64
• @artificable/github-mcp-server-darwin-arm64
• @artificable/github-mcp-server-darwin-x64
• @artificable/github-mcp-server-windows-x64

If your package manager skipped optional deps, reinstall with npm install --include=optional.

Using --token-command

artificable-github-mcp-server stdio \
    --token-command /usr/local/bin/my-token-helper \
    --token-command --stdin

The flag takes a program plus args (repeat the flag for each arg, or pass them comma-separated). The command is run on startup and again whenever the cached token is within --repo-access-cache-ttl of expiry (defaults to 1 minute before).

Two output formats are accepted on stdout:

• Plain token, one line: ghs_abcd... — cached for 55 minutes by default.
• JSON with explicit expiry:

  {"token":"ghs_abcd...","expires_at":"2026-04-18T01:00:00Z"}

All other flags from upstream github-mcp-server work unchanged.

Claude Code MCP registration

claude mcp add github-mcp \
    -- npx -y @artificable/github-mcp-server stdio \
       --token-command /usr/local/bin/my-token-helper

License

MIT, inherited from upstream github/github-mcp-server.