Microsoft GitHub Advisory MCP Server `cd68016c7ea18e4e7121dee0ffeee30131a2e988`

source_git · microsoft/github-advisory-mcp · latest release

Verified with no proven findings

Security result

Observed tools

—

Version rating

—

Change risk

Independent inventory

Observed 2026-08-25T09:46:05.057Z using mcpSecurity-inventory. Protocol 2025-06-18.

Tool	Category	Risk
get_advisoryGet detailed information about a specific GitHub security advisory by its GHSA identifier. Returns comprehensive details including description, vulnerabilities, CVSS scores, CWE classifications, and references. Input schema { "type": "object", "properties": { "ghsa_id": { "type": "string", "description": "GHSA identifier (e.g., GHSA-xxxx-xxxx-xxxx)" } }, "required": [ "ghsa_id" ] }	—	—
list_advisoriesList GitHub security advisories from local database with optional filters. Returns summary information about advisories including GHSA ID, CVE ID, severity, affected packages, and more. Input schema { "type": "object", "properties": { "ghsa_id": { "type": "string", "description": "GHSA identifier" }, "cve_id": { "type": "string", "description": "CVE identifier" }, "ecosystem": { "type": "string", "enum": [ "rubygems", "npm", "pip", "maven", "nuget", "composer", "go", "rust", "erlang", "actions", "pub", "other", "swift" ], "description": "Package ecosystem" }, "severity": { "type": "string", "enum": [ "low", "medium", "high", "critical", "unknown" ], "description": "Severity level" }, "cwes": { "type": "string", "description": "Comma-separated CWE identifiers (e.g., '79,284,22')" }, "is_withdrawn": { "type": "boolean", "description": "Filter withdrawn advisories" }, "affects": { "type": "string", "description": "Package name filter" }, "published": { "type": "string", "description": "Published date or range" }, "updated": { "type": "string", "description": "Updated date or range" }, "per_page": { "type": "number", "minimum": 1, "maximum": 100, "description": "Results per page (max 100)" }, "direction": { "type": "string", "enum": [ "asc", "desc" ], "description": "Sort direction" }, "sort": { "type": "string", "enum": [ "updated", "published" ], "description": "Sort field" } } }	—	—

Tool

Category

Risk

get_advisoryGet detailed information about a specific GitHub security advisory by its GHSA identifier. Returns comprehensive details including description, vulnerabilities, CVSS scores, CWE classifications, and references.

Input schema

{
  "type": "object",
  "properties": {
    "ghsa_id": {
      "type": "string",
      "description": "GHSA identifier (e.g., GHSA-xxxx-xxxx-xxxx)"
    }
  },
  "required": [
    "ghsa_id"
  ]
}

—

list_advisoriesList GitHub security advisories from local database with optional filters. Returns summary information about advisories including GHSA ID, CVE ID, severity, affected packages, and more.

Input schema

{
  "type": "object",
  "properties": {
    "ghsa_id": {
      "type": "string",
      "description": "GHSA identifier"
    },
    "cve_id": {
      "type": "string",
      "description": "CVE identifier"
    },
    "ecosystem": {
      "type": "string",
      "enum": [
        "rubygems",
        "npm",
        "pip",
        "maven",
        "nuget",
        "composer",
        "go",
        "rust",
        "erlang",
        "actions",
        "pub",
        "other",
        "swift"
      ],
      "description": "Package ecosystem"
    },
    "severity": {
      "type": "string",
      "enum": [
        "low",
        "medium",
        "high",
        "critical",
        "unknown"
      ],
      "description": "Severity level"
    },
    "cwes": {
      "type": "string",
      "description": "Comma-separated CWE identifiers (e.g., '79,284,22')"
    },
    "is_withdrawn": {
      "type": "boolean",
      "description": "Filter withdrawn advisories"
    },
    "affects": {
      "type": "string",
      "description": "Package name filter"
    },
    "published": {
      "type": "string",
      "description": "Published date or range"
    },
    "updated": {
      "type": "string",
      "description": "Updated date or range"
    },
    "per_page": {
      "type": "number",
      "minimum": 1,
      "maximum": 100,
      "description": "Results per page (max 100)"
    },
    "direction": {
      "type": "string",
      "enum": [
        "asc",
        "desc"
      ],
      "description": "Sort direction"
    },
    "sort": {
      "type": "string",
      "enum": [
        "updated",
        "published"
      ],
      "description": "Sort field"
    }
  }
}

—

Resources 0

None observed for this version.

Resource templates 0

None observed for this version.

Prompts 0

None observed for this version.

Changes from previous version

No completed comparison is available.

Risk	Change	Subject
No material changes recorded.

Confirmed vulnerabilities

Severity	Finding	Advisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 288489e5dc8c0659aaba1efb93cc2a618eb1463e867fe5f62c22a67430efb265

Scanner: mcp-proof-engine 0.1.0.

Microsoft GitHub Advisory MCP Server cd68016c7ea18e4e7121dee0ffeee30131a2e988