MCP Scanner

GitMCP

https://gitmcp.io/docs · scanned 2026-10-17

None of its 5 tools were flagged. They read like lookups and searches.

• fetch_generic_documentation0 · Low

  Fetch documentation for any GitHub repository by providing owner and project name

• fetch_generic_url_content0 · Low

  Generic tool to fetch content from any absolute URL, respecting robots.txt rules. Use this to retrieve referenced urls (absolute urls) that were mentioned in previously fetched documentation.

• match_common_libs_owner_repo_mapping0 · Low

  Match a library name to an owner/repo. Don't use it if you have an owner and repo already. Use this first if only a library name was provided. If found - you can use owner and repo to call other tools. If not found - try to use the library name directly in other tools.

• search_generic_code0 · Low

  Search for code in any GitHub repository by providing owner, project name, and search query. Returns matching files. Supports pagination with 30 results per page.

• search_generic_documentation0 · Low

  Semantically search in documentation for any GitHub repository by providing owner, project name, and search query. Useful for specific queries.

Badge for your README

MarkdownCopy

[![Scanned by Vulnify](https://api.vulnify.io/public/mcp-scanner/servers/gitmcp-io-docs.svg)](https://www.vulnify.io/scanner/gitmcp-io-docs?utm_source=badge&utm_medium=readme&utm_campaign=scanner-badge)

Automated heuristic result, scanned on 2026-10-17. It is based only on the tool names, descriptions, schemas and annotations this server publishes; no tool was called. It is not a security audit or certification, and not an endorsement of or accusation against the server or its operator. A high score is not a vulnerability finding, and a low score does not mean the server is safe. Vulnify is not affiliated with this server or its operator; names and marks belong to their owners. Server owner? Write to security@vulnify.io from an address at the server's domain to remove or correct this page, or scan it again to update it. We reply within 5 business days.

To exclude your server (and its subdomains) from the scanner and remove its public page, write to security@vulnify.io from an address at its domain. We process requests within 5 business days: the page stops being shown and its stored result is deleted. To fix an error instead, tell us what's wrong or scan the server again.