Add privacy policy and improve tool metadata

PRIVACY.md

@@ -0,0 +1,5 @@
+# Privacy Policy
+
+This server proxies read-only requests to GitHub's public API. It does not collect, store, or log any personal data, user queries, or conversation content. No cookies, no analytics, no tracking.
+
+When a GitHub Personal Access Token (PAT) is provided, it is used solely for GitHub API authentication and is never stored or logged.

README.md

@@ -60,10 +60,14 @@ Add as a connector in Claude — no installation needed:
 
 Works out of the box without a PAT — unauthenticated requests use the server's default GitHub token.
 
-## Example Prompt
+## Example Prompts
 
 > What are some beginner-friendly open issues on huggingface/transformers that would make for easy open source contributions?
 
+> Show me the files changed in the latest pull request on facebook/react and summarize what the PR does.
+
+> Read the README of langchain-ai/langchain and give me a quick overview of the project architecture.
+
 ## CLI Options
 
 | Flag | Description |
@@ -134,6 +138,10 @@ git push origin v1.0.0
 
 Or manually: `npm run build && npx @anthropic-ai/mcpb pack .`
 
+## Privacy Policy
+
+See [PRIVACY.md](PRIVACY.md). In short: this server is read-only, collects no data, and never stores tokens.
+
 ## License
 
 MIT

package.json

@@ -22,7 +22,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.25.2",
-    "agents": "^0.3.10",
+    "agents": "0.3.10",
     "zod": "^3.23.0"
   },
   "devDependencies": {

src/server.ts

@@ -50,6 +50,7 @@ export function createServer(pat?: string): McpServer {
       query: z.string().describe("Search query (e.g. 'GRPO reinforcement learning')"),
       per_page: z.number().optional().default(10).describe("Results per page (max 30)"),
     },
+    { title: "Search Repositories", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ query, per_page }) => {
       const data: any = await githubFetch(
         `/search/repositories?q=${encodeURIComponent(query)}&per_page=${Math.min(per_page, 30)}`,
@@ -75,6 +76,7 @@ export function createServer(pat?: string): McpServer {
       query: z.string().describe("Code search query (e.g. 'GRPO loss function language:python')"),
       per_page: z.number().optional().default(10).describe("Results per page (max 30)"),
     },
+    { title: "Search Code", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ query, per_page }) => {
       const data: any = await githubFetch(
         `/search/code?q=${encodeURIComponent(query)}&per_page=${Math.min(per_page, 30)}`,
@@ -98,6 +100,7 @@ export function createServer(pat?: string): McpServer {
       owner: z.string().describe("Repository owner (e.g. 'huggingface')"),
       repo: z.string().describe("Repository name (e.g. 'transformers')"),
     },
+    { title: "Get Repository Info", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo }) => {
       const data: any = await githubFetch(`/repos/${owner}/${repo}`, pat);
       const info = {
@@ -127,6 +130,7 @@ export function createServer(pat?: string): McpServer {
       path: z.string().optional().default("").describe("Path within repo (empty for root)"),
       branch: z.string().optional().describe("Branch name (defaults to repo default branch)"),
     },
+    { title: "List Directory Contents", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, path, branch }) => {
       const branchParam = branch ? `?ref=${branch}` : "";
       const data: any = await githubFetch(
@@ -155,6 +159,7 @@ export function createServer(pat?: string): McpServer {
       path: z.string().describe("File path (e.g. 'src/train.py')"),
       branch: z.string().optional().describe("Branch name (defaults to repo default branch)"),
     },
+    { title: "Read File", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, path, branch }) => {
       const branchParam = branch ? `?ref=${branch}` : "";
       const content = await githubRawFetch(
@@ -173,6 +178,7 @@ export function createServer(pat?: string): McpServer {
       owner: z.string().describe("Repository owner"),
       repo: z.string().describe("Repository name"),
     },
+    { title: "Get README", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo }) => {
       const content = await githubRawFetch(`/repos/${owner}/${repo}/readme`, pat);
       return { content: [{ type: "text" as const, text: content }] };
@@ -189,6 +195,7 @@ export function createServer(pat?: string): McpServer {
       path: z.string().optional().describe("Filter by file path"),
       per_page: z.number().optional().default(10).describe("Number of commits (max 30)"),
     },
+    { title: "List Commits", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, path, per_page }) => {
       let url = `/repos/${owner}/${repo}/commits?per_page=${Math.min(per_page, 30)}`;
       if (path) url += `&path=${encodeURIComponent(path)}`;
@@ -212,6 +219,7 @@ export function createServer(pat?: string): McpServer {
       repo: z.string().describe("Repository name"),
       branch: z.string().optional().default("HEAD").describe("Branch name"),
     },
+    { title: "Get Repository Tree", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, branch }) => {
       const data: any = await githubFetch(
         `/repos/${owner}/${repo}/git/trees/${branch}?recursive=1`,
@@ -235,6 +243,7 @@ export function createServer(pat?: string): McpServer {
       labels: z.string().optional().describe("Comma-separated label names"),
       per_page: z.number().optional().default(10).describe("Results per page (max 30)"),
     },
+    { title: "List Issues", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, state, labels, per_page }) => {
       let url = `/repos/${owner}/${repo}/issues?state=${state}&per_page=${Math.min(per_page, 30)}`;
       if (labels) url += `&labels=${encodeURIComponent(labels)}`;
@@ -263,6 +272,7 @@ export function createServer(pat?: string): McpServer {
       repo: z.string().describe("Repository name"),
       issue_number: z.number().describe("Issue number"),
     },
+    { title: "Get Issue Details", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, issue_number }) => {
       const data: any = await githubFetch(`/repos/${owner}/${repo}/issues/${issue_number}`, pat);
       const issue = {
@@ -289,6 +299,7 @@ export function createServer(pat?: string): McpServer {
       issue_number: z.number().describe("Issue number"),
       per_page: z.number().optional().default(10).describe("Results per page (max 30)"),
     },
+    { title: "Get Issue Comments", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, issue_number, per_page }) => {
       const data: any = await githubFetch(
         `/repos/${owner}/${repo}/issues/${issue_number}/comments?per_page=${Math.min(per_page, 30)}`,
@@ -313,6 +324,7 @@ export function createServer(pat?: string): McpServer {
       state: z.enum(["open", "closed", "all"]).optional().default("open").describe("PR state"),
       per_page: z.number().optional().default(10).describe("Results per page (max 30)"),
     },
+    { title: "List Pull Requests", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, state, per_page }) => {
       const data: any = await githubFetch(
         `/repos/${owner}/${repo}/pulls?state=${state}&per_page=${Math.min(per_page, 30)}`,
@@ -339,6 +351,7 @@ export function createServer(pat?: string): McpServer {
       repo: z.string().describe("Repository name"),
       pull_number: z.number().describe("Pull request number"),
     },
+    { title: "Get Pull Request Details", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, pull_number }) => {
       const data: any = await githubFetch(`/repos/${owner}/${repo}/pulls/${pull_number}`, pat);
       const pr = {
@@ -366,6 +379,7 @@ export function createServer(pat?: string): McpServer {
       repo: z.string().describe("Repository name"),
       pull_number: z.number().describe("Pull request number"),
     },
+    { title: "Get Pull Request Files", readOnlyHint: true, destructiveHint: false, openWorldHint: true },
     async ({ owner, repo, pull_number }) => {
       const data: any = await githubFetch(
         `/repos/${owner}/${repo}/pulls/${pull_number}/files`,