Skip to content

Commit b94ada5

Browse files
docs: Add server-to-server token handling and feedback link
- Document S2S token filtering (hiding user tools like get_me) - Add S2S row to authentication comparison table - Link to discussion #1802 for feedback
1 parent e419a8c commit b94ada5

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed

docs/changelog/2026-01-intelligent-scope-features.md

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,16 @@ For users running the local server with a classic Personal Access Token (`ghp_`
3434

3535
**Example:** If your PAT only has `repo` and `gist` scopes, tools requiring `admin:org`, `project`, or `notifications` will be hidden from your tool list.
3636

37+
### Server-to-Server Token Handling (Remote Server)
38+
39+
When using server-to-server tokens (like the `GITHUB_TOKEN` in GitHub Actions), the remote server now intelligently hides user-context tools that don't make sense without a human user.
40+
41+
**Tools hidden for S2S tokens:**
42+
- `get_me` — No user to query
43+
- Other user-specific context tools
44+
45+
This ensures automated workflows see only the tools they can actually use, rather than failing when they attempt to call user-context APIs.
46+
3747
### Documented OAuth Scopes
3848

3949
Every MCP tool now includes explicit OAuth scope documentation:
@@ -100,6 +110,7 @@ If a tool requires `read:org` and your token has `admin:org`, the tool is availa
100110
| **Classic PAT** (`ghp_`) | Automatic filtering — hide unavailable tools |
101111
| **Fine-grained PAT** (`github_pat_`) | No filtering — API enforces permissions at call time |
102112
| **GitHub App** (`ghs_`) | No filtering — permissions based on app installation |
113+
| **Server-to-Server** (`GITHUB_TOKEN`) | User tools hidden — no user context available |
103114

104115
## Getting Started
105116

@@ -131,6 +142,10 @@ curl -sI -H "Authorization: Bearer $GITHUB_PERSONAL_ACCESS_TOKEN" \
131142
- [OAuth Authentication Guide](../oauth-authentication.md)
132143
- [Server Configuration](../server-configuration.md)
133144

145+
## Feedback
146+
147+
Share your experience and report issues in the [Scope filtering/challenging discussion](https://github.com/github/github-mcp-server/discussions/1802).
148+
134149
## Key PRs
135150

136151
**github-mcp-server:**

0 commit comments

Comments
 (0)