Githits MCP server
{
"mcpServers": {
"githits": {
"command": "npx",
"args": [
"-y",
"githits@latest"
],
"env": {
"GITHITS_API_TOKEN": "<githits_api_token>"
}
}
}
}{
"mcpServers": {
"githits": {
"command": "npx",
"args": [
"-y",
"githits@latest"
],
"env": {
"GITHITS_API_TOKEN": "<githits_api_token>"
}
}
}
}{
"mcpServers": {
"githits": {
"command": "npx",
"args": [
"-y",
"githits@latest"
],
"env": {
"GITHITS_API_TOKEN": "<githits_api_token>"
}
}
}
}{
"servers": {
"githits": {
"command": "npx",
"args": [
"-y",
"githits@latest"
],
"env": {
"GITHITS_API_TOKEN": "${input:githits_api_token}"
}
}
},
"inputs": [
{
"id": "githits_api_token",
"type": "promptString",
"description": "Githits api token",
"password": true
}
]
}{
"mcpServers": {
"githits": {
"command": "npx",
"args": [
"-y",
"githits@latest"
],
"env": {
"GITHITS_API_TOKEN": "<githits_api_token>"
}
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y githitsversion 0.21.0
What it does
GitHits is an MCP server that connects AI coding agents to public open-source code, documentation, and package metadata. It lets agents search repositories, read source files, inspect package health and vulnerabilities, and find real-world examples when they need evidence beyond local context or training data.
- Search open-source code and documentation for a specific package to understand how to use an API or handle an error.
- Read source files and grep through a dependency's codebase without cloning the repository locally.
- Inspect package vulnerabilities, dependencies, changelogs, and upgrade paths to verify package health before updating.
Tools this server exposes
| Tool | Does |
|---|---|
| quick_start | Provides orientation and guidance on using GitHits tools. |
| get_example | Finds code examples from open-source projects for a given task or pattern. |
| search_language | Searches for code examples in a specific programming language. |
| search | Searches indexed code, documentation, and symbols across open-source repositories. |
| search_status | Returns status information about search results. |
| code_files | Lists files in a package or repository directory. |
| code_read | Reads the contents of a source file from a package or repository. |
| code_grep | Searches for text patterns in source files using regex or literal matching. |
| docs_list | Lists available documentation pages for a package. |
| docs_read | Reads the contents of a documentation page. |
| pkg_info | Returns metadata and general information about a package. |
| pkg_vulns | Retrieves known vulnerabilities for a package version. |
| pkg_deps | Lists dependencies for a package and their versions. |
| pkg_changelog | Retrieves changelog information between package versions. |
| pkg_upgrade_review | Provides evidence and comparison for upgrading a package to a newer version. |
| feedback | Sends feedback or reports issues to GitHits. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.