GitHub
for LuumenAI

Repos, actions, and runbook code as context and as actions.

Use GitHub as both context and control. LuumenAI reads repos, pipelines, and runbook code to understand a change, then proposes pull requests, triggers jobs, or rolls back releases as approved, audited steps.

Book a Demo Download Luumen

The GitHub toolbox

871 tools: 467 read, 404 write. Reads answer instantly. Writes require approval by default. Everything is logged.

ReadGet GitHub API rootRetrieves a map of all top-level GitHub REST API resource URLs and their templates.
ReadCheck if following userCheck if the authenticated user is following a specified person on GitHub.
ReadCheck if a gist is starredChecks if a gist is starred by the authenticated user.
ReadCheck if pull request mergedChecks if a specified GitHub pull request has been merged, indicated by a 204 HTTP status (merged) or 404 (not merged/found).
ReadCheck if a user can be assignedVerifies if a GitHub user can be assigned to issues in a repository; assignability is confirmed by an HTTP 204 (No Content) response, resulting in an empty 'data' field in the response.
ReadCheck if a user can be assigned to an issueChecks if a specified GitHub user can be assigned to a given issue within a repository.
ReadCheck if a user follows another userChecks if a GitHub user `username` follows `target_user`; returns a 204 HTTP status if true, 404 if not or if users are invalid.
ReadCheck if a user is blocked by the authenticated userChecks if the specified GitHub user is blocked by the authenticated user; a 204 No Content response indicates the user is blocked, while a 404 Not Found indicates they are not.
ReadCheck if a user is blocked by an organizationChecks if a GitHub user is blocked by an organization.
ReadCheck if a user is a repository collaboratorChecks if a user is a collaborator on a specified GitHub repository, returning a 204 status if they are, or a 404 status if they are not or if the repository/user does not exist.
ReadCheck if person is followed by authenticated userChecks if the authenticated GitHub user follows a target GitHub user.
ReadCheck private vulnerability reporting statusChecks if private vulnerability reporting is enabled for the specified repository.
ReadCheck public organization membershipCheck if a user is a public member of an organization.
ReadCheck if repository is starredCheck if a repository is starred by the authenticated user.
ReadCheck team permissions for a projectChecks if a team has 'read', 'write', or 'admin' permissions for an organization's specific classic project, returning the project's details if access is confirmed.
ReadCheck team permissions for a repositoryChecks a team's permissions for a specific repository within an organization, including permissions inherited from parent teams.
ReadCheck a tokenChecks if a GitHub App or OAuth access_token is valid for the specified client_id and retrieves its details, typically to verify its active status and grants.
ReadCompare two commitsCompares two commit points (commits, branches, tags, or SHAs) within a repository or across forks, using `BASE...HEAD` or `OWNER:REF...OWNER:REF` format for the `basehead` parameter.
ReadCreate inference chat completionsCreate chat completions using GitHub Models inference API.
ReadCreate inference embeddingsCreate inference embeddings using GitHub's AI models.
ReadDownload an artifactDownloads a GitHub Actions workflow artifact as a ZIP file.
ReadDownload a repository tarballDownloads a repository's source code as a tarball (.tar.gz) archive for a specific Git reference, if the repository is accessible.
ReadDownload a repository archive ZIPDownloads a repository's source code as a ZIP archive for a specific Git reference (branch, tag, or commit SHA).
ReadDownload job logs for a workflow runDownloads logs for a specific job in a GitHub Actions workflow run, contingent on the repository's existence and the job ID being valid and having produced logs.
ReadDownload workflow run attempt logsDownloads a ZIP archive of logs for a specific workflow run attempt.
ReadDownload workflow run logsDownloads logs for a specific GitHub Actions workflow run as a ZIP archive containing log files for each job in the workflow.
ReadExport an SBOM for a repositoryExports the software bill of materials (SBOM) in SPDX JSON format for a repository, if its dependency graph is enabled and it has at least one commit.
ReadFind Pull RequestsPrimary tool to find and search pull requests.
ReadFind RepositoriesAI-optimized repository search with smart filtering by language, stars, topics, and ownership.
ReadGenerate release notes content for a releaseGenerates Markdown release notes content (listing changes, pull requests, and contributors) for a GitHub repository release, customizable via tags and a configuration file.
ReadGet a blobRetrieves the raw, typically Base64-encoded, content of a file (blob) from a GitHub repository using its SHA hash, if the repository and blob SHA exist.
ReadGet a branchRetrieves detailed information for a specified branch within a GitHub repository.
ReadGet access restrictionsLists users, teams, and GitHub Apps with push access to a branch; this branch must be protected in repository settings for detailed restrictions, otherwise expect a 404 or empty response.
ReadGet a commitRetrieves a specific commit from a repository by its owner, name, and a valid commit reference (SHA, branch, or tag), supporting pagination for large diffs.
ReadGet admin branch protectionChecks if repository administrators are subject to the branch protection rules on a specific branch.
ReadGet all API versionsRetrieves all officially supported, date-based (e.g., "2022-11-28") versions of the GitHub REST API from the /versions endpoint.
ReadGet all contributor commit activityRetrieves commit activity (total commits, weekly additions/deletions/commits) for all contributors to a repository; may require a retry if GitHub returns 202 while preparing data.
ReadGet all deployment protection rules for an environmentLists all enabled custom deployment protection rules for a specific environment in a repository; the environment must exist and be configured for deployments.
ReadGet a milestoneRetrieves detailed information for a specific milestone within a GitHub repository by its number.
ReadGet an appRetrieves publicly available information for an existing GitHub App, identified by its unique URL-friendly `app_slug`.
ReadGet an artifactGets a specific artifact for a repository by `artifact_id`.
ReadGet an assignmentRetrieves detailed information for a specific GitHub Classroom assignment if the authenticated user is an administrator of the classroom.
ReadGet an autolink reference of a repositoryRetrieves a specific autolink reference (which automatically hyperlinks text like 'JIRA-123' to an external system) for a repository using its unique ID; requires administrator access to the…
ReadGet an environmentRetrieves the details of a specific deployment environment for a given repository, including its name, configurations, and current status.
ReadGet an environment public keyRetrieves the public key for a specified GitHub repository environment, used to encrypt secrets for GitHub Actions.
ReadGet an environment secretRetrieves metadata (name and timestamps) for a single secret in a GitHub Actions environment.
ReadGet an environment variableRetrieves a specific environment variable from a GitHub Actions environment by repository owner, repository name, environment name, and variable name.
ReadGet an issueRetrieves detailed information about a specific issue in a repository using the owner, repository name, and issue number.
ReadGet an issue commentGet an issue comment.
ReadGet an issue eventFetches details of a specific issue event for a given repository and event ID.
ReadGet an organizationGet an organization
ReadGet an organization public keyAction for `GetAnOrganizationPublicKey`.
ReadGet an organization roleRetrieves a specific GitHub organization role by its ID.
ReadGet an organization secretGets an organization secret's metadata (e.g., name, creation/update dates, visibility), but not its encrypted value.
ReadGet an organization variableRetrieves details (name, value, visibility, timestamps) of a specific, existing variable for an existing GitHub organization.
ReadGet an organization webhookRetrieves the full configuration, including subscribed events and delivery settings, for an existing organization webhook.
ReadGet a package for an organizationRetrieves a specific package (by type and name) from an organization, if both the package and organization exist.
ReadGet a package for a userRetrieves metadata for a specific package owned by a GitHub user, using package type, name, and username as identifiers.
ReadGet a package for the authenticated userRetrieves detailed information for a specific package owned by the authenticated user.
ReadGet a package version for an organizationRetrieves detailed information for a specific version of a package within an organization.
ReadGet a package version for a userRetrieves a specific public package version associated with a GitHub user.
ReadGet authenticated user package versionRetrieves detailed information for an existing specific package version associated with the authenticated user, identified by its type, name, and version ID.
ReadGet a projectRetrieves detailed information for a specific GitHub project (V2) using its project number and owner.
ReadGet a project cardRetrieves all details of a specific project card, given its unique `card_id`.
ReadGet a pull requestRetrieves a specific pull request from a GitHub repository using its owner, repository name, and pull request number.
ReadGet a referenceRetrieves a specific Git reference (e.g., a branch, tag, or fully qualified like 'heads/main') from a GitHub repository.
ReadGet a releaseGets a specific release from a GitHub repository, provided the repository is accessible and the release exists.
ReadGet a release assetGets metadata for a specific release asset in a GitHub repository, including a `browser_download_url` for downloading the asset.
ReadGet a release by tag nameGets a release from a GitHub repository by its tag name; the repository and a release with this tag must already exist.
ReadGet a repositoryRetrieves detailed information about an existing and accessible GitHub repository.
ReadGet a repository public keyGets a repository's public key for encrypting secrets to be used in GitHub Actions, if the repository exists and is accessible.
ReadGet a repository readmeFetches the README file (if it exists and is accessible) from a specified GitHub repository, returning its Base64-encoded content and metadata.
ReadGet a repository readme for a directoryRetrieves the README file from a specified directory within a GitHub repository, optionally at a given commit, branch, or tag.
ReadGet a repository rulesetRetrieves a specific repository ruleset by its ID; if `includes_parents` is true, the search for this `ruleset_id` also extends to rulesets from parent organizations.
ReadGet a repository rule suiteGets detailed information for a specific repository rule suite by its ID, including its evaluation status and the results of its individual rules.
ReadGet a repository secretGets metadata (name, creation/update timestamps) for an existing repository secret, excluding its encrypted value.
ReadGet a repository subscriptionGets the authenticated user's subscription details for a repository, indicating if they receive notifications.
ReadGet a repository variableGets a specific GitHub Actions variable by name from an accessible repository.
ReadGet a repository webhookReturns the configuration of an existing webhook for a given repository.
ReadGet a review comment for a pull requestRetrieves a specific pull request review comment by its ID, provided the repository exists, is accessible, and the comment ID is valid.
ReadGet a review for a pull requestRetrieves a specific review for a pull request using its owner, repository, pull request number, and review ID.
ReadGet a secret for the authenticated userRetrieves metadata (name, timestamps, visibility; not the value) for a specific, existing development environment secret associated with the authenticated user's GitHub Codespaces.
ReadGet a self hosted runner for an organizationRetrieves detailed information about a specific self-hosted runner registered within a GitHub organization.
ReadGet a self hosted runner for a repositoryGets a specific self-hosted runner for a repository by its unique ID.
ReadGet assignment gradesRetrieves all grades for an existing GitHub Classroom assignment.
ReadGet a tagRetrieves detailed information for a specific Git tag object from a GitHub repository, using the SHA of the tag object itself.
ReadGet a team by nameRetrieves a GitHub team by its slug from a specific organization.
ReadGet a threadRetrieves a specific GitHub notification thread using its unique `thread_id`.
ReadGet a thread subscription for the authenticated userRetrieves the authenticated user's subscription details for a specific notification thread, identified by `thread_id`.
ReadList repository files and directoriesBrowse and list all files/directories in a GitHub repository.
ReadGet a userRetrieves the public profile information for an existing GitHub user, specified by their username.
ReadGet a webhook configuration for an organizationRetrieves the configuration for a specific webhook associated with a GitHub organization.
ReadGet a webhook configuration for a repositoryReturns the configuration for an existing webhook on the specified repository.
ReadGet a webhook delivery for an organization webhookReturns detailed information for a specific delivery attempt of a webhook configured for the specified GitHub organization.
ReadGet a workflowRetrieves detailed information for a specific GitHub Actions workflow in a repository, identified by either its numeric ID or its filename.
ReadGet a workflow runGets a specific workflow run by its ID from a GitHub repository.
ReadGet a workflow run attemptRetrieves detailed information for a specific attempt of a workflow run in a GitHub repository, including its status, conclusion, and timings.
ReadGet billing usage report for userRetrieves the billing usage report for a specified GitHub user.
ReadGet branch protectionRetrieves branch protection settings for a specific, existing, and accessible branch in a GitHub repository; protection feature availability varies by GitHub product plan.
ReadGet catalog modelsRetrieve the list of AI models available in the GitHub Models catalog.
ReadGet a check runRetrieves detailed information for a specific check run within a GitHub repository.
ReadGet a check suiteRetrieves a specific check suite (a collection of check runs) by its ID from a repository accessible to the authenticated user.
ReadGet a classroomRetrieves details for a specific GitHub Classroom.
ReadGet a code of conductRetrieves the full details of a specific GitHub code of conduct using its unique key.
ReadGet Code of Conduct (GraphQL)Look up a code of conduct by its key using GitHub's GraphQL API.
ReadGet a CodeQL database for a repositoryGets an existing CodeQL database (including a download URL) for a specified language in an accessible repository, if one has been successfully built for that language.
ReadGet a code scanning alertRetrieves a specific code scanning alert, which identifies potential code vulnerabilities or errors, by its number from the specified GitHub repository.
ReadGet a code scanning analysis for a repositoryRetrieves detailed information for a specific code scanning analysis on an accessible repository, identified by its `analysis_id`.
ReadGet a code scanning default setup configurationGets the default setup configuration for code scanning in a repository, including state, languages, query suite, and schedule for a repository if it exists.
ReadGet a codespace for the authenticated userCall to retrieve detailed information for a `codespace_name` belonging to the authenticated user, ensuring the codespace exists and is accessible.
ReadGet a commit commentRetrieves the full details of a specific commit comment in a GitHub repository, using its unique identifier.
ReadGet a commit objectRetrieves detailed information (including author, committer, message, tree, parents, verification) for a specific commit in a GitHub repository, identified by its SHA.
ReadGet commit signature protectionGets the commit signature protection status for a branch in a repository.
ReadGet commit statusesList all statuses for a commit reference (SHA, branch, or tag) in reverse chronological order.
ReadGet community profile metricsRetrieves a repository's community profile metrics, including health percentage and the presence of key community files (e.g., README, LICENSE).
ReadGet contextual information for a userGets contextual hovercard information for a GitHub user; `subject_type` and `subject_id` can be jointly provided for more specific details.
ReadGet a custom deployment protection ruleRetrieves a specific custom deployment protection rule (used by GitHub Apps for external validation or manual approval of deployments) for a given environment in a repository.
ReadGet default attributes for a codespaceGet pre-flight data (e.g., default location, devcontainer path) for creating a Codespace in a given repository (must exist and be accessible), optionally for a specific Git ref.
ReadGet default workflow permissions for an organizationGets the default GITHUB_TOKEN workflow permissions and settings for a GitHub organization.
ReadGet default workflow permissions for a repositoryGets the default workflow permissions (`read` or `write`) for the GITHUB_TOKEN and whether it can approve pull request reviews in an existing and accessible repository.
ReadGet a diff of the dependencies between commitsGets the dependency diff between two Git revisions in a repository, where 'basehead' specifies the revisions and 'name' can optionally scope to a specific manifest file.
ReadGet a deploy keyGets a specific deploy key, identified by its `key_id`, for the GitHub repository specified by `owner` and `repo`.
ReadGet a deploymentGets a specific deployment by ID from a repository, provided the repository and deployment ID exist.
ReadGet a deployment branch policyRetrieves a specific deployment branch policy for an environment in a repository, identified by its unique ID.
ReadGet a deployment statusRetrieves a specific deployment status by its ID for a given deployment within a GitHub repository.
ReadGet details about a codespace exportRetrieves detailed information about a specific export of a codespace.
ReadGet a discussionFetches a specific discussion by its number from a team within an organization.
ReadGet a discussion commentFetches a specific comment from a team discussion within a specific organization.
ReadGet emojisLists all emojis available for use on GitHub, including custom and Unicode emojis.
ReadGet Enterprise Member InvitationLook up a pending enterprise unaffiliated member invitation by invitee and enterprise.
ReadGet feedsFetches a list of available GitHub feed URLs for the authenticated user.
ReadGet a gistFetches a specific GitHub gist by its `gist_id`, returning comprehensive details if the gist exists.
ReadGet a gist commentRetrieves a specific Gist comment by its ID and the Gist's ID.
ReadGet a gist revisionRetrieves a specific revision of a gist.
ReadGet GitHub Actions cache usage for an organizationRetrieves total GitHub Actions cache usage statistics for an organization, including active cache count and size across all repositories.
ReadGet github actions cache usage for a repositoryRetrieves the total count of active GitHub Actions caches and their combined size in bytes for a specified repository.
ReadGet github actions permissions for an organizationGets the GitHub Actions permissions for a specified organization, detailing repository enablement and allowed actions policies.
ReadGet GitHub Actions permissions for a repositoryGets the GitHub Actions permissions policy for a repository, including its enabled status and the scope of allowed actions.
ReadGet billing premium request usageGet billing premium request usage report for a GitHub user.
ReadGet billing usage summary for userRetrieve billing usage summary for a GitHub user account.
ReadGet github meta informationFetches GitHub's publicly available metadata, useful for configuring network security policies or IP allow-listing.
ReadGet github pages buildRetrieves detailed information about a specific GitHub Pages build for a repository, which must have GitHub Pages enabled.
ReadGet a gitignore templateRetrieves a specific .gitignore template from GitHub by its name, which must be an existing template in GitHub's collection.
ReadGet a global security advisoryRetrieve a global GitHub security advisory by its GHSA identifier.
ReadFetch GraphQL NodeFetch any GitHub object by its global node ID.
ReadGet GraphQL rate limitRetrieve the authenticated client's GitHub GraphQL API rate limit information.
ReadGet information about a sarif uploadRetrieves detailed information, including processing status and results URL, about a specific SARIF (Static Analysis Results Interchange Format) upload for a repository, uniquely identified by its…
ReadGet interaction restrictions for an organizationRetrieves interaction restrictions for an organization, showing which GitHub user types can interact with its public repositories and when restrictions expire; returns an empty response if no…
ReadGet interaction restrictions for a repositoryRetrieves active interaction restrictions for a repository, detailing which user groups are limited from activities like commenting or creating pull requests, and when these restrictions expire.
ReadGet interaction restrictions for public repositoriesRetrieves currently active interaction restrictions for the authenticated user's public repositories.
ReadGet issue commentsRetrieves all comments for a specific GitHub issue in chronological order.
ReadGet a labelRetrieves a specific label by its name from a specified GitHub repository.
ReadGet latest pages buildRetrieves information about the most recent GitHub Pages build for a repository, which must exist, be accessible, have GitHub Pages enabled, and have at least one prior build.
ReadGet a licenseCall this action to retrieve comprehensive details for a specific software license recognized by GitHub, using its unique license key.
ReadGet License (GraphQL)Look up an open source license by its SPDX ID using GitHub's GraphQL API.
ReadGet octocatFetches an ASCII art representation of GitHub's Octocat, suitable for text-based displays.
ReadCustomize OIDC subject claim templateRetrieves the OpenID Connect (OIDC) subject claim customization template for a repository, which defines the `sub` claim structure in OIDC tokens for GitHub Actions workflows; returns the default…
ReadGet allowed actions and workflows for an orgGets the list of allowed actions and reusable workflows for an organization when the 'allowed_actions' policy is set to 'selected'.
ReadGet organization audit logRetrieve an organization's audit log events for security and compliance investigations.
ReadGet a custom property for an organizationRetrieves the definition (schema) of a specific, existing custom property for an organization.
ReadGet organization project itemGet an item from an organization-owned GitHub Projects V2 project.
ReadGet organization public key for Codespaces secretsRetrieves an organization's public key, which must be used to encrypt secret values before they are configured for Codespaces.
ReadFetch Public Key For Secret EncryptionRetrieves the public key for an existing GitHub organization, required for encrypting Dependabot secrets.
ReadGet organization teamsRetrieves a list of teams for a specified GitHub organization.
ReadGet org dev environment secret safelyRetrieves metadata for a specific secret available to an organization's GitHub Codespaces without exposing its encrypted value.
ReadGet custom OIDC subject claim templateRetrieves the OpenID Connect (OIDC) subject claim customization template for a GitHub organization, which defines how the `sub` claim in OIDC tokens for workflows is constructed.
ReadGet a dns health check for github pagesRetrieves the DNS health check status (e.g., CNAME/A records, HTTPS) for a GitHub Pages site; the check may be pending (HTTP 202) on initial calls or after site changes.
ReadGet a GitHub Pages siteRetrieves information for a GitHub Pages site, which must be enabled for the repository.
ReadGet page viewsRetrieves page view statistics for a repository over the last 14 days, including total views, unique visitors, and a daily or weekly breakdown.
ReadGet pending deployments for a workflow runRetrieves pending deployment environments for a specific workflow run that are awaiting approval due to protection rules.
ReadGet project permission for a userRetrieves permission information for a GitHub project (classic) collaborator.
ReadGet public key for secret encryptionRetrieves a repository's public key for encrypting GitHub Codespaces secrets; requires `repo` scope or equivalent read access to codespaces secrets for private repositories.
ReadGet public key for the authenticated userRetrieves the authenticated user's public key for encrypting GitHub Codespaces secrets.
ReadGet pull request review protectionRetrieves the pull request review protection settings for a specific branch in a GitHub repository, if such protection is configured.
ReadGet Pull RequestsRetrieves a list of pull requests from a repository with flexible filtering options.
ReadGet rate limit status for the authenticated userRetrieves the authenticated user's current GitHub API rate limit status, including usage and limits across different resource categories.
ReadGet Raw Repository ContentFetch raw file content from a GitHub repository.
ReadGet allowed actions and workflows for a repositoryGets the settings for allowed actions and reusable workflows in a repository.
ReadGet repository development environment secretGets metadata (name, creation/update timestamps) for a specific, existing development environment secret (Codespaces secret) in a repository, without exposing its value.
ReadGet repository attestationsRetrieve attestations by subject digest from a GitHub repository.
ReadGet repository clonesRetrieves the total number of clones and a breakdown of clone activity (daily or weekly) for a specified repository over the preceding 14 days.
ReadGet repository contentRetrieves a file's Base64 encoded content or lists a directory's contents from a GitHub repository.
ReadGet Repository via GraphQLLookup a repository by owner and name using GitHub's GraphQL API.
ReadGet Repository OwnerLookup a repository owner (User or Organization) by login using GitHub's GraphQL API.
ReadGet repository permissions for a userRetrieves a specific user's permission level ('admin', 'write', 'read', or 'none') for a given repository, where 'maintain' role is reported as 'write' and 'triage' as 'read'.
ReadRetrieve repo public key for encryptionGets a repository's public key, used to encrypt secrets for Dependabot.
ReadGet repository secret securelyRetrieves metadata for an existing Dependabot secret in a repository, without exposing its encrypted value.
ReadGet repository security advisoryRetrieve a repository security advisory using its GHSA identifier.
ReadGet a delivery for a repository webhookRetrieves a specific delivery for a repository webhook, identified by its `hook_id` and `delivery_id`.
ReadGet rules for a branchRetrieves all active rules for a specific branch in a GitHub repository, excluding rules in 'evaluate' or 'disabled' status.
ReadGet Organization Dependabot SecretGets a single organization Dependabot secret's metadata (name, timestamps, visibility) without revealing its encrypted value.
ReadGet status checks protectionRetrieves the status check protection settings for a specific branch in a GitHub repository, if status check protection is enabled for it.
ReadGet team membersRetrieves a list of members for a specific team within an organization.
ReadGet team membership for a userRetrieves a user's role and membership status within a specific team in an organization.
ReadGet teams with access to the protected branchLists teams with explicit push access to a protected branch, provided team restrictions are configured in the branch's protection settings; returns an empty list otherwise.
ReadGet the authenticated userGets the profile information for the currently authenticated GitHub user, including potentially private details based on user settings.
ReadGet the combined status for a specific referenceRetrieves the aggregated commit status (e.g., success, failure, pending) from all checks for a specific reference (SHA, branch, or tag) in a GitHub repository.
ReadGet the hourly commit count for each dayRetrieves the 'punch card' data, showing hourly commit counts for each day of the week for an existing and accessible repository.
ReadGet the last year of commit activityFetches weekly commit totals and daily commit counts for the last 52 weeks for a specified GitHub repository.
ReadGet the latest releaseFetches the latest official (non-prerelease, non-draft) release for a GitHub repository; requires at least one such published release.
ReadGet the license for a repositoryRetrieves the license file and its details for a repository, optionally from a specific Git reference (branch, tag, or commit SHA).
ReadGet the review history for a workflow runRetrieves the detailed approval history for a specific workflow run in a GitHub repository, detailing each review's environment, state, reviewer, and comments, to track the approval process for…
ReadGet the status of a GitHub Pages deploymentRetrieves the status of a specific GitHub Pages deployment for a repository, which must have GitHub Pages enabled.
ReadGet the weekly commit activityFetches the weekly commit activity (additions and deletions per week) for a repository over the past year; best for repositories with under 10,000 commits.
ReadGet the weekly commit countRetrieves the weekly commit count for a repository, detailing commits by the owner and all contributors over the last 52 weeks; GitHub may return a 202 status or an empty response if statistics are…
ReadGet the Zen of GitHubRetrieves a random quote from GitHub's 'Zen of GitHub' collection, reflecting GitHub's design philosophies and offering humorous insights, useful for displaying GitHub wisdom or a lighthearted…
ReadGet top referral pathsFetches the top 10 most viewed content paths for a repository from the last 14 days.
ReadGet top referral sourcesFetches the top 10 websites that referred traffic to a repository within the last 14 days.
ReadGet user by IDRetrieves a GitHub user's profile information by their unique numeric account ID.
ReadGet user project itemGet an item from a user-owned project in GitHub Projects V2.
ReadGet user attestations by subject digestGet attestations by subject digest for a GitHub user.
ReadGet user's projects v2List GitHub Projects v2 for a specified user.
ReadGet users with access to the protected branchLists users with explicit push access to a protected branch, provided its protection rule restricts pushes to specific users.
ReadGet Viewer via GraphQLRetrieve the authenticated user's profile information via GitHub GraphQL.
ReadGet workflow external access levelGets the access level settings for a private repository, determining how workflows outside this repository can use its actions and reusable workflows.
ReadGet a job for a workflow runRetrieves detailed information for a specific job within a GitHub Actions workflow run, given its `job_id` which must be valid for the specified repository's workflow.
ReadGet workflow run usageGets the billable time, in milliseconds, for a specific workflow run, detailing time spent on various operating systems.
ReadGet workflow usageGets the billable time (in milliseconds, broken down by runner OS) for a specific workflow within a repository for the current billing cycle.
ReadCheck if repo starred by auth userUse to determine if the authenticated user has starred a specific GitHub repository, which is confirmed by an HTTP 204 status (resulting in an empty dictionary in the response data); the action…
ReadList accepted assignments for an assignmentLists accepted assignments (student repositories created after acceptance) for an existing GitHub Classroom assignment, identified by its unique `assignment_id`.
ReadList repositories accessible via GitHub App installationLists repositories that the authenticated user can access through a specific GitHub App installation.
ReadList app installations for user tokenLists GitHub App installations accessible to the authenticated user via their access token, including installation details, permissions, and repository access.
ReadGet apps with access to the protected branchLists GitHub Apps with push access to a repository's protected branch.
ReadList artifacts for a repositoryLists GitHub Actions workflow artifacts for a specified repository, which must exist.
ReadList assigneesLists users who can be assigned to issues in a repository, typically those with push access.
ReadList assignments for a classroomLists all assignments for a given GitHub Classroom `classroom_id`; the classroom must exist and be accessible.
ReadList attestation repositoriesList attestation repositories for an organization.
ReadList available machine types for a repositoryLists machine types available for GitHub Codespaces in a repository, optionally using a Git ref to check compatibility based on prebuild availability and devcontainer configurations.
ReadList branchesList branches in a GitHub repository.
ReadList branches for head commitLists branches in an accessible repository where the provided commit SHA is the head, useful for identifying development lines based on that commit.
ReadList check run annotationsLists annotations for a specific check run in a GitHub repository, detailing issues like errors or warnings on particular code lines.
ReadList check runs for a git refList GitHub check runs for a commit SHA, branch, or tag to assess CI status and conclusions.
ReadList check runs in a check suiteLists check runs for a specific check suite in a GitHub repository, optionally filtering by check name or status.
ReadList check suites for a git referenceLists check suites for a Git reference (commit SHA, branch, or tag) in a repository, optionally filtering by GitHub App ID or check run name.
ReadList child teamsLists the immediate child teams of a parent team within an organization.
ReadList classroomsLists GitHub Classrooms to which the authenticated user has administrative access.
ReadList codeowners errorsLists syntax errors in a repository's CODEOWNERS file, which must be located at the root, `.github/`, or `docs/` directory for the specified ref.
ReadList CodeQL databases for a repositoryLists all CodeQL databases for a repository where CodeQL analysis has been previously run and completed.
ReadList code scanning alerts for an organizationLists code scanning alerts for a GitHub organization; use EITHER `tool_name` OR `tool_guid` if filtering by tool, not both.
ReadList code scanning alerts for a repositoryLists code scanning alerts for a repository, optionally filtering by tool (which must have produced scan results for the repository), Git reference, state, or severity.
ReadList code scanning analyses for a repositoryLists code scanning analyses for an existing repository, optionally filtering by tool (name or GUID), Git reference, or SARIF ID.
ReadGet all codes of conductRetrieves all available codes of conduct from GitHub, often used to select one for a repository.
ReadList Codes of Conduct (GraphQL)Fetch all available codes of conduct using GitHub's GraphQL API.
ReadList codespaces for a user in organizationLists all GitHub Codespaces owned by a specified member of a given organization.
ReadList codespaces for the authenticated userLists GitHub Codespaces for the authenticated user, optionally filtering by repository ID and supporting pagination.
ReadList codespaces for the organizationLists active/pending GitHub Codespaces for an existing organization; admins list all, members list their own.
ReadList comment changes across organizationList issue and PR comment changes across an organization's repositories efficiently.
ReadList comments for a pull request reviewLists all comments for a specific review on a GitHub pull request.
ReadList commit commentsRetrieves all comments for a specific commit in a GitHub repository, supporting pagination.
ReadList commit comments for a repositoryLists all commit comments for a specified repository, which must exist and be accessible.
ReadList commitsLists commits for a GitHub repository.
ReadList commits on a pull requestLists commits for a pull request; requires the repository and pull request to exist and be accessible, and supports pagination.
ReadGet all commonly used licensesRetrieves a list of commonly used software licenses from GitHub, optionally filtering for 'featured' licenses whose specific selection criteria by GitHub may vary.
ReadGet all custom properties for an organizationGets the schema definitions for all custom properties configured for an organization, not the specific values assigned to repositories.
ReadGet all custom property values for a repositoryGets all custom property values for a repository.
ReadList custom property values for organization repositoriesLists repositories in an organization with their custom property values.
ReadList deliveries for an organization webhookRetrieves a list of webhook deliveries for a specific webhook in an organization, allowing inspection of delivery history and details.
ReadList deliveries for a repository webhookRetrieves delivery attempts for a specific repository webhook to inspect its history; ensure the webhook ID exists.
ReadList deploy keysLists deploy SSH keys for a specified repository; the repository must exist.
ReadList deployment branch policiesLists all deployment branch policies for a specified environment in a GitHub repository.
ReadList deploymentsLists deployments for a specified repository; repository must exist.
ReadList deployment statusesLists all statuses for a given deployment in a repository.
ReadList email addresses for the authenticated userLists all email addresses for the authenticated user, including their primary status, verification status, and visibility.
ReadList environment custom deployment rulesLists all custom deployment protection rule integrations for a repository environment; the `environment_name` must be URL-encoded.
ReadList environmentsRetrieves all deployment environments for a specified repository, which are used to configure protection rules and secrets for different software lifecycle stages.
ReadList environment secretsLists the names and metadata (not values) of secrets for a specified, existing environment within an existing GitHub repository.
ReadList environment variablesLists all environment variables, which are plaintext key-value pairs for GitHub Actions workflows, for a specified environment within a GitHub repository.
ReadList events for the authenticated userLists public events for the specified GitHub user, or private events if authenticated as that user, in reverse chronological order.
ReadList events for userLists events performed by a GitHub user in reverse chronological order.
ReadList events received by the authenticated userLists events a specific GitHub user received from followed users and watched repositories; returns private events if authenticated for `username`, otherwise public.
ReadList followers of a userLists followers for a specified, existing GitHub user.
ReadList followers of the authenticated userLists users following the authenticated GitHub user, returning an empty list if the user has no followers.
ReadList following for userLists the people that a GitHub user follows.
ReadList forksLists forks for a specified repository, which must exist, with options for sorting and pagination.
ReadList gist commentsLists comments for a specified GitHub Gist.
ReadList gist commitsLists all commits for a specified gist.
ReadList gist forksLists all forks for a given GitHub gist ID.
ReadList gists for a user_lists public gists for a specified GitHub user._
ReadList gists for the authenticated userLists gists for the authenticated user, with optional filtering by update time and pagination.
ReadList github actions caches for a repositoryLists GitHub Actions caches for a repository, with options to filter by Git reference or cache key, and to sort and paginate results.
ReadList GitHub Pages buildsLists GitHub Pages builds for a repository; GitHub Pages must be enabled on the repository for builds to be listed.
ReadGet all gitignore templatesRetrieves all available .gitignore template names from GitHub (e.g., 'Python', 'Node', 'Java'), used for generating .gitignore files.
ReadList global security advisoriesLists GitHub's global security advisories, filterable by various attributes including ID, type, ecosystem, severity, and dates.
ReadList GPG keys for a userList GPG keys for a GitHub user.
ReadList installation requests for the authenticated appLists pending installation requests made by users or organizations for the authenticated GitHub App.
ReadList instances of a code scanning alertLists all instances of a specific code scanning alert, optionally filtered by Git ref; requires code scanning to be enabled on the repository.
ReadList issue commentsLists comments for a specified issue in a GitHub repository.
ReadList issue comments for a repositoryLists issue comments, including those on pull requests, for an accessible repository.
ReadList issue dependencies blocked byList dependencies an issue is blocked by.
ReadList issue dependencies blockingList dependencies an issue is blocking.
ReadList issue eventsRetrieves a list of all events for a specific issue within a GitHub repository.
ReadList issue events for a repositoryLists all issue events (e.g., closed, reopened, assigned) for a specified repository.
ReadList issues for userLists GitHub issues for the authenticated user across visible repositories, with filtering by user relationship, state, labels, an ISO 8601 `since` timestamp (YYYY-MM-DDTHH:MM:SSZ), and sorting…
ReadList issue typesList all issue types configured for a GitHub organization.
ReadList jobs for a workflow runLists jobs for a specific workflow run in a GitHub repository.
ReadList jobs for a workflow run attemptLists jobs, including details like ID, status, and steps, for a specific attempt of a GitHub Actions workflow run.
ReadList labels for an issueLists all labels for a specified issue in a GitHub repository.
ReadList labels for a repositoryRetrieves all labels for a specified, existing GitHub repository.
ReadList labels for a self-hosted runner for a repositoryLists all labels assigned to a specific self-hosted runner registered with the given repository.
ReadList labels for issues in a milestoneLists all labels for issues within a specific milestone in a repository.
ReadList labels for a self-hosted runner for an organizationLists all labels assigned to a specific self-hosted runner within a GitHub organization, which are used to route workflows.
ReadList Licenses (GraphQL)Fetch all known open source licenses using GitHub's GraphQL API.
ReadList machine types for a codespaceLists available machine types for a specific, accessible codespace, enabling it to be transitioned to a new hardware configuration.
ReadList matching referencesLists all Git references (branches or tags) in a repository that start with the provided partial reference path (e.g., `heads/my-feature` or `tags/v1.2`).
ReadList milestonesLists milestones, which track progress for groups of issues and pull requests, for an existing repository, allowing filtering by state and sorting.
ReadList notifications for authenticated userList notification threads for the authenticated user with efficient polling support.
ReadList org level codespaces secretsLists all Codespaces secrets available for a specified organization, which must exist.
ReadList organization events for the authenticated userLists public events in a specified GitHub organization for the authenticated user's organization dashboard.
ReadList organization membersList all members of a GitHub organization.
ReadList organization memberships for authenticated userList organization memberships for authenticated user
ReadList organization projectsLists projects (V2) for a specified GitHub organization, with optional search query and cursor-based pagination.
ReadList organization repositoriesRetrieves a list of repositories for a specified GitHub organization, allowing filtering by type and sorting.
ReadGet all organization roles for an organizationLists all custom organization roles for an existing GitHub organization.
ReadList organizationsLists GitHub organizations for the authenticated user, sorted by ID in ascending order.
ReadList organization secretsLists GitHub Actions secrets available for a specified organization.
ReadList organizations for a userLists public organizations for a specified GitHub user; the `username` must be a valid GitHub handle.
ReadList organizations for the authenticated userLists organizations the authenticated GitHub user is a member of, returning details for each organization.
ReadList organization variablesLists all GitHub Actions variables for a specified organization.
ReadList organization webhooksLists all webhooks for a specified GitHub organization; the organization must exist.
ReadList organization fine-grained permissionsLists all fine-grained permissions available in a GitHub organization for use in custom organization roles.
ReadList organization issues assigned to the authenticated userLists issues for the authenticated user within a specified GitHub organization, with options to filter by involvement type, state, labels, and to sort results.
ReadList package versions for an organization packageLists all versions for a specified package, if it exists and is owned by the given GitHub organization.
ReadList organization project view itemsList items for an organization project view.
ReadList organization repositories with Github Actions enabledLists the selected repositories that are enabled for GitHub Actions in an organization.
ReadList org resource access tokensLists approved fine-grained personal access tokens (PATs) with access to resources in a GitHub organization, optionally filtering by owner, repository, permissions, or last usage time.
ReadList org resources with personal tokensLists requests from organization members to access organization resources with fine-grained personal access tokens (pending, approved, or denied).
ReadList organization Dependabot secrets without valuesLists all Dependabot secrets (metadata like names, creation/update timestamps, but not their encrypted values) for a specified organization, which must exist.
ReadList outside collaborators for an organizationLists outside collaborators for a GitHub organization, with options to filter (e.g., by 2FA status) and paginate results.
ReadList owned package versionsLists all versions for an existing package owned by the authenticated user, identified by its type and name.
ReadList packages for an organizationLists GitHub Packages for an organization, noting specific interpretations for package_type and visibility parameters.
ReadList packages for a userLists packages for a specified GitHub user, filterable by package type and visibility.
ReadList packages for the authenticated user's namespaceLists packages of a specific type and visibility within the authenticated user's namespace on GitHub.
ReadList package versions for a package owned by a userLists all versions of a public package owned by a specific GitHub user, identified by package type, package name, and username.
ReadList pending team invitationsLists all pending membership invitations for a specified team within an organization.
ReadList project collaborators (classic)Lists collaborators for a GitHub Project (classic) by project ID.
ReadList project columnsLists all of a GitHub project's columns (e.g., 'To Do', 'In Progress'); project_id must identify a valid, accessible project.
ReadList project fields for userList all fields in a GitHub Projects V2 project for a specific user.
ReadList project items for userList items for a user-owned GitHub project.
ReadList items for user project viewList items for a user's GitHub Projects (v2) view.
ReadList public email addresses for the authenticated userLists the public email addresses for the authenticated user.
ReadList public eventsLists public GitHub events, which may be delayed by up to 5 minutes, with support for pagination.
ReadList public events for a network of repositoriesRetrieves public events (up to 90 days old, newest first) for a GitHub repository network, including the repository and its forks.
ReadList public events for a userRetrieves a list of public events for a specified GitHub user, in reverse chronological order.
ReadList public events received by a userLists public events for a specified GitHub user (e.g., activities in repositories they watch or are involved in); the target user's profile must be public, and if blocked by the authenticated user…
ReadList public gistsLists public gists from GitHub, optionally filtering by a 'since' timestamp and supporting pagination; results are generally newest first.
ReadList public keys for a userLists the verified public SSH keys for a specified GitHub user.
ReadList public organization eventsLists public events for a specified GitHub organization, which must exist.
ReadList public organization membersLists users who have publicly declared their membership in a specified, existing GitHub organization.
ReadList public repositoriesLists all public repositories on GitHub; use the `since` parameter with a repository ID from a previous result for pagination.
ReadList pull requestsLists pull requests for a GitHub repository.
ReadList pull requests associated with a commitLists pull requests for a commit; returns merged PRs that introduced the commit if on the default branch, or open PRs including the commit if on other branches.
ReadList pull requests filesLists all files (including additions, modifications, and removals) associated with a specific pull request in a GitHub repository.
ReadList reactions for a commit commentLists reactions for a specific commit comment; this is a read-only operation.
ReadList reactions for an issueLists reactions for a specific, existing issue within an accessible GitHub repository, optionally filtering by content type.
ReadList reactions for an issue commentLists reactions for a specific issue comment in a GitHub repository, optionally filtering by content type.
ReadList reactions for a pull request review commentLists reactions for a pull request review comment in a repository, optionally filtering by reaction type.
ReadList reactions for a releaseLists all reactions, or optionally filters reactions by a specific content type, for a given GitHub release.
ReadList reactions for a team discussionLists reactions for an existing team discussion within an organization.
ReadList reactions for a team discussion commentLists reactions for a specific comment in a team discussion within an organization, optionally filtering by content type.
ReadList release assetsLists assets (e.g., compiled binaries, source code archives) for a specific GitHub release, identified by `release_id` which must be valid for an existing release in the repository.
ReadList releasesRetrieves a list of all releases (published, draft, and prerelease) for a specified repository.
ReadList repo access by tokenLists repositories in an organization that a fine-grained personal access token has requested access to.
ReadList repo codespaces for authenticated userLists Codespaces the authenticated user can access within a specified, existing repository.
ReadList repo dev container configs for userLists the `devcontainer.json` configurations available in a specified repository for use with GitHub Codespaces.
ReadList authenticated user's repository invitationsLists all pending repository invitations for the authenticated user.
ReadList repository notifications for the authenticated userRetrieves notifications for the authenticated user from a specified repository, to which the user must have access.
ReadList repo secrets without valuesLists all Codespaces secrets available in a specific repository, without their encrypted values.
ReadList repositoriesLists repositories accessible to the authenticated user based on visibility, affiliation, and type filters.
ReadList repos accessible to app installationLists repositories a GitHub App installation can access.
ReadList repositories for a userLists public repositories for a specified GitHub user, who must have an existing account.
ReadList repositories for the authenticated userLists repositories for the authenticated user; using 'type' with 'visibility' or 'affiliation' API parameters (not in this model) can cause a 422 error.
ReadList repositories starred by a userLists repositories a valid and existing GitHub user has starred.
ReadList repositories starred by the authenticated userLists repositories the authenticated user has starred, optionally sorted and paginated, including star creation timestamps via 'application/vnd.github.star+json' media type.
ReadList repositories watched by a userLists repositories a given GitHub user is watching; the username must be a valid and existing GitHub user handle.
ReadList repositories watched by the authenticated userLists repositories the authenticated user is watching (subscribed to for notifications).
ReadList repos with ghactions cache usageRetrieves a paginated list of GitHub Actions cache usage statistics for repositories within an existing GitHub organization.
ReadList repository activitiesLists activities for a GitHub repository, ensuring the repository exists and is accessible.
ReadGet all autolinks of a repositoryRetrieves all autolinks (e.g., for JIRA issues) configured for a repository; requires admin permissions on the repository.
ReadList repository collaboratorsLists collaborators for a specified repository, provided it exists and is accessible to the authenticated user.
ReadList repository contributorsLists contributors to a specified repository, sorted by number of contributions in descending order; the repository must exist and be accessible.
ReadList repository Dependabot alertsList Dependabot vulnerability alerts for a repository with filters and cursor pagination.
ReadList repository eventsLists chronological events (e.g., code pushes, issue activities, PR actions, forks) for a specified, existing GitHub repository.
ReadList repository invitationsRetrieves all pending (unaccepted or undeclined) collaboration invitations for a specified GitHub repository.
ReadList repository issuesLists issues (including pull requests) from a GitHub repository.
ReadList repository languagesLists the programming languages used in a GitHub repository, returning a byte count for each language.
ReadList repository organization secretsLists names of organization-level secrets shared with the specified repository; actual secret values are not returned and visibility depends on token access.
ReadList repository organization variablesLists organization-level variables that are shared with a specific repository.
ReadList repository projectsLists Projects (classic) associated with a specific repository.
ReadGet all repository rulesetsRetrieves all rulesets for a GitHub repository, which define conditions and actions for repository interactions (e.g., branch protections).
ReadList repository rule suitesLists rule suite evaluations for a repository, allowing filtering by ref (non-wildcard), time period, actor, and result.
ReadList repository secretsLists metadata for all secrets in a GitHub repository, excluding their encrypted values.
ReadList repository secrets without decryptingLists metadata (e.g., name, creation/update dates) for all Dependabot secrets in a repository; secret values are not included.
ReadList repository security advisoriesList security advisories for a repository.
ReadList repository tagsLists tags for a specified GitHub repository.
ReadList repository teamsLists all teams with explicit permission to access the specified repository; the repository must exist.
ReadGet all repository topicsRetrieves all topics for a specified, existing, and accessible repository.
ReadList repository variablesLists plain text key-value variables for GitHub Actions workflows within a specific, accessible repository.
ReadList repository webhooksRetrieves a list of webhooks for a repository, which must exist and be accessible.
ReadList repository workflowsLists all GitHub Actions workflows for a specified repository, which must exist and be accessible.
ReadGet all requested reviewers for a pull requestGets all users and teams requested to review a specific pull request in a repository.
ReadList review comments in a repositoryLists all review comments on all pull requests within a specified repository.
ReadList review comments on a pull requestLists all review comments on a specific pull request within a GitHub repository.
ReadList reviews for a pull requestLists submitted reviews chronologically for a specific pull request within a GitHub repository.
ReadList runner applications for an organizationLists downloadable GitHub Actions runner application binaries for setting up self-hosted runners in a GitHub organization.
ReadList runner applications for a repositoryLists available self-hosted runner application binaries for a specific repository, including their OS, architecture, and download URL.
ReadList secret scanning alerts for a repositoryList secret scanning alerts for a GitHub repository using first-party detections.
ReadList secrets for the authenticated userLists all Codespaces secrets accessible to the authenticated user for use within GitHub Codespaces.
ReadList security advisories (GraphQL)List GitHub Security Advisories using the GraphQL API.
ReadList security vulnerabilitiesQuery software vulnerabilities documented by GitHub Security Advisories using GraphQL.
ReadList selected repositories for a Codespaces organization secretLists repositories that have been granted access to a Codespaces organization secret.
ReadList selected repositories for a user secretLists repositories that have access to the specified user Codespaces secret.
ReadList selected repos for secret accessLists repositories within a specified organization that have been granted access to a particular Dependabot secret.
ReadList selected repositories for an organization variableLists repositories in an organization that can access a specific organization variable; supports pagination and returns an empty list if no repositories have been granted access.
ReadList self hosted runners for an organizationLists self-hosted runners for a GitHub organization, optionally filtering by name and paginating results, providing details for each runner such as OS, status, and labels.
ReadList self hosted runners for a repositoryLists all self-hosted runners configured for a repository.
ReadList social accounts for a userLists social media accounts publicly linked to an existing GitHub user's profile.
ReadList social accounts for the authenticated userLists all social media accounts linked to the authenticated user's GitHub profile.
ReadList Sponsorable Users and OrganizationsList users and organizations who can be sponsored via GitHub Sponsors.
ReadList SSH signing keys for userLists the public SSH signing keys for a specified GitHub user.
ReadList stargazersLists users who have starred the specified GitHub repository, which must exist.
ReadList starred gistsRetrieves a list of gists starred by the authenticated user.
ReadList starred repositories for userLists public repositories that a user has starred.
ReadGet all status check contextsFetches all required status check contexts for a protected branch; returns an empty list if the branch isn't protected or has no required checks.
ReadList sub-issues for an issueList sub-issues for a specific GitHub issue.
ReadList marketplace subscriptions for authenticated userList GitHub Marketplace subscriptions for the authenticated user.
ReadList stubbed subscriptions for the authenticated userLists the authenticated user's stubbed (test/example data, not live) GitHub Marketplace subscriptions, useful for development or testing.
ReadList team membersLists members of a specific team within an organization, including members of child teams.
ReadList team projectsLists GitHub projects accessible to a specific team within an organization.
ReadList team repositoriesLists repositories accessible to a specific team within a GitHub organization.
ReadList teamsLists teams for a specified GitHub organization.
ReadList teams for the authenticated userLists all teams across all organizations to which the authenticated user belongs, supporting pagination.
ReadList teams assigned to an organization roleLists teams assigned to a specific role within a GitHub organization.
ReadList the people a user followsLists GitHub users that a valid GitHub `username` is following, supporting pagination.
ReadList people the authenticated user followsLists people the authenticated user follows.
ReadList timeline events for an issueLists chronological events (e.g., comments, commits, label changes) for a specific issue in a GitHub repository.
ReadList token access repositoriesLists repositories in an organization that a fine-grained personal access token has access to.
ReadList user projectsRetrieves a list of projects for a specified GitHub user, optionally filtering by state and supporting pagination; the username must be a valid GitHub handle.
ReadList usersRetrieves all GitHub users (individuals and organizations) in chronological order of their sign-up date.
ReadList users blocked by an organizationLists users blocked by a specified GitHub organization.
ReadList users blocked by the authenticated userLists users blocked by the authenticated user, returning an empty list if no users are blocked.
ReadList users assigned org roleLists users assigned to a specific role within a GitHub organization.
ReadList watchersRetrieves a list of users watching a specific repository; the repository must be accessible to the authenticated user.
ReadList workflow run artifactsLists artifacts (e.g., build outputs, test results) for a specific workflow run in a GitHub repository.
ReadList workflow runs for a repositoryLists workflow runs for a repository, allowing filtering by actor, branch, event, status, creation date, check suite ID, or head SHA; the repository must exist and be accessible.
ReadList workflow runs for a workflowLists runs for a specified, existing workflow (identified by ID or filename like `main.yml`) in a GitHub repository, with filtering options.
ReadLookup Enterprise Administrator InvitationLook up a pending enterprise administrator invitation by invitee, enterprise, and role.
ReadLookup GitHub ResourceLookup a GitHub resource by its URL.
ReadLookup nodes by IDsLookup GitHub nodes by their global node IDs.
ReadLookup Organization (GraphQL)Lookup a GitHub organization by login using GraphQL.
ReadLook Up Topic by NameLook up a GitHub topic by name using GraphQL.
ReadList selected repositories for a GitHub Actions organization secretLists repositories within an organization that have been explicitly granted access to a specific GitHub Actions organization secret.
ReadRender a markdown documentRenders Markdown to HTML; for 'gfm' mode, provide 'context' (owner/repo) to correctly link issues, pull requests, and user mentions.
ReadRender Markdown (Raw Mode)Render raw Markdown text to HTML using GitHub's markdown API.
ReadRun GraphQL Relay QueryRun a GitHub GraphQL relay query.
ReadSearch codeSearches code file contents and paths on the default branch of GitHub repositories using a query string; searches only files under 384KB, returns max 1000 results by best match, and is optimized for…
ReadSearch code (all pages)Search code across multiple pages using GitHub's code search API.
ReadSearch commitsFinds commits on GitHub using a query string (q) supporting keywords and qualifiers, with options for sorting and pagination.
ReadSearch commits by author across reposSearches commits across GitHub using the Search API (e.g., by author/email/org/date range) without per-repo scanning.
ReadGitHub GraphQL SearchPerform GitHub GraphQL searches across issues, pull requests, repositories, users, and discussions.
ReadSearch issues and pull requestsSearches GitHub issues and pull requests using a flexible query with qualifiers, sorting, and pagination.
ReadSearch labelsSearches for labels within a GitHub repository by keywords in their names or descriptions.
ReadSearch repositoriesSearches GitHub repositories using a flexible query (keywords, qualifiers) with sorting, ordering, and pagination.
ReadSearch topicsFinds topics on GitHub using keywords and qualifiers with GitHub's search syntax, supporting pagination.
ReadSearch usersSearches for users on GitHub by criteria like username, email, location, followers, or repository associations, using a flexible query string `q`.
ReadValidate credentialValidates GitHub API credentials by checking if they can successfully authenticate.
ReadVerify dev container permissions acceptedVerifies if the authenticated user has accepted permissions for a specific devcontainer configuration in a repository, typically to ensure awareness before a codespace is created or used.
ReadWho Am IReturn the identity (login, name) of the connected GitHub account.
WriteAbort Repository MigrationAbort a repository migration that is queued or in progress. Approval by default
WriteAccept a repository invitationAccepts a PENDING repository invitation that has been issued to the authenticated user. Approval by default
WriteAdd app access restrictionsAdds GitHub Apps to the list of apps allowed to push to a protected branch. Approval by default
WriteAdd a repository collaboratorAdds a GitHub user as a repository collaborator, or updates their permission if already a collaborator; `permission` applies to organization-owned repositories (personal ones default to 'push' and… Approval by default
WriteAdd assignees to an issueAdds assignees to a GitHub issue. Approval by default
WriteAdd email for auth userAdds one or more email addresses (which will be initially unverified) to the authenticated user's GitHub account; use this to associate new emails, noting an email verified for another account will… Approval by default
WriteAdd field to user projectAdd a custom field to a user-owned GitHub Projects V2 project. Approval by default
WriteAdd item to user projectAdd an issue or pull request to a user-owned GitHub project. Approval by default
WriteAdd labels to an issueAdds labels (provided in the request body) to a repository issue; labels that do not already exist are created. Approval by default
WriteAdd org runner labelsAdds new custom labels to an existing self-hosted runner for an organization; existing labels are not removed, and duplicates are not added. Approval by default
WriteAdd or update team membership for a userAdds a GitHub user to a team or updates their role (member or maintainer), inviting them to the organization if not already a member; idempotent, returning current details if no change is made. Approval by default
WriteAdd or update team project permissionsAdds a classic project to a team or updates the team's permission on it. Approval by default
WriteAdd or update team repository permissionsSets or updates a team's permission level for a repository within an organization; the team must be a member of the organization. Approval by default
WriteAdd a repository to an app installationAdds a repository to a GitHub App installation, granting the app access; requires authenticated user to have admin rights for the repository and access to the installation. Approval by default
WriteAdd repo to org secret with selected accessAdds a repository to an existing organization-level GitHub Actions secret that is configured for 'selected' repository access. Approval by default
WriteAdd selected repo to org secretGrants an existing repository access to an existing organization-level Dependabot secret when the secret's visibility is set to 'selected'; the repository must belong to the organization, and the… Approval by default
WriteAdd runner labelsAdds and appends custom labels to a self-hosted repository runner, which must be registered and active. Approval by default
WriteAdd selected repository to an organization secretAdds a repository to an organization secret's access list when the secret's visibility is 'selected'; this operation is idempotent. Approval by default
WriteAdd selected repository to an organization variableGrants a repository access to an organization-level GitHub Actions variable, if that variable's visibility is set to 'selected_repositories'. Approval by default
WriteAdd a selected repository to a user secretGrants a specified repository access to an authenticated user's existing Codespaces secret, enabling Codespaces created for that repository to use the secret. Approval by default
WriteAdd social accounts for the authenticated userAdds one or more social media links (which must be valid, full URLs for platforms supported by GitHub) to the authenticated user's public GitHub profile. Approval by default
WriteAdd status check contextsAdds status check contexts to a protected branch's required status checks. Approval by default
WriteAdd sub-issue to an issueAdd a sub-issue to a parent GitHub issue using GraphQL. Approval by default
WriteAdd team access restrictionsAdds teams to the list of teams with push access to a protected branch. Approval by default
WriteAdd user access restrictionsAdds users to the list of people allowed to push to a protected branch in an organization repository. Approval by default
WriteAdd users to codespaces access for an organizationAdds organization members to the list of users granted Codespaces access billed to the organization. Approval by default
WriteApprove a workflow run for a fork pull requestApproves a workflow run from a forked repository's pull request; call this when such a run requires manual approval due to workflow configuration. Approval by default
WriteAssign an organization role to a teamAssigns an existing organization-level role (identified by `role_id`) to a team (identified by `team_slug`) within a GitHub organization (`org`), provided the organization, team, and role already… Approval by default
WriteAssign an organization role to a userAssigns a specific organization role to a user who is a member or an outside collaborator in a GitHub organization, using a valid role ID. Approval by default
WriteBlock a userBlocks an existing individual GitHub user (not an organization or your own account), preventing them from interacting with your account and repositories. Approval by default
WriteBlock a user from an organizationBlocks a GitHub user from an organization, preventing their contributions, collaboration, and forking of the organization's repositories. Approval by default
WriteCancel a GitHub Pages deploymentCancels an existing, ongoing or queued GitHub Pages deployment for a repository using its `pages_deployment_id`. Approval by default
WriteCancel sponsorshipCancel an active GitHub sponsorship using GraphQL. Approval by default
WriteCancel a workflow runCancels a workflow run in a GitHub repository if it is in a cancellable state (e.g., 'in_progress' or 'queued'). Approval by default
WriteClear Project V2 Item Field ValueClear the value of a field for an item in a GitHub Project V2. Approval by default
WriteClear repository cache by keyDeletes GitHub Actions caches from a repository matching a specific `key` and an optional Git `ref`, used to manage storage or clear outdated/corrupted caches; the action succeeds even if no… Approval by default
WriteClear self-hosted runner org labelsRemoves all custom labels from a self-hosted runner for an organization; default labels (e.g., 'self-hosted', 'linux', 'x64') will remain. Approval by default
WriteClose an issueClose a GitHub issue by setting its state to closed. Approval by default
WriteClose a pull requestCloses an open pull request without merging it. Approval by default
WriteCommit Multiple FilesAtomically create, update, or delete multiple files in a GitHub repository as a single commit. Approval by default
WriteConfigure JIT runner for an orgGenerates a JIT configuration for a GitHub organization's new self-hosted runner to run a single job then unregister; requires admin:org scope and the runner_group_id must exist in the organization. Approval by default
WriteConfigure OIDC subject claim templateSets or updates the OIDC subject claim customization template for an existing GitHub organization by specifying which claims (e.g., 'repo', 'actor') form the OIDC token's subject (`sub`). Approval by default
WriteConvert an organization member to outside collaboratorConverts an existing organization member, who is not an owner, to an outside collaborator, restricting their access to explicitly granted repositories. Approval by default
WriteConvert Pull Request to DraftConverts an open pull request to draft status, indicating it is not ready for review. Approval by default
WriteCreate a blobCreates a Git blob in a repository, requiring content and encoding ('utf-8' or 'base64'). Approval by default
WriteCreate a check runCreates a new check run for a specific commit in a repository, used by external services to report status, detailed feedback, annotations, and images directly within the GitHub UI. Approval by default
WriteCreate a check suiteCreates a new check suite for a specific commit (`head_sha`) in an original repository (not a fork). Approval by default
WriteCreate a codespace for the authenticated userCreates a GitHub Codespace for the authenticated user, requiring a JSON request body with either `repository_id` (integer) or a `pull_request` object (containing `pull_request_number` (integer) and… Approval by default
WriteCreate a codespace from a pull requestCreates a GitHub Codespace for an open pull request in a Codespaces-enabled repository, with options to customize its configuration. Approval by default
WriteCreate a codespace in a repositoryCreates a GitHub Codespace for the authenticated user in a specified repository, which must be accessible and use a valid `devcontainer.json` if `devcontainer_path` is specified. Approval by default
WriteCreate a commitCreates a new commit in a GitHub repository; the `tree` SHA and any `parents` SHAs must already exist in the repository. Approval by default
WriteCreate a commit commentCreates a comment on a specific commit, or on a specific line if `path` and `position` are provided. Approval by default
WriteCreate a commit statusSets a commit's status (e.g., error, failure, pending, success from CI/CD) for a given SHA; max 1000 statuses per SHA/context. Approval by default
WriteCreate a custom organization roleCreates a custom role with defined permissions within a GitHub organization. Approval by default
WriteCreate a deploy keyCreates a deploy key for a repository; the repository must exist and be accessible, and the provided key must be a valid public SSH key. Approval by default
WriteCreate a deploymentCreates a GitHub deployment for an existing repository, targeting a specific ref (branch, tag, or SHA) that must also exist within the repository. Approval by default
WriteCreate a deployment branch policyCreates a deployment branch or tag policy for an existing environment in a GitHub repository, using a Ruby File.fnmatch pattern (where `*` doesn't match `/`) to specify which branches or tags are… Approval by default
WriteCreate a deployment statusCreates a status for an existing deployment, updating its operational state, associated URLs, and description. Approval by default
WriteCreate a discussionCreates a new discussion post on a specific team's page within an organization. Approval by default
WriteCreate a discussion commentCreates a new comment on an existing team discussion within a GitHub organization. Approval by default
WriteCreate a forkCreates a fork of an accessible repository, optionally into a specific organization, with a new name, or copying only the default branch. Approval by default
WriteCreate a gistCreates a new gist on GitHub with provided files, an optional description, and public/secret visibility. Approval by default
WriteCreate a gist commentCreates a new comment on a specified GitHub gist. Approval by default
WriteCreate a GitHub App from a manifestUse this action to complete the GitHub App Manifest flow (step 3 of 3) by exchanging the temporary authorization `code` for the app's full configuration, including credentials and private key. Approval by default
WriteCreate a github pages deploymentCreates a GitHub Pages deployment for a repository using a specified artifact and OIDC token, provided GitHub Pages is enabled and the artifact (containing static assets) is accessible. Approval by default
WriteCreate a github pages siteConfigures or updates GitHub Pages for a repository, setting build type and source; ensure a Pages workflow exists for 'workflow' `build_type`, or `source_branch` exists for 'legacy' or unspecified… Approval by default
WriteCreate a labelCreates a new label in a specified GitHub repository, provided the repository exists and the user has write permissions. Approval by default
WriteCreate a milestoneCreates a milestone in a GitHub repository for tracking progress on issues or pull requests; requires repository existence and user write permissions. Approval by default
WriteCreate an autolink reference for a repositoryCreates a repository autolink to automatically convert text references (e.g., 'TICKET-123') into hyperlinks, using a unique `key_prefix` and a `url_template` that includes `<num>`. Approval by default
WriteCreate an environment variableCreates an encrypted environment variable for a pre-existing environment within a GitHub repository; will fail if the variable name already exists. Approval by default
WriteCreate an issueCreates a new issue in a GitHub repository, requiring the repository to exist and have issues enabled; specific fields like assignees, milestone, or labels may require push access. Approval by default
WriteCreate an issue commentCreates a new comment on an existing GitHub issue or pull request within the specified repository. Approval by default
WriteCreate an organization projectCreates a new classic project board within a specified GitHub organization. Approval by default
WriteCreate an organization repositoryCreates a new repository within a specified GitHub organization, with options for detailed configuration including visibility, features, merge strategies, initial commit, and templates. Approval by default
WriteCreate an organization variableCreates a new, uniquely named GitHub Actions variable for an organization, with configurable repository access visibility (all, private, or selected). Approval by default
WriteCreate an organization webhookCreates a webhook for a GitHub organization to deliver event notifications to a configured URL. Approval by default
WriteCreate a project cardCreates a project card in a GitHub project column (classic projects only). Approval by default
WriteCreate a pull requestCreates a pull request in a GitHub repository, requiring existing `base` and `head` branches; `title` or `issue` must be provided. Approval by default
WriteCreate a referenceCreates a NEW Git reference (branch or tag) in a repository. Approval by default
WriteCreate a registration token for an organizationGenerates a temporary (one-hour) registration token to add a new self-hosted runner to an organization for GitHub Actions. Approval by default
WriteCreate a registration token for a repositoryGenerates a time-limited token required to register a new self-hosted runner with a specific repository. Approval by default
WriteCreate a releaseCreates a release in a GitHub repository for a specified tag; the tag must be unique for published releases, and if a `discussion_category_name` is given, it must already exist. Approval by default
WriteCreate a remove token for an organizationGenerates a token, valid for one hour, to authenticate removing a self-hosted runner from an organization. Approval by default
WriteCreate a remove token for a repositoryGenerates a temporary (one-hour validity) token required to unregister and remove a self-hosted runner from a repository. Approval by default
WriteCreate a reply for a review commentPosts a reply to a specific review comment on a GitHub pull request, requiring the repository, pull request, and original comment to exist, and a non-empty reply body. Approval by default
WriteCreate a repository dispatch eventTriggers a GitHub Actions workflow or a webhook on a repository by creating a repository dispatch event, allowing programmatic triggering of workflows based on events outside of GitHub. Approval by default
WriteCreate a repository for the authenticated userCreates a new repository for the authenticated user, optionally within an organization if `team_id` is specified. Approval by default
WriteCreate a repository from an unpublished codespacePublishes the specified codespace to a new repository, using the codespace's current state as the initial commit. Approval by default
WriteCreate a repository projectCreates a new GitHub Projects V2 project board linked to a specified repository. Approval by default
WriteCreate a repository rulesetCreates a uniquely named ruleset for a repository, defining rules for branches or tags with specified enforcement, conditions, and bypass actors. Approval by default
WriteCreate a repository using a templateCreates a new repository from an existing template repository; the authenticated user must have access to the template and, if creating in an organization, repository creation permissions within it. Approval by default
WriteCreate a repository variableCreates a new, unencrypted variable in a repository for GitHub Actions workflows; fails if a variable with the same name already exists. Approval by default
WriteCreate a repository webhookCreates a webhook for a specified repository; requires admin permissions on the repository. Approval by default
WriteCreate a review comment for a pull requestCreates a review comment on a pull request's diff, targeting a specific line, range of lines, an entire file, or replying to an existing comment. Approval by default
WriteCreate a review for a pull requestCreates a pull request review, allowing approval, change requests, or comments; `body` is required if `event` is `REQUEST_CHANGES` or `COMMENT`, and omitting `event` makes the review `PENDING`. Approval by default
WriteCreate a scoped access tokenExchanges a user-to-server token for a new, fine-grained scoped access token for a GitHub App, requiring `client_id`, `access_token`, either `target` or `target_id`, and at least one permission; for… Approval by default
WriteCreate a dependency snapshotCreates a snapshot of a repository's dependencies to populate the GitHub dependency graph and enable security alerts; `sha` must be a 40-character commit ID, `ref` a fully qualified Git reference… Approval by default
WriteCreate a tag objectCreates an annotated Git tag object in a repository, pointing to an existing Git object (commit, tree, or blob) defined by its SHA and ensuring the `type` field correctly specifies the object's type. Approval by default
WriteCreate a teamCreates a new team in an organization, optionally with maintainers, repositories, specific privacy, notification settings, or a parent team; if `parent_team_id` is given, `privacy` must be 'closed'. Approval by default
WriteCreate a temporary private forkCreates a temporary private fork of the specified repository to address a security vulnerability, linking the fork to a GHSA ID that must be specifically associated with this repository; the fork… Approval by default
WriteCreate a treeCreates a new Git tree object in a repository, defining file/directory structure by specifying tree entries, optionally building on a `base_tree` SHA; all provided SHAs must be valid. Approval by default
WriteCreate a user projectCreates a new GitHub Projects V2 project board for the authenticated user to organize and track issues, pull requests, and notes. Approval by default
WriteCreate a workflow dispatch eventManually triggers a GitHub Actions workflow identified by `workflow_id` at a given `ref`, if the workflow is configured to accept `workflow_dispatch` events. Approval by default
WriteCreate a branchCreates a new branch in a GitHub repository pointing to a specified commit. Approval by default
WriteCreate commit signature protectionEnables commit signature protection for a specified branch, requiring all new commits to be signed. Approval by default
WriteCreate a custom deployment protection rule on an environmentEnables a custom deployment protection rule for an existing environment in a repository by linking a configured GitHub App (via `integration_id`) to control deployments. Approval by default
WriteCreate draft item for user projectCreates a draft issue item in a user-owned GitHub ProjectsV2. Approval by default
WriteCreate issue typeCreate a new issue type for a GitHub organization. Approval by default
WriteCreate JIT runner config for repoGenerates a temporary Just-In-Time (JIT) configuration for a new self-hosted GitHub Actions runner for a repository; any specified non-default `runner_group_id` must be an existing runner group… Approval by default
WriteCreate or update an environmentCreates a new environment or updates an existing one in a GitHub repository, allowing configuration of deployment protection rules such as wait timers and reviewers; ensure `environment_name` is… Approval by default
WriteCreate or update an environment secretCreates or updates an environment secret with an `encrypted_value` that was encrypted using the public key identified by `key_id` for the specified environment. Approval by default
WriteCreate or update an organization secretCreates or updates an organization secret for GitHub Actions, requiring its value to be pre-encrypted via LibSodium using the organization's public key. Approval by default
WriteCreate or update a repository secretCreates or updates a GitHub Actions secret within a specific repository; use `encrypted_value` and `key_id` to set or change its value. Approval by default
WriteCreate or update a secret for the authenticated userCreates or updates a Codespaces secret for the authenticated user; `encrypted_value` must be encrypted with the public key (ID: `key_id`) from GitHub's 'Get public key for the authenticated user'… Approval by default
WriteCreate or update custom properties for an organizationCreates new custom property schemas or updates existing ones in bulk for a specified organization; each property definition must include `property_name` and `value_type`. Approval by default
WriteCreate or update a custom property for an organizationCreates a new custom property (name must be unique for creation) or updates an existing one for an organization to define metadata for its repositories. Approval by default
WriteCreate or update file contentsCreates a new file or updates an existing file in a GitHub repository; SHA can be provided to validate file updates, automatically fetched if not provided. Approval by default
WriteCreate or Update GitHub Pages SiteEnable or update GitHub Pages configuration for a repository. Approval by default
WriteCreate or update repo secret with encrypted valueCreates or updates a Dependabot secret in a repository using an `encrypted_value` (pre-encrypted with LibSodium using the repository's Dependabot public key) and its corresponding `key_id`. Approval by default
WriteCreate reaction for a commit commentCreates an emoji reaction for a commit comment; if the user has already reacted with the same content, details of the existing reaction are returned. Approval by default
WriteCreate reaction for an issueCreates a reaction for a specified issue within a GitHub repository. Approval by default
WriteCreate reaction for an issue commentCreates a reaction for a specific comment on an issue within a GitHub repository. Approval by default
WriteCreate reaction for a pull request review commentAdds a specified reaction to a pull request review comment within a GitHub repository. Approval by default
WriteCreate reaction for a releaseCreates an emoji reaction for a specific, existing release in a GitHub repository. Approval by default
WriteCreate reaction for a team discussionCreates a reaction for a team discussion within a GitHub organization. Approval by default
WriteCreate reaction for a team discussion commentAdds a reaction to a team discussion comment, requiring the specified organization, team, discussion, and comment to exist. Approval by default
WriteCreate repositoryCreates a new repository for the authenticated user. Approval by default
WriteCreate sponsorshipStart a new GitHub sponsorship or reactivate a past sponsorship using GraphQL. Approval by default
WriteCreate Sponsors TierCreate a new payment tier for your GitHub Sponsors profile using GraphQL. Approval by default
WriteCreate or Update Organization Secret with LibSodiumCreates or updates a Dependabot organization secret, requiring the secret value to be pre-encrypted with LibSodium using the organization's public key obtained from the 'Get an organization public… Approval by default
WriteCreate user listCreate a new user list on GitHub. Approval by default
WriteCreate view for user projectCreate a new view in a user-owned GitHub project (Projects V2). Approval by default
WriteDecline a repository invitationDeclines a specific, pending repository invitation for the authenticated user, identified by its `invitation_id`. Approval by default
WriteDelete access restrictionsRemoves all user, team, and app-based access restrictions from a protected branch. Approval by default
WriteDelete admin branch protectionRemoves admin enforcement from a protected branch (branch name cannot contain wildcard characters) in a repository. Approval by default
WriteDelete a fileDeletes a file by path from a GitHub repository. Approval by default
WriteDelete a package version for the authenticated userDeletes an existing package version associated with the authenticated user. Approval by default
WriteDelete an app authorizationDeletes an OAuth application grant for a user, which revokes ALL OAuth tokens and their associated authorizations for the application. Approval by default
WriteDelete an app tokenRevokes a single OAuth access token for an OAuth App or GitHub App with OAuth authorization. Approval by default
WriteDelete a referenceDeletes a Git reference from a repository; 'ref' must be fully qualified (e.g., 'refs/heads/branch' or 'refs/tags/tag'). Approval by default
WriteDelete a releasePermanently deletes a specific release, its assets, and potentially its associated Git tag from a repository. Approval by default
WriteDelete a release assetDeletes a specific release asset from a GitHub repository; this action is idempotent. Approval by default
WriteDelete a release reactionDeletes a reaction from a GitHub release, provided the repository, release, and reaction exist. Approval by default
WriteDelete a repositoryPermanently deletes the specified repository; this is a destructive, irreversible action that requires admin privileges for the repository. Approval by default
WriteDelete a repository invitationDeletes an active repository invitation, permanently revoking a user's access to collaborate on the specified repository. Approval by default
WriteDelete a repository rulesetPermanently deletes a repository ruleset. Approval by default
WriteDelete a repository secretDeletes a named GitHub Actions secret from a specified repository; this operation is destructive and idempotent, and requires the repository to exist. Approval by default
WriteDelete a repository subscriptionDeletes the authenticated user's subscription to a specified repository if it exists, effectively 'unwatching' it. Approval by default
WriteDelete a repository variableDeletes a named variable (e.g., for GitHub Actions workflows) from a repository; the repository and the variable must already exist. Approval by default
WriteDelete a repository webhookDeletes a specific webhook from a repository. Approval by default
WriteDelete a review comment for a pull requestDeletes a specific pull request review comment. Approval by default
WriteDelete an artifactDeletes a GitHub artifact by its ID within a repository, typically resulting in an empty response (HTTP 204 No Content) on success. Approval by default
WriteDelete a secret for the authenticated userDeletes an existing Codespaces secret for the authenticated user by `secret_name`. Approval by default
WriteDelete a self hosted runner from an organizationForces the removal of a self-hosted runner from a GitHub organization. Approval by default
WriteDelete a self hosted runner from a repositoryRemoves a specific self-hosted runner (by `runner_id`) from a repository, if registered there; this is idempotent. Approval by default
WriteDelete a teamDeletes a team (and any child teams) from an organization. Approval by default
WriteDelete a thread subscriptionCall this to mute a specific notification thread by deleting the user's subscription; notifications may still occur if the user is @mentioned, comments, or due to repository watch settings. Approval by default
WriteDelete an autolink reference from a repositoryDeletes a specific autolink reference (which automatically links external resource IDs like JIRA-123 to URLs) from the specified repository. Approval by default
WriteDelete a workflow runDeletes a specific workflow run from a repository. Approval by default
WriteDelete branch protectionRemoves all protection rules from a specific branch in a GitHub repository; the branch must currently have protection rules enabled. Approval by default
WriteDelete a code scanning analysis from a repositoryDeletes a specific code scanning analysis by its ID from a repository; `confirm_delete` must be `true` if it's the last analysis of its type for a given tool and reference to prevent data loss. Approval by default
WriteDelete a codespace for the authenticated userDeletes a specific codespace owned by the authenticated user; this is a destructive action and the codespace must exist. Approval by default
WriteDelete a commit commentDeletes a specific commit comment, identified by its `comment_id`, from the specified repository; the comment must exist. Approval by default
WriteDelete a commit comment reactionDeletes a reaction from a commit comment in a GitHub repository. Approval by default
WriteDelete commit signature protectionDisables GPG commit signature protection for a specific branch in a GitHub repository, meaning commits pushed to this branch no longer require GPG signing. Approval by default
WriteDelete a custom organization roleDeletes a custom organization role (which should not be actively assigned) by its ID; a 204 No Content response indicates success. Approval by default
WriteDelete dependabot secret by nameDeletes a specific Dependabot secret, identified by its name, from a given repository if both the repository and secret exist. Approval by default
WriteDelete a deploy keyDeletes a specific deploy key from a repository; to change a key's properties or access scope, the existing key must be deleted and a new one created. Approval by default
WriteDelete a deploymentPermanently deletes a specified *inactive* deployment from a repository. Approval by default
WriteDelete a deployment branch policyDeletes a specific deployment branch or tag policy, identified by its ID, from a given environment within a repository. Approval by default
WriteDelete a discussionDeletes a specific team discussion, identified by its number, from an organization's team. Approval by default
WriteDelete a discussion commentDeletes a specific comment from an existing team discussion within an organization, provided the specified organization, team, discussion, and comment all exist. Approval by default
WriteDelete authenticated user email addressSends an empty request body to `DELETE /user/emails` to attempt deletion of user email addresses; the API typically requires specific emails, so outcome may vary. Approval by default
WriteDelete an environmentDeletes an existing deployment environment from an existing repository. Approval by default
WriteDelete an environment secretDeletes an existing and accessible secret from a specified environment within a GitHub repository, returning an empty dictionary on success or error details otherwise. Approval by default
WriteDelete an environment variableDeletes a named environment variable from a specified, existing environment within a GitHub repository. Approval by default
WriteDelete a gistPermanently deletes an existing GitHub gist, specified by its `gist_id`; this action is destructive and cannot be undone. Approval by default
WriteDelete a gist commentDeletes a specific comment from a GitHub Gist using its `gist_id` and `comment_id`. Approval by default
WriteDelete GitHub Actions cache by IDDeletes a specific GitHub Actions cache from a repository using its unique `cache_id`. Approval by default
WriteDelete a GitHub Pages siteDeletes the GitHub Pages site for the specified repository; completes without error if no site is currently enabled. Approval by default
WriteDelete an issue commentPermanently deletes a specific comment by its ID from an issue or pull request, if the repository exists and the comment ID is valid. Approval by default
WriteDelete an issue comment reactionDeletes a reaction from an issue comment in a repository; the repository, comment, and reaction must exist. Approval by default
WriteDelete an issue reactionPermanently removes a specific reaction from an issue in a GitHub repository. Approval by default
WriteDelete a labelPermanently removes an existing label from a repository. Approval by default
WriteDelete a milestoneDeletes the specified milestone if it exists; this operation is idempotent, typically returning a 404 if the milestone is not found or already deleted. Approval by default
WriteDelete an organizationDeletes a GitHub organization and its repositories; this is a destructive action and the organization name will be unavailable for reuse for approximately 90 days. Approval by default
WriteDelete an organization secretPermanently deletes a secret from a GitHub organization, making it inaccessible to GitHub Actions workflows or other tools. Approval by default
WriteDelete an organization variableDeletes a named GitHub Actions variable from a specified organization. Approval by default
WriteDelete an organization webhookDeletes a specific webhook, identified by `hook_id`, from an existing organization. Approval by default
WriteDelete a codespace from the organizationPermanently deletes a specific codespace belonging to a member of the specified organization. Approval by default
WriteDelete a package for an organizationDeletes a specific package in an organization; cannot delete public packages with over 5,000 downloads. Approval by default
WriteDelete a package for the authenticated userPermanently deletes a specific package owned by the authenticated user; public packages downloaded over 5,000 times cannot be deleted via this API. Approval by default
WriteDelete package versionDelete a package version using GitHub GraphQL API. Approval by default
WriteDelete package version for an organizationDeletes a specific package version within an organization; requires admin permissions for packages with over 5,000 downloads. Approval by default
WriteDelete package version for a userPermanently and irreversibly deletes a specific version of a package owned by the specified user. Approval by default
WriteDelete a pending review for a pull requestDeletes a pending (unsubmitted) review from a pull request; this is only possible if the review has not yet been submitted. Approval by default
WriteDelete a projectDeletes the specified GitHub project (Projects V2) using the GraphQL API. Approval by default
WriteDelete a project field (column)Deletes a project field (column) from a GitHub Projects V2 project using the GraphQL API. Approval by default
WriteDelete project item for userDelete a project item for a user in GitHub Projects V2. Approval by default
WriteDelete a pull request comment reactionDeletes a specific reaction from a pull request review comment, provided the comment and reaction exist on that comment within the specified repository. Approval by default
WriteDelete pull request review protectionDisables the requirement for pull request reviews before merging for a specific, existing branch in an existing repository; this action is idempotent and will succeed even if the protection is not… Approval by default
WriteDelete repo codespace secret by nameDeletes a specific Codespace secret from a repository by its name; this action is idempotent and will succeed even if the secret doesn't exist. Approval by default
WriteDelete social accounts for the authenticated userDeletes currently linked social media account URLs from the authenticated user's GitHub profile. Approval by default
WriteDelete team discussion comment reactionDeletes a reaction from a team discussion comment, given the organization name, team slug, discussion number, comment number, and reaction ID. Approval by default
WriteDelete team discussion reactionPermanently deletes a specific reaction from a team discussion within an organization. Approval by default
WriteDelete User ListDelete a GitHub user list using GraphQL. Approval by default
WriteDelete a package for a userDeletes a package owned by the specified user, requiring admin permissions for the authenticated user; deletion of public packages with over 5,000 downloads may require GitHub support. Approval by default
WriteDelete workflow run logsDeletes all logs for a specific workflow run in a GitHub repository, provided the repository and run exist. Approval by default
WriteDisable a custom protection rule for an environmentDisables a specific, currently active custom deployment protection rule for an existing environment within a GitHub repository. Approval by default
WriteDisable a workflowDisables a specified workflow (by ID or filename) in a given GitHub repository, preventing new automatic triggers; any in-progress runs will continue. Approval by default
WriteDisable private vulnerability reporting for a repositoryDisables private vulnerability reporting for an existing GitHub repository, preventing direct private vulnerability reports to maintainers via GitHub's interface for this repository. Approval by default
WriteDisable Repository Actions In OrgRemoves a repository from the list of selected repositories enabled for GitHub Actions in an organization. Approval by default
WriteDismiss a review for a pull requestDismisses an APPROVED or CHANGES_REQUESTED review on a pull request with a mandatory explanatory message. Approval by default
WriteEnable a workflowReactivates a currently disabled GitHub Actions workflow within a repository using its workflow ID or filename. Approval by default
WriteEnable GitHub actions in selected repositoriesSets the specific repositories that can use GitHub Actions within an organization by replacing the current list; only applies if the organization's Actions policy is 'selected repositories'. Approval by default
WriteEnable private vulnerability reporting for a repositoryEnables private vulnerability reporting for a repository, allowing security researchers to privately submit vulnerability reports to maintainers. Approval by default
WriteEnable repo for Github ActionsAdds a repository to the list of selected repositories enabled for GitHub Actions in an organization. Approval by default
WriteEncrypt and update dev secretCreates or updates a repository's development environment secret using an `encrypted_value` and its corresponding `key_id`; the secret must be pre-encrypted with the repository's Codespaces public… Approval by default
WriteEncrypt org dev env secretCreates or updates an organization's GitHub Codespaces secret using an encrypted value and its corresponding public key ID. Approval by default
WriteExport a codespace for the authenticated userTriggers an export of a user's specified codespace, automatically stopping it if active, and returns its export status and download URL. Approval by default
WriteFollow Organization (GraphQL)Follow a GitHub organization using GraphQL. Approval by default
WriteFollow a userAllows the authenticated user to follow the GitHub user specified by `username`; this action is idempotent and the user cannot follow themselves. Approval by default
WriteFollow User (GraphQL)Follow a GitHub user using GraphQL. Approval by default
WriteForce cancel a workflow runForcefully cancels a queued or in-progress GitHub Actions workflow run, bypassing conditions like always() that would otherwise continue execution. Approval by default
WriteFork a gistForks a specified public gist, creating a copy under the authenticated user's account. Approval by default
WriteLock an issueLocks an existing GitHub issue's conversation, preventing further comments; an optional reason can be specified. Approval by default
WriteManage access control for organization codespacesSets the Codespaces access control policy for a GitHub organization, determining which members can use them. Approval by default
WriteManage custom properties for org reposCreates or updates values for an organization's predefined custom properties across multiple repositories (up to 30). Approval by default
WriteManage issue blocking dependencyAdd or remove an issue that blocks another issue in the same repository. Approval by default
WriteMark a thread as doneMarks the GitHub notification thread (identified by `thread_id`) as done or read for the authenticated user, effectively archiving it. Approval by default
WriteMark a thread as readMarks an existing GitHub notification thread, identified by its `thread_id`, as read. Approval by default
WriteMark notifications as readMarks notifications as read or unread, optionally for those updated at or before a `last_read_at` timestamp. Approval by default
WriteMark pull request ready for reviewMarks a draft pull request as ready for review using GitHub GraphQL API, transitioning it from draft to reviewable state. Approval by default
WriteMark repository notifications as readMarks notifications in a repository as read; if 'last_read_at' is specified, notifications updated after this timestamp are not marked as read. Approval by default
WriteMerge a branchMerges a head branch or commit SHA into a base branch in a repository; fails if there are merge conflicts requiring manual resolution. Approval by default
WriteMerge a pull requestMerges an open and mergeable pull request in a repository. Approval by default
WritePing an organization webhookSends a 'ping' event to a specified, existing organization webhook to test its configuration and ensure it correctly receives events. Approval by default
WritePing a repository webhookPings an existing webhook on a repository to test its configuration and reachability by GitHub. Approval by default
WritePrivately report a security vulnerabilityPrivately reports a security vulnerability to a repository's maintainers. Approval by default
WritePublish Sponsors Tier (GraphQL)Publish a draft GitHub Sponsors tier using GraphQL. Approval by default
WriteRedeliver a delivery for an organization webhookRedelivers a specific webhook delivery for a webhook within an organization, to resend an event that previously failed or was not processed. Approval by default
WriteRedeliver a delivery for a repository webhookRedelivers a specific, previously made webhook delivery (`delivery_id`) for a repository's webhook (`hook_id`). Approval by default
WriteRemove a custom property for an organizationDeletes a custom property, specified by `custom_property_name`, from an existing organization (`org`) for which the property is currently defined, preventing its future assignment to repositories. Approval by default
WriteRemove a label from an issueRemoves a label currently applied to a specific issue in a repository. Approval by default
WriteRemove all labels from an issueRemoves all labels from a specified issue in a GitHub repository; this operation is idempotent. Approval by default
WriteRemove all organization roles for a teamRevokes all organization roles for a team in an organization; this is destructive and succeeds even if the team initially has no roles. Approval by default
WriteRemove all organization roles for a userRevokes all assigned organization-level roles from a specified user (who must be a member of the organization) within a GitHub organization, without removing the user from the organization or… Approval by default
WriteRemove an organization memberRemoves a member from a GitHub organization. Approval by default
WriteRemove an organization role from a teamRevokes an organization role that a team currently possesses within an organization. Approval by default
WriteRemove an organization role from a userRemoves a custom organization role from a user within a GitHub organization, provided the organization exists, the user is a member, and the role_id corresponds to a valid custom role in that… Approval by default
WriteRemove app access restrictionsRemoves all GitHub App access restrictions from a protected branch in a repository; the branch must have protection rules configured, and this action does not alter user or team restrictions. Approval by default
WriteRemove a project from a teamRemoves a project from a team within an organization; this action requires the project to be currently associated with the team. Approval by default
WriteRemove a repository collaboratorRemoves a collaborator from a specified GitHub repository, provided the repository exists and the user is an existing collaborator. Approval by default
WriteRemove a repository from an app installationRemoves a repository from a GitHub App installation for the authenticated user, given a valid `installation_id` and the `repository_id` of a repository currently linked to that installation; this… Approval by default
WriteRemove a repository from a teamDisassociates a repository from a team; team members may lose access permissions, but the repository and team are not deleted. Approval by default
WriteRemove a selected repository from a user secretRemoves a selected repository's access to a user's Codespaces secret; the secret must exist and the repository must have previously been granted access. Approval by default
WriteRemove assignees from an issueRemoves specified assignees from a GitHub issue; requires push access, and invalid removal attempts are silently ignored. Approval by default
WriteRemove custom label from repo runnerRemoves a custom label from a repository's self-hosted runner; this operation is idempotent. Approval by default
WriteRemove custom label from self hosted runnerRemoves a currently assigned custom label (`name`) from a self-hosted runner (`runner_id`) in an organization (`org`). Approval by default
WriteRemove custom labels from self hosted repo runnerRemoves all custom labels from a self-hosted runner registered at the repository level, leaving only its default labels and any labels inherited from its runner group or organization. Approval by default
WriteRemove interaction restrictions for an organizationRemoves all interaction restrictions from public repositories in the specified GitHub organization, allowing all users to resume interactions. Approval by default
WriteRemove interaction restrictions for a repositoryRemoves all interaction restrictions for a repository, enabling all users to comment, open issues, and create pull requests by lifting any existing temporary interaction limits. Approval by default
WriteRemove org dev env secret by nameDeletes a GitHub Codespaces secret from an organization by its name; this operation is idempotent. Approval by default
WriteRemove org secret by namePermanently removes a specific Dependabot secret, by its `secret_name`, from the GitHub `org`, making it unavailable to Dependabot for that organization. Approval by default
WriteRemove outside collaborator from an organizationRemoves a user, who must be an outside collaborator, from the specified GitHub organization, revoking their access to all its repositories. Approval by default
WriteRemove public org membershipRemoves the authenticated user's public organization membership, making it private. Approval by default
WriteRemove user public repo interaction restrictionsRemoves all interaction restrictions (limitations on comments, issues, or pull requests) from all public repositories owned by the authenticated user. Approval by default
WriteRemove repository from organization dev environment secretRemoves a repository's access to an organization-level Codespaces secret, if it was previously granted. Approval by default
WriteRemove selected repo from org secretRevokes a specific repository's access to an organization-level Dependabot secret, applicable only when the secret has 'selected' visibility and the specified repository currently has access. Approval by default
WriteRemove requested reviewers from a pull requestRemoves currently assigned user logins and/or team slugs from a GitHub pull request's list of requested reviewers. Approval by default
WriteRemove review requestRemoves requested reviewers from a pull request. Approval by default
WriteRemove selected repository from an organization secretRemoves a specific repository's access to an organization-level secret; the repository must have been previously granted access to this secret. Approval by default
WriteRemove selected repository from an organization variableRemoves a repository's access to an organization variable that has 'selected' visibility. Approval by default
WriteRemove status check contextsRemoves specified status check contexts from a protected branch's required status checks. Approval by default
WriteRemove status check protectionRemoves status check protection from a branch, disabling required status checks for merging pull requests; will only have an effect if status check protection is currently configured on the branch. Approval by default
WriteRemove team access restrictionsRemoves specified teams from push access to a protected branch. Approval by default
WriteRemove team membershipRemove team membership for a user in an organization. Approval by default
WriteRemove team membership for a userRemoves a user from a specific team within an organization. Approval by default
WriteRemove user access restrictionsRemoves specified users from the list of people allowed to push to a protected branch. Approval by default
WriteRemove users from codespaces access for an organizationRemoves selected users from GitHub Codespaces billing access for an existing organization. Approval by default
WriteRename a branchRenames an existing branch in a GitHub repository; the new name must be unique and adhere to GitHub's naming conventions, and the current branch name cannot contain wildcard characters. Approval by default
WriteReopen an issueReopens a closed GitHub issue by changing its state to 'open' with state_reason 'reopened'. Approval by default
WriteReopen Pull RequestReopens a previously closed pull request by setting its state to 'open'. Approval by default
WriteReplace all repository topicsReplaces all topics of a repository. Approval by default
WriteReplace org secret visibility to selectedReplaces the list of repositories that can access a Dependabot organization secret when the secret's visibility is already set to 'selected'. Approval by default
WriteReplace repository access for an org Codespaces secretReplaces the list of repositories that can access an organization-level Codespaces secret. Approval by default
WriteRequest a github pages buildManually triggers a GitHub Pages build for a repository if GitHub Pages is enabled, useful for deployments not automatically built or for retrying failed builds. Approval by default
WriteRequest reviewers for a pull requestRequests reviewers for a specific pull request identified by owner, repository, and pull request number. Approval by default
WriteAdd reviewers to a specific pull requestAdds reviewers to a specific pull request identified by owner, repo, and pull_number. Approval by default
WriteRerequest a check runTriggers a re-run of a specific check run in a GitHub repository, resetting its status to 'queued', clearing its conclusion, and triggering the `check_run` webhook with `rerequested` action. Approval by default
WriteRerequest a check suiteTriggers a new run of an existing check suite within a repository, resetting its status to 'queued', clearing its conclusion, and triggering the `check_suite` webhook with `rerequested` action. Approval by default
WriteRe-run a job from a workflow runRe-runs a specific job and any dependent jobs from a GitHub Actions workflow run in the specified repository, optionally enabling debug logging. Approval by default
WriteRerun a workflowRe-runs a specific GitHub Actions workflow run identified by its owner, repository, and run ID, optionally enabling debug logging. Approval by default
WriteRerun failed jobs from a workflow runRe-runs all failed jobs and their dependent jobs from a specified workflow run if the run contains previously failed jobs. Approval by default
WriteReset a tokenInvalidates the provided OAuth `access_token` and generates a new one for the GitHub OAuth App identified by `client_id`. Approval by default
WriteRestore a package for an organizationRestores a package in an organization, provided it was deleted within the last 30 days. Approval by default
WriteRestore a package for a userRestores a user-owned package previously deleted from GitHub Packages, if restorable under GitHub's data retention policy (typically within 30 days of deletion). Approval by default
WriteRestore a package for the authenticated userRestores a package deleted by the authenticated user within the last 30 days, if its namespace and version are still available. Approval by default
WriteRestore a package version for the authenticated userRestores a package version that was deleted by the authenticated user within the last 30 days. Approval by default
WriteRestore package version for an organizationRestores a package version for an organization, provided it was deleted within the last 30 days. Approval by default
WriteRestore package version for a userRestores a specific, user-owned package version if it was deleted within the last 30 days and its original namespace and version name are still available. Approval by default
WriteRetire Sponsors TierRetire a published payment tier from your GitHub Sponsors profile using GraphQL. Approval by default
WriteReview access with personal tokenApproves or denies a pending fine-grained personal access token request for organization resources; must be performed by a GitHub App. Approval by default
WriteReview Custom Deployment Rules For Workflow RunApproves or rejects pending custom deployment protection rules for a workflow run. Approval by default
WriteReview pending deployments for a workflow runApproves or rejects pending deployments for a specific workflow run that are in a 'waiting' state within specified, configured environments. Approval by default
WriteReview PAT Requests in BulkApproves or denies multiple fine-grained personal access token requests for an organization in bulk. Approval by default
WriteRevoke an installation access tokenRevokes the GitHub App's current installation access token, immediately invalidating it for API authentication. Approval by default
WriteRun GraphQL QueryRun an arbitrary GitHub GraphQL v4 query or mutation. Approval by default
WriteSet admin branch protectionEnables administrator enforcement on a branch, making existing protection rules also apply to administrators; branch protection rules must already be configured. Approval by default
WriteSet app access restrictionsReplaces the list of GitHub Apps permitted to push to a protected branch. Approval by default
WriteSet a repository subscriptionSets the authenticated user's notification subscription for a repository. Approval by default
WriteSet a thread subscriptionSets whether a GitHub notification thread is ignored (muted) or unignored (unmuted), for a `thread_id` that must identify an existing notification thread. Approval by default
WriteSet default workflow permissions for an organizationUpdates an organization's default GITHUB_TOKEN permissions for workflows and whether GitHub Actions can approve pull requests; note that allowing Actions to approve pull requests… Approval by default
WriteSet default workflow permissions for a repositorySets the default permissions for the GITHUB_TOKEN within a repository and configures whether GitHub Actions can approve pull requests. Approval by default
WriteSet primary email visibilitySets the visibility ('public' or 'private') of the authenticated user's primary email address on GitHub, if one is configured. Approval by default
WriteSet GitHub Actions permissions for an organizationSets the GitHub Actions permissions policy for an organization, specifying which repositories can run Actions and which actions/workflows are allowed; if 'selected' is chosen for either, manage the… Approval by default
WriteSet github actions permissions for a repositorySets GitHub Actions permissions for a repository, enabling/disabling Actions and defining the policy for allowed actions and reusable workflows. Approval by default
WriteSet interaction restrictions for an organizationLimits interactions (comments, new issues, PRs) in an organization's public repositories by user type and duration, typically to mitigate high traffic or unwanted activity. Approval by default
WriteSet interaction restrictions for a repositoryTemporarily limits which GitHub users (e.g., existing_users, contributors_only) can interact (comment, open issues, create pull requests) in a repository for a specified duration. Approval by default
WriteSet interaction restrictions for your public repositoriesSets or updates temporary interaction restrictions for all public repositories owned by the authenticated user, overriding any repository-specific limits. Approval by default
WriteSet labels for an issueReplaces all existing labels on a GitHub issue with a new set of labels. Approval by default
WriteSet custom OIDC subject claim templateSets the OpenID Connect (OIDC) subject claim template for a GitHub repository, allowing use of the default template or a custom one defined by `include_claim_keys` if `use_default` is `false`. Approval by default
WriteSet allowed actions and workflows for an organizationSets the GitHub Actions permissions for an existing organization, specifying allowed GitHub-owned actions, verified creator actions, and action/workflow patterns from public repositories. Approval by default
WriteSet custom labels for a self-hosted runner for an organizationSets the custom labels for a self-hosted runner in an organization; this operation does not affect default system-assigned labels (e.g., 'self-hosted', 'linux', 'x64'). Approval by default
WriteSet repo allowed actionsSets allowed GitHub Actions and reusable workflows for a repository, managing permissions for GitHub-owned, verified creator, or specific pattern-matched actions/workflows (note: `patterns_allowed`… Approval by default
WriteSet custom labels for repo runnerReplaces all custom labels for a specific self-hosted runner in a repository; an empty list for `labels` removes all existing custom labels. Approval by default
WriteSet selected repositories for an organization variableReplaces the list of repositories that can access an organization-level variable; the variable's visibility must be 'selected'. Approval by default
WriteSet selected repositories for an organization secretReplaces the list of repositories that can access an organization secret; only effective if the secret's visibility is 'selected'. Approval by default
WriteSet selected repositories for a user secretDefines the list of repositories permitted to access a specific Codespaces secret for the authenticated user. Approval by default
WriteSet status check contextsReplaces required status check contexts for a protected branch, requiring admin permissions; an empty `contexts` array removes all checks. Approval by default
WriteSet team access restrictionsReplaces the list of teams with push access to a protected branch. Approval by default
WriteSet user access restrictionsReplaces the list of users with push access to a protected branch in an organization repository. Approval by default
WriteSet User Interaction Limit (GraphQL)Set interaction limits on a user's public repositories using GraphQL. Approval by default
WriteSet workflow access level outside repositorySets the access level for workflows outside a repository to use actions and reusable workflows within that repository. Approval by default
WriteStar a gistStars a GitHub gist identified by `gist_id`; this action is idempotent and returns a 204 No Content status upon success, even if the gist is already starred. Approval by default
WriteStar a specified repository (requires owner and repo)Stars a specified repository (identified by owner and repo name) for the authenticated user; this action is idempotent and succeeds even if the repository is already starred. Approval by default
WriteStart a codespace for the authenticated userInitiates the startup process for an existing GitHub Codespace (identified by `codespace_name`) if it's in a startable state like 'Available' or 'Stopped'. Approval by default
WriteStop a codespace for an organization userStops a running codespace for an organization member. Approval by default
WriteStop a codespace for the authenticated userStops a running or available Codespace for the authenticated user, pausing its execution and billing. Approval by default
WriteSubmit a review for a pull requestFinalizes a pending pull request review (identified by `review_id`) with a required `event` (APPROVE, REQUEST_CHANGES, COMMENT) and an optional `body`. Approval by default
WriteSync a fork branch with the upstream repositorySynchronizes a branch in a forked GitHub repository with its upstream counterpart, assuming the repository is a fork, the branch exists, an upstream is configured, and the merge is conflict-free. Approval by default
WriteTest the push repository webhookTriggers a simulated push event to test a repository's push webhook; a test event is only delivered if the webhook is subscribed to 'push' events, otherwise, it returns 204 No Content without… Approval by default
WriteTransfer a repositoryInitiates a repository transfer to a new owner (who must accept the request); if the new owner is an organization, it must be configured to allow transfers. Approval by default
WriteUnblock a userUnblocks a GitHub user, provided they are currently blocked by the authenticated user. Approval by default
WriteUnblock a user from an organizationUnblocks a user from an organization, allowing renewed interaction with its resources, provided the user is currently blocked (otherwise, a 404 error may occur). Approval by default
WriteUnfollow a userUnfollows an existing GitHub user; this action is idempotent, succeeding even if the authenticated user is not currently following them. Approval by default
WriteUnfollow organizationUnfollow a GitHub organization using GraphQL. Approval by default
WriteUnfollow userUnfollow a GitHub user using GraphQL. Approval by default
WriteUnlock an issueUnlocks a currently locked GitHub issue in the specified repository, allowing new comments and interactions. Approval by default
WriteUnlock an organization repositoryUnlocks a repository that was locked for migration within a GitHub organization. Approval by default
WriteUnlock a user repositoryUnlocks a repository (`repo_name`) that was locked as part of a user migration (`migration_id`), making it usable or deletable; this action requires the repository to be currently locked. Approval by default
WriteUnstar a gistRemoves a star from the specified gist; the action is idempotent and will not error if the gist was not previously starred by the user. Approval by default
WriteUnstar a repositoryRemoves the authenticated user's star from a specified repository, which must already be starred by the user. Approval by default
WriteUpdate a check runUpdates an existing check run for a specific commit in a repository, allowing modifications to its status, conclusion, output, and other details. Approval by default
WriteUpdate a code scanning alertUpdates a specific code scanning alert in a GitHub repository, primarily to change its state (e.g., 'open' or 'dismissed'). Approval by default
WriteUpdate a commit commentChanges the body of an existing commit comment. Approval by default
WriteUpdate a custom organization roleUpdates an existing custom role in an organization by modifying its name, description, or permissions; at least one of these fields must be provided. Approval by default
WriteUpdate a deployment branch policyUpdates the name pattern of an existing deployment branch policy for a specific environment in a repository. Approval by default
WriteUpdate a discussionUpdates the title and/or body of a specific team discussion within an organization. Approval by default
WriteUpdate a discussion commentUpdates the body of a comment in a team's discussion within an organization. Approval by default
WriteUpdate a gistUpdates a gist's description, and/or its files (including content, filename changes, or deletion). Approval by default
WriteUpdate a gist commentUpdates an existing comment on a specified gist. Approval by default
WriteUpdate a labelUpdates an existing label's name, color, or description within a specified repository. Approval by default
WriteUpdate a milestoneUpdates a milestone in a repository, identified by `owner`, `repo`, and `milestone_number`, by allowing modification of its `title`, `state`, `description`, or `due_on`; at least one of these four… Approval by default
WriteUpdate an environment variableUpdates an existing environment variable's name and/or value in a specific GitHub repository environment; requires providing either a new name or a new value. Approval by default
WriteUpdate an issueUpdates an existing GitHub issue's title, body, state, milestone, labels, or assignees; `state_reason` is only processed if `state` also changes, and use `null` or `[]` to clear applicable fields. Approval by default
WriteUpdate an issue commentUpdates an existing comment on an issue or pull request within a specified repository. Approval by default
WriteUpdate an organizationUpdates an organization's settings; changing security-related fields requires admin, owner, or security manager permissions. Approval by default
WriteUpdate an organization variableUpdates an existing GitHub Actions organization variable's name, value, or visibility (`all`, `private`, `selected`), requiring `selected_repository_ids` with valid repository IDs if visibility is… Approval by default
WriteUpdate an organization webhookUpdates the configuration (URL, content type, secret, SSL verification), subscribed events, active status, or name of an existing webhook for a specified organization. Approval by default
WriteUpdate a projectUpdates an existing GitHub project (V2) attributes like title, description, visibility, and state. Approval by default
WriteUpdate a pull requestUpdates an existing pull request, allowing changes to attributes like title, body, state, base branch, and maintainer modification settings. Approval by default
WriteUpdate a pull request branchUpdates an open pull request's head branch by merging the latest changes from its base branch, if mergeable and repository merging is enabled; operates asynchronously. Approval by default
WriteUpdate a referenceUpdates an existing Git reference (e.g., a branch or tag) to point to a specific commit SHA. Approval by default
WriteUpdate a releaseUpdates an existing release in a GitHub repository, allowing modification of its attributes; if linking a discussion, the `discussion_category_name` must refer to an existing category in the… Approval by default
WriteUpdate a release assetUpdates the name, label, or state of a release asset in a GitHub repository, requiring at least one of these properties to be provided for modification. Approval by default
WriteUpdate a repositoryUpdates settings for an existing GitHub repository, such as name, description, visibility, merge strategies, and security configurations. Approval by default
WriteUpdate a repository invitationUpdates an active repository invitation to modify the invited user's permissions; the specified repository and invitation must exist. Approval by default
WriteUpdate a repository rulesetUpdates an existing repository ruleset, identified by `ruleset_id` for a given repository, allowing partial updates to its configuration such as name, target, enforcement, bypass actors, conditions… Approval by default
WriteUpdate a repository variableUpdates the name and/or value of an existing GitHub Actions variable in a repository. Approval by default
WriteUpdate a repository webhookUpdates the URL, content type, secret, SSL verification, events, or active status for an existing repository webhook, specified by `owner`, `repo`, and `hook_id`. Approval by default
WriteUpdate a teamUpdates a team's settings (e.g., name, description, privacy, parent team) within a GitHub organization, identified by its slug and organization name. Approval by default
WriteUpdate branch protectionUpdates the protection settings for an existing branch in a repository, which must not contain wildcard characters. Approval by default
WriteUpdate a code scanning default setup configurationUpdates the default setup configuration for code scanning in a repository; GitHub Advanced Security must be enabled for the repository. Approval by default
WriteUpdate a codespace for the authenticated userUpdates an existing GitHub Codespace's machine type, display name, or recent folders for the authenticated user; machine type changes take effect on the next start. Approval by default
WriteUpdate issue typeUpdate an existing issue type for a GitHub organization. Approval by default
WriteUpdate a webhook configuration for an organizationUpdates the configuration (URL, content type, secret, SSL verification) for an existing webhook within a specified organization. Approval by default
WriteUpdate a review for a pull requestUpdates the body text of an existing pull request review. Approval by default
WriteUpdate a review comment for a pull requestUpdates the body of an existing review comment on a pull request. Approval by default
WriteUpdate pull request review protectionUpdates pull request review protection settings (e.g., required approvals, review dismissal, bypass allowances) for a branch; branch protection features must be available for the repository. Approval by default
WriteUpdate repository preferences for check suitesUpdates repository preferences for automatic Check Suite creation on code pushes, allowing configuration for specific GitHub Apps that must be installed on the repository with `checks:write`… Approval by default
WriteUpdate a webhook configuration for a repositoryUpdates the configuration (e.g., payload URL, content type, secret, SSL verification) for an existing webhook in a specified repository. Approval by default
WriteUpdate resource access with tokensRevokes organization access for the personal access tokens identified by `pat_ids`; this action must be performed by a GitHub App, and `pat_ids` must be valid and associated with the organization. Approval by default
WriteUpdate status check protectionUpdates required status checks for a branch, optionally requiring it to be up-to-date before merging. Approval by default
WriteUpdate SubscriptionUpdate notification subscription state for issues, pull requests, or discussions. Approval by default
WriteUpdate the authenticated userUpdates the authenticated user's GitHub profile; a new public email must be verified, and existing private emails remain private even if specified. Approval by default
WriteRevoke Token Organization AccessRevokes a fine-grained personal access token's access to an organization. Approval by default
WriteUpdate User ListUpdate an existing GitHub user list. Approval by default
WriteUpdate user lists for itemUpdate which of the viewer's lists an item belongs to on GitHub. Approval by default
WriteUpdate Project V2 Item for UserUpdate a field value for an item in a user's GitHub ProjectV2. Approval by default
WriteChange User StatusUpdate your status on GitHub. Approval by default
WriteUpload a release assetUpload a binary asset to an existing GitHub release. Approval by default
WriteUpload an analysis as sarif dataUploads a gzipped and Base64 encoded SARIF file to a GitHub repository for a specific commit and reference; use `checkout_uri` if SARIF paths are absolute. Approval by default
WriteCreate or update repository custom property valuesCreates or updates up to 30 custom property values for a repository; custom properties must be predefined at the organization or repository level, and setting a property's value to `null` removes it. Approval by default

One prompt, start to finish

What a governed GitHub run looks like inside Luumen.

Questions

How does LuumenAI connect to GitHub?

Authorize once with OAuth 2.0. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

Can LuumenAI change things in GitHub on its own?

Read actions answer immediately. Anything that writes — abort repository migration, accept a repository invitation, add app access restrictions, add a repository collaborator, and more — is shown as a plan and requires approval by default, including the 142 actions classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.

Who gets access to the integration?

You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.

Is there an audit trail?

Every call to GitHub — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.

Put GitHub to work with Luumen

Connect in minutes. Every action scoped, approved, and audited from day one.

Book a Demo Download Luumen

The GitHub toolbox

One prompt, start to finish

Questions

Often connected alongside

Put GitHub to work with Luumen