Be the first to get access to new connectors. Get early access →
ConnectorBay Early access
Discover
GitHub Code Scanning (BYOK) icon

GitHub Code Scanning (BYOK)

Read GitHub code scanning alerts across an organization, plus analyses, alert instances, CodeQL databases and default setup with your own personal access token

Unify Dynamics LLC

Tools7read-only
Sign-inBYOKbring your own key
Key keptNeverused for one call only
PriceFreeoptional Pro limits
ProviderGitHub Code Scanningunofficial, not affiliated
Works withMCP · RESTany agent

Try asking

Real questions, and the tools your agent calls to answer them.

Which open high-severity code scanning alerts does octo-org have?
Tools called
list_org_code_scanning_alerts
When did CodeQL last analyze octocat/Hello-World and how many results did it find?
Tools called
list_code_scanning_analyses
Describe code scanning analysis 201 of octocat/Hello-World
Tools called
get_code_scanning_analysis
Where does code scanning alert 4 of octocat/Hello-World occur?
Tools called
list_alert_instances
Is code scanning default setup turned on for octocat/Hello-World?
Tools called
get_default_setup
Which CodeQL databases exist for octocat/Hello-World?
Tools called
list_codeql_databases

About

GitHub Code Scanning (BYOK) lets an AI assistant read your own GitHub Code Scanning data through the GitHub Code Scanning API with a key you supply (GitHub personal access token (security_events scope, or repo scope)). Read-only: 7 tools (list_org_code_scanning_alerts, list_code_scanning_analyses, get_code_scanning_analysis, list_alert_instances, get_default_setup, list_codeql_databases, get_sarif_upload_status). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.github.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by GitHub Code Scanning. GitHub Code Scanning and its logos are trademarks of their owners and are used only to say which service the connector works with.

Sources: Live from the GitHub Code Scanning API (api.github.com) with a BYOK key; documentation: https://docs.github.com/en/rest/code-scanning/code-scanning. Endpoints checked against that documentation on 2026-10-16.

Privacy

The publisher, Unify Dynamics LLC, states that tool inputs are processed in memory and not retained.

Data not collectedNo account, no profile, no stored prompts or results.

What it can do

7 tools, grouped by job. Every one is read-only or compute-only.

OpenAPI
Read your data7 tools
  • List org code scanning alertsList code scanning alerts across all repositories of an organization with rule, severity, state, tool and repository; filter by state, severity or…
  • List code scanning analysesList recent code scanning analyses of a repository (one per tool run and ref) with commit, category, result and rule counts.
  • Get code scanning analysisGet one code scanning analysis by its numeric ID: tool and version, ref, commit, category, result and rule counts, errors and warnings.
  • List alert instancesList where a code scanning alert occurs: ref, commit, file path, line range, state and message for each instance.
  • Get default setupGet a repository's code scanning default setup: whether it is configured, the languages, query suite, runner type and schedule.
  • List codeql databasesList the CodeQL databases stored for a repository with language, size, commit and update time.
  • Get sarif upload statusCheck whether an uploaded SARIF file has finished processing (pending, complete or failed) and list any processing errors.

Information

PublisherUnify Dynamics LLC
CategoryDeveloper tools
LanguagesEnglish
Built forWorldwide
CompatibilityAny MCP client · any agent · REST
Version0.1.0
MCP endpointhttps://byok-github-code-scanning.connectorbay.com/mcp
REST APIopenapi.json
SupportGet help · Status
CountryWorldwide
FunctionOther
LayerDeep connectors

More like this

More in Other

Tiger Data (BYOK)

Read your Tiger Cloud (Timescale) projects, database services, usage metrics, VPCs and VPC peerings with a Tiger Cloud API key

Live · MCP + REST8 tools

Crowdin (BYOK)

Read your Crowdin localization projects, files, strings, translation progress, tasks and builds with your own personal access token

Live · MCP + REST12 tools

Orchestra (BYOK)

Read your Orchestra data pipeline runs, task runs, assets, incidents, monitors and environments with your own workspace API key (a read-only key works)

Live · MCP + REST11 tools

Scorecard (BYOK)

Read your Scorecard AI evaluation projects, testsets, metrics, metric groups, runs and systems with your own API key

Live · MCP + REST10 tools

Eden AI (BYOK)

Read the Eden AI model catalog, feature list, async jobs, stored files, collections and video jobs on your account with your own API key

Live · MCP + REST12 tools

Hosted Weblate (BYOK)

Read your Hosted Weblate localization projects, components, translation progress, strings and recent changes with your own API token

Live · MCP + REST12 tools

Get GitHub Code Scanning (BYOK)

Free · BYOK · Read-only

BYOK: bring your own keyThis connector uses your own GitHub Code Scanning GitHub personal access token (security_events scope, or repo scope). Create one at https://github.com/settings/tokens, with the fewest permissions it needs (read-only if the provider offers it). Your assistant sends it in the X-Upstream-Key header with every request. It is used for that one call only: never stored, logged or cached, and only ever sent to GitHub Code Scanning. Revoke it at the provider whenever you like. Unofficial connector: not affiliated with GitHub Code Scanning.