Be the first to get access to new connectors. Get early access →
ConnectorBay Early access
Discover
GitHub Dependency Graph (BYOK) icon

GitHub Dependency Graph (BYOK)

Read a GitHub repository's software bill of materials, dependency changes between commits and Dependabot configuration metadata with your own personal access token

Unify Dynamics LLC

Tools6read-only
Sign-inBYOKbring your own key
Key keptNeverused for one call only
PriceFreeoptional Pro limits
ProviderGitHub Dependency Graphunofficial, not affiliated
Works withMCP · RESTany agent

Try asking

Real questions, and the tools your agent calls to answer them.

Which packages and versions does octocat/Hello-World depend on?
Tools called
export_sbom
What dependencies changed between v1.0 and main in octocat/Hello-World?
Tools called
compare_dependencies
Which Dependabot secrets does octocat/Hello-World have configured?
Tools called
list_repo_dependabot_secret_names
Which Dependabot secrets does octo-org share with its repositories?
Tools called
list_org_dependabot_secret_names
Which repositories can use the NPM_TOKEN Dependabot secret in octo-org?
Tools called
list_org_secret_repositories
Which of octo-org's repositories can Dependabot reach?
Tools called
get_org_dependabot_repository_access

About

GitHub Dependency Graph (BYOK) lets an AI assistant read your own GitHub Dependency Graph data through the GitHub Dependency Graph API with a key you supply (GitHub personal access token (repo scope; admin access to the repository or organization for the Dependabot reads)). Read-only: 6 tools (export_sbom, compare_dependencies, list_repo_dependabot_secret_names, list_org_dependabot_secret_names, list_org_secret_repositories, get_org_dependabot_repository_access). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.github.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by GitHub Dependency Graph. GitHub Dependency Graph and its logos are trademarks of their owners and are used only to say which service the connector works with.

Sources: Live from the GitHub Dependency Graph API (api.github.com) with a BYOK key; documentation: https://docs.github.com/en/rest/dependency-graph. Endpoints checked against that documentation on 2026-10-16.

Privacy

The publisher, Unify Dynamics LLC, states that tool inputs are processed in memory and not retained.

Data not collectedNo account, no profile, no stored prompts or results.

What it can do

6 tools, grouped by job. Every one is read-only or compute-only.

OpenAPI
Read your data6 tools
  • Export sbomExport a repository's software bill of materials in SPDX form: document name, creation time and the list of packages with versions and licenses.
  • Compare dependenciesShow the dependencies added, removed or changed between two commits (base...head) with ecosystem, version, license and known vulnerabilities.
  • List repo dependabot secret namesList the names and dates of a repository's Dependabot secrets (values are never available).
  • List org dependabot secret namesList the names, dates and visibility of an organization's Dependabot secrets (values are never available).
  • List org secret repositoriesList the repositories that can use one named organization Dependabot secret (for secrets shared with selected repositories).
  • Get org dependabot repository accessShow which repositories Dependabot may access in an organization, and the default access level.

Information

PublisherUnify Dynamics LLC
CategoryDeveloper tools
LanguagesEnglish
Built forWorldwide
CompatibilityAny MCP client · any agent · REST
Version0.1.0
MCP endpointhttps://byok-github-dependency-graph.connectorbay.com/mcp
REST APIopenapi.json
SupportGet help · Status
CountryWorldwide
FunctionOther
LayerDeep connectors

More like this

More in Other

Taskade (BYOK)

Read your Taskade workspaces, folders, projects, tasks, notes, members and AI agents with your own personal access token

Live · MCP + REST11 tools

Legalesign (BYOK)

Read your Legalesign e-signature documents, signing status, templates, groups and signers with your own API key

Live · MCP + REST10 tools

OpnForm (BYOK)

Read your OpnForm workspaces, forms, form submissions and workspace members with your own personal access token

Live · MCP + REST5 tools

Concord (BYOK)

Read your Concord contracts, folders, versions, summaries, members, tags, reports and activity with your own API key

Live · MCP + REST12 tools

Accredible (BYOK)

Read your Accredible digital credential groups, issued credential status, skill frameworks and issuer details without recipient names or emails, with your own API key (US data center)

Live · MCP + REST7 tools

RotaCloud (BYOK)

Read your RotaCloud staff rota set-up: locations, roles, groups, leave types, pay periods, day notes and shifts without employee details, with your own API key

Live · MCP + REST9 tools

Get GitHub Dependency Graph (BYOK)

Free · BYOK · Read-only

BYOK: bring your own keyThis connector uses your own GitHub Dependency Graph GitHub personal access token (repo scope; admin access to the repository or organization for the Dependabot reads). Create one at https://github.com/settings/tokens, with the fewest permissions it needs (read-only if the provider offers it). Your assistant sends it in the X-Upstream-Key header with every request. It is used for that one call only: never stored, logged or cached, and only ever sent to GitHub Dependency Graph. Revoke it at the provider whenever you like. Unofficial connector: not affiliated with GitHub Dependency Graph.