Be the first to get access to new connectors. Get early access →
ConnectorBay Early access
Discover
GitHub Security (BYOK) icon

GitHub Security (BYOK)

Read GitHub security advisories and your Dependabot, code scanning and secret scanning alerts with your own personal access token

Unify Dynamics LLC

Tools10read-only
Sign-inBYOKbring your own key
Key keptNeverused for one call only
PriceFreeoptional Pro limits
ProviderGitHub Securityunofficial, not affiliated
Works withMCP · RESTany agent

Try asking

Real questions, and the tools your agent calls to answer them.

Which critical npm advisories were published this month?
Tools called
list_global_advisories
What does advisory GHSA-abcd-1234-wxyz affect and which version fixes it?
Tools called
get_global_advisory
What security advisories are open on octocat/Hello-World?
Tools called
list_repo_security_advisories
Which repository security advisories are in triage in octo-org?
Tools called
list_org_security_advisories
Which open Dependabot alerts does octocat/Hello-World have?
Tools called
list_repo_dependabot_alerts
Show Dependabot alert 7 on octocat/Hello-World
Tools called
get_dependabot_alert

About

GitHub Security (BYOK) lets an AI assistant read your own GitHub Security data through the GitHub Security API with a key you supply (personal access token (fine-grained or classic)). Read-only: 10 tools (list_global_advisories, get_global_advisory, list_repo_security_advisories, list_org_security_advisories, list_repo_dependabot_alerts, get_dependabot_alert, list_org_dependabot_alerts, list_code_scanning_alerts, get_code_scanning_alert, list_secret_scanning_alerts). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.github.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by GitHub Security. GitHub Security and its logos are trademarks of their owners and are used only to say which service the connector works with.

Sources: Live from the GitHub Security API (api.github.com) with a BYOK key; documentation: https://docs.github.com/en/rest/security-advisories. Endpoints checked against that documentation on 2026-10-16.

Privacy

The publisher, Unify Dynamics LLC, states that tool inputs are processed in memory and not retained.

Data not collectedNo account, no profile, no stored prompts or results.

What it can do

10 tools, grouped by job. Every one is read-only or compute-only.

OpenAPI
Read your data10 tools
  • List global advisoriesSearch GitHub's global advisory database (reviewed by default) by ecosystem, severity, CVE id, CWE or affected package, with CVSS and EPSS scores.
  • Get global advisoryGet one global advisory with description, affected packages and patched versions, CVSS and EPSS scores, CWEs and references.
  • List repo security advisoriesList a repository's own security advisories (private vulnerability reports) filtered by state.
  • List org security advisoriesList repository security advisories across an organization filtered by state.
  • List repo dependabot alertsList a repository's Dependabot alerts with package, manifest, advisory, severity, CVSS and EPSS scores and first patched version.
  • Get dependabot alertGet one Dependabot alert by number with the advisory summary, severity and patched version.
  • List org dependabot alertsList Dependabot alerts across all repositories of an organization with package, advisory, severity and repository.
  • List code scanning alertsList a repository's code scanning alerts with rule, severity, tool, state, file location and dates.
  • Get code scanning alertGet one code scanning alert by number with rule description, tool, branch and file location.
  • List secret scanning alertsList a repository's secret scanning alerts with secret type, provider, validity, state and push protection bypass.

Information

PublisherUnify Dynamics LLC
CategorySafety
LanguagesEnglish
Built forWorldwide
CompatibilityAny MCP client · any agent · REST
Version0.1.0
MCP endpointhttps://byok-githubsecurity.connectorbay.com/mcp
REST APIopenapi.json
SupportGet help · Status
CountryWorldwide
FunctionOther
LayerDeep connectors

More like this

More in Other

Perma.cc (BYOK)

Read your Perma.cc web archives, folders, organizations and capture status, plus the public archive feed, with your own API key

Live · MCP + REST12 tools

Camb AI (BYOK)

Read the CAMB.AI voice catalog, live-stream flows and templates, and the status of your speech, dubbing, translation, transcription and audio jobs with your own API key

Live · MCP + REST9 tools

JoggAI (BYOK)

Read your JoggAI avatar and product videos, avatars, voices, music, templates and remaining credits with your own API key

Live · MCP + REST12 tools

Creatify (BYOK)

Read your Creatify AI video ad jobs, credits, avatars, voices, music categories and ad styles with your own API credentials

Live · MCP + REST12 tools

Submagic (BYOK)

Read your Submagic video projects, caption templates, presets, media library and published-post analytics with your own API key

Live · MCP + REST9 tools

Quartr (BYOK)

Read Quartr earnings and filings data (companies, events, reports, slide decks, transcripts and their types) with your own Quartr API key

Live · MCP + REST9 tools

Get GitHub Security (BYOK)

Free · BYOK · Read-only

BYOK: bring your own keyThis connector uses your own GitHub Security personal access token (fine-grained or classic). Create one at https://github.com/settings/tokens, with the fewest permissions it needs (read-only if the provider offers it). Your assistant sends it in the X-Upstream-Key header with every request. It is used for that one call only: never stored, logged or cached, and only ever sent to GitHub Security. Revoke it at the provider whenever you like. Unofficial connector: not affiliated with GitHub Security.