GitHub Actions Audit MCP Server

Name: GitHub Actions Audit MCP Server
Author: io.github.UnbearableDev

io.github.UnbearableDev/github-actions-audit

Repository Registry

What is the GitHub Actions Audit MCP server?

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

How to install GitHub Actions Audit

Copy-paste configuration for popular MCP clients.

transport: http

Config generated by PluginBench — verify against the source before use.

Environment / auth

Authorization
required
secret
Apify API token. Format: 'Bearer <YOUR_APIFY_TOKEN>'. Get yours at https://console.apify.com/account/integrations

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "github-actions-audit": {
      "url": "https://unbearable-dev--github-actions-audit.apify.actor/mcp"
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "github-actions-audit": {
      "serverUrl": "https://unbearable-dev--github-actions-audit.apify.actor/mcp"
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "github-actions-audit": {
      "type": "http",
      "url": "https://unbearable-dev--github-actions-audit.apify.actor/mcp"
    }
  }
}

Claude Desktop

Claude Desktop connects to remote servers via the mcp-remote bridge.

{
  "mcpServers": {
    "github-actions-audit": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://unbearable-dev--github-actions-audit.apify.actor/mcp"
      ]
    }
  }
}

Claude Code

claude mcp add --transport http github-actions-audit https://unbearable-dev--github-actions-audit.apify.actor/mcp

Related MCP servers

Docker Compose Audit

Active

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Python

View repository →

Dockerfile Audit

Active

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Python

View repository →

Hungarian Postcode Validator

Active

Hungarian postcode lookup + validation - 3,484 codes, sub-10ms lookups, bulk address endpoint.

Python

View repository →

IAC Audit Pack

Active

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

Python

View repository →

Kubernetes Manifest Audit

Active

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

Python

View repository →