github-pro-mcp 0.0.3 → 0.0.4

package/README.md

@@ -7,6 +7,10 @@ GitHub Pro MCP gives Claude Code, Cursor, Copilot, opencode and any MCP host a
 complete GitHub toolkit: **34 tools** for issues, pull requests, files, projects,
 labels and organizations.
 
+Read-only mode is the default. The server registers 19 read tools and keeps the
+15 write tools out of the agent's context. Set
+`GITHUB_MCP_ENABLE_WRITES=true` to load the full set.
+
 It runs locally, connects to your host over stdio, and calls the GitHub API
 directly with your own token. There is no intermediary service.
 
@@ -36,6 +40,10 @@ API details.
 
 - **34 tools across 8 domains.** Issues, pull requests, repositories, projects,
   labels, organizations, file operations and server info.
+- **Read-only by default.** 19 tools, no write surface. Enable writes explicitly.
+- **Built for the common path.** The daily loop is small: read an issue, review a pull
+  request, change a file, update a project field. The long tail stays out of the
+  agent's context until you need it.
 - **Organization-aware.** `owner_list_repository` lists every repository in an
   organization.
 - **Built for real API conditions.** Retries with backoff, rate-limit handling
@@ -43,12 +51,18 @@ API details.
   nothing to tune.
 - **Guardrails.** Pin the server to one owner or repository with
   `GITHUB_OWNER` / `GITHUB_REPO`, and mismatched calls are rejected.
+- **Guided token setup.** The generator builds a pre-filled fine-grained token
+  with a read-only or read-write preset.
 - **Any MCP host.** A standard stdio server. Works with opencode, Claude
   Desktop, Cursor, VS Code and anything else that speaks MCP.
 - **No runtime dependencies.** The npm package ships one bundled file, so
   installing it does not pull a dependency tree.
 - **GitHub Enterprise Server.** Point `GITHUB_HOST` at your GHES API.
 
+If your work is mostly Actions, security scanning, notifications, discussions,
+gists, governance or Copilot, use the official GitHub MCP server. GitHub Pro MCP
+is built for the daily issue, pull request, file and project loop.
+
 ## Installation
 
 Requires Node.js 22 or newer for the npm package. The Docker image includes
@@ -80,6 +94,10 @@ docker pull anantanandgupta/github-pro-mcp
 3. Add it to your MCP host and restart the host.
 4. Verify with the `auth_get_current_login` tool.
 
+By default the server is read-only and registers 19 tools. To enable issue,
+pull request, file, label and project writes, set
+`GITHUB_MCP_ENABLE_WRITES=true` in the host environment.
+
 ### Create a token
 
 Use a fine-grained personal access token. The generator builds a pre-filled
@@ -96,6 +114,9 @@ to an organization that requires approval, request it while creating the token.
 The full per-tool permission table is at
 https://mcp.anantanandgupta.net/github-pro-mcp/permissions/
 
+The read-only preset pairs with the default read-only mode. The read-write
+preset requires `GITHUB_MCP_ENABLE_WRITES=true` in the host environment.
+
 ### Connect opencode
 
 Add to your opencode config (v2 nests servers under `mcp.servers`):
@@ -108,7 +129,8 @@ Add to your opencode config (v2 nests servers under `mcp.servers`):
         "type": "local",
         "command": ["npx", "-y", "github-pro-mcp"],
         "environment": {
-          "GITHUB_PERSONAL_ACCESS_TOKEN": "{env:GITHUB_TOKEN}"
+          "GITHUB_PERSONAL_ACCESS_TOKEN": "{env:GITHUB_TOKEN}",
+          "GITHUB_MCP_ENABLE_WRITES": "true"
         }
       }
     }
@@ -117,7 +139,8 @@ Add to your opencode config (v2 nests servers under `mcp.servers`):
 ```
 
 `{env:GITHUB_TOKEN}` reads that variable from the environment opencode starts
-in. Use a literal token instead if you prefer.
+in. Use a literal token instead if you prefer. Remove
+`GITHUB_MCP_ENABLE_WRITES` to stay read-only.
 
 ### Connect Claude Desktop
 
@@ -133,7 +156,8 @@ Edit `claude_desktop_config.json` and restart Claude Desktop:
       "command": "npx",
       "args": ["-y", "github-pro-mcp"],
       "env": {
-        "GITHUB_PERSONAL_ACCESS_TOKEN": "github_pat_..."
+        "GITHUB_PERSONAL_ACCESS_TOKEN": "github_pat_...",
+        "GITHUB_MCP_ENABLE_WRITES": "true"
       }
     }
   }
@@ -156,9 +180,10 @@ https://mcp.anantanandgupta.net/github-pro-mcp/install/
     "servers": {
       "github_pro": {
         "type": "local",
-        "command": ["docker", "run", "-i", "--rm", "-e", "GITHUB_PERSONAL_ACCESS_TOKEN", "anantanandgupta/github-pro-mcp"],
+        "command": ["docker", "run", "-i", "--rm", "-e", "GITHUB_PERSONAL_ACCESS_TOKEN", "-e", "GITHUB_MCP_ENABLE_WRITES", "anantanandgupta/github-pro-mcp"],
         "environment": {
-          "GITHUB_PERSONAL_ACCESS_TOKEN": "{env:GITHUB_TOKEN}"
+          "GITHUB_PERSONAL_ACCESS_TOKEN": "{env:GITHUB_TOKEN}",
+          "GITHUB_MCP_ENABLE_WRITES": "true"
         }
       }
     }
@@ -183,14 +208,16 @@ The same `docker run` command works as the server command in other hosts.
 | `GITHUB_HOST` | GitHub Enterprise Server API, for example `https://github.example.com/api/v3` |
 | `GITHUB_OWNER` | Pin the server to a single owner and reject mismatched calls |
 | `GITHUB_REPO` | Pin the server to a single repository and reject mismatched calls |
+| `GITHUB_MCP_ENABLE_WRITES` | Set to `true`, `1`, `yes` or `on` to register the 15 write tools. Default `false` |
 
 Retries, rate limiting and logging have sensible defaults. You do not need to
 tune them for normal use.
 
 ## Tools
 
-34 tools across 8 domains. Tool names appear in your host's tool list after the
-server starts.
+34 tools across 8 domains. Read-only mode registers 19 of them; the other 15
+are write tools. Tool names appear in your host's tool list after the server
+starts.
 
 | Domain | Tools | Count |
 |--------|-------|-------|
@@ -207,6 +234,9 @@ server starts.
 Task-based examples and the prompts they respond to are at
 https://mcp.anantanandgupta.net/github-pro-mcp/tools/
 
+A measured comparison with the official GitHub MCP server is at
+https://mcp.anantanandgupta.net/github-pro-mcp/compare/
+
 ## Troubleshooting
 
 | Symptom | Likely cause |
@@ -217,6 +247,7 @@ https://mcp.anantanandgupta.net/github-pro-mcp/tools/
 | `429` | Rate limited. The server retries; wait if it persists |
 | No tools appear in the host | The host was not restarted, or the server failed to start |
 | Server exits immediately | `GITHUB_PERSONAL_ACCESS_TOKEN` is not set in the host's environment |
+| Write tool not in the list | `GITHUB_MCP_ENABLE_WRITES` is not set to `true` |
 
 ## Support
 

package/dist-package/index.js

@@ -26705,6 +26705,18 @@ function formatRepo(r) {
   };
 }
 
+// src/utils/annotations.ts
+var READ_ONLY = {
+  readOnlyHint: true,
+  idempotentHint: true,
+  openWorldHint: true
+};
+var WRITE = {
+  readOnlyHint: false,
+  idempotentHint: false,
+  openWorldHint: true
+};
+
 // src/tools/repos.ts
 function toBase64(content) {
   return Buffer.from(content, "utf-8").toString("base64");
@@ -26713,6 +26725,7 @@ function registerAuthGetCurrentLogin(server2) {
   server2.registerTool(
     "auth_get_current_login",
     {
+      annotations: READ_ONLY,
       description: "Get the authenticated GitHub user's profile. Use this to verify your GitHub token and identity.",
       inputSchema: object2({})
     },
@@ -26740,6 +26753,7 @@ function registerFileGetContent(server2) {
   server2.registerTool(
     "file_get_content",
     {
+      annotations: READ_ONLY,
       description: "Get the contents of a file from a GitHub repository. Returns the decoded file content as text.",
       inputSchema: OwnerRepoSchema.extend({
         path: string2().min(1).describe("File path within the repository (e.g., 'README.md' or 'src/index.ts')"),
@@ -26776,6 +26790,7 @@ function registerProfileGet(server2) {
   server2.registerTool(
     "profile_get",
     {
+      annotations: READ_ONLY,
       description: "Get profile info for any GitHub owner (user or organization). Useful for checking if an owner is an organization before calling organization-only tools like owner_list_issue_field.",
       inputSchema: object2({
         owner: string2().min(1).describe("Repository owner (user or organization)")
@@ -26808,6 +26823,7 @@ function registerOwnerListRepository(server2) {
   server2.registerTool(
     "owner_list_repository",
     {
+      annotations: READ_ONLY,
       description: "List all repositories for a given owner. For an organization, returns every repository in the organization. For a user, returns the repositories the token can access. The 'type' filter applies to user owners only. Unlike search_repositories, results are unranked.",
       inputSchema: object2({
         owner: string2().min(1).describe("Repository owner (user or organization)"),
@@ -26844,6 +26860,7 @@ function registerFileCreateUpdate(server2) {
   server2.registerTool(
     "file_create_update",
     {
+      annotations: WRITE,
       description: "Create or update a single file in a GitHub repository. Content is base64-encoded automatically. Provide sha when updating an existing file (obtain sha from the previous file_create_update response).",
       inputSchema: OwnerRepoSchema.extend({
         path: string2().min(1).describe("Path where to create/update the file"),
@@ -26890,6 +26907,7 @@ function registerCodeSearch(server2) {
   server2.registerTool(
     "code_search",
     {
+      annotations: READ_ONLY,
       description: "Search for code across GitHub repositories. Supports GitHub search qualifiers like 'repo:...', 'language:...', 'path:...'.",
       inputSchema: object2({
         query: string2().min(1).max(1e3).describe("Search query with GitHub qualifiers, e.g., 'function repo:owner/repo language:python'"),
@@ -26922,6 +26940,7 @@ function registerFileDelete(server2) {
   server2.registerTool(
     "file_delete",
     {
+      annotations: WRITE,
       description: "Delete a file from a GitHub repository. Requires the SHA of the file (obtain from file_get_content).",
       inputSchema: OwnerRepoSchema.extend({
         path: string2().min(1).describe("Path to the file to delete"),
@@ -26963,6 +26982,7 @@ function registerRepositorySearch(server2) {
   server2.registerTool(
     "repository_search",
     {
+      annotations: READ_ONLY,
       description: "Search for GitHub repositories by query. Supports GitHub search qualifiers like 'org:...', 'language:...', 'stars:>100'.",
       inputSchema: object2({
         query: string2().min(1).max(1e3).describe("Search query with GitHub qualifiers, e.g., 'org:microsoft language:python'"),
@@ -26995,6 +27015,7 @@ function registerOrganizationSearch(server2) {
   server2.registerTool(
     "organization_search",
     {
+      annotations: READ_ONLY,
       description: "Search for organizations on GitHub by query. Supports qualifiers like 'location:...', 'repos:>...'.",
       inputSchema: object2({
         query: string2().min(1).max(1e3).describe("Search query, e.g., 'microsoft' or 'location:seattle repos:>5'"),
@@ -27029,6 +27050,7 @@ function registerOwnerListIssueType(server2) {
   server2.registerTool(
     "owner_list_issue_type",
     {
+      annotations: READ_ONLY,
       description: "List issue types for an organization (e.g., Bug, Feature, Enhancement). Owner must be an organization.",
       inputSchema: object2({
         owner: string2().min(1).describe("Organization owner")
@@ -27053,6 +27075,7 @@ function registerOwnerListOrganization(server2) {
   server2.registerTool(
     "owner_list_organization",
     {
+      annotations: READ_ONLY,
       description: "List all organizations that a user account belongs to. Provide a username, not an organization name.",
       inputSchema: object2({
         owner: string2().min(1).describe("Username to list organizations for")
@@ -27086,6 +27109,7 @@ function registerPullRequestRead(server2) {
   server2.registerTool(
     "pull_request_read",
     {
+      annotations: READ_ONLY,
       description: "Get details of a pull request. Optionally include commits and reviews. Each include_* flag makes additional API calls.",
       inputSchema: OwnerRepoSchema.extend({
         pull_number: PullNumberSchema,
@@ -27148,6 +27172,7 @@ function registerPullRequestCreate(server2) {
   server2.registerTool(
     "pull_request_create",
     {
+      annotations: WRITE,
       description: "Create a new pull request in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         title: string2().min(1).describe("Pull request title"),
@@ -27183,6 +27208,7 @@ function registerPullRequestMerge(server2) {
   server2.registerTool(
     "pull_request_merge",
     {
+      annotations: WRITE,
       description: "Merge a pull request in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         pull_number: PullNumberSchema,
@@ -27216,6 +27242,7 @@ function registerIssueRead(server2) {
   server2.registerTool(
     "issue_read",
     {
+      annotations: READ_ONLY,
       description: "Get details of a specific issue. Optionally include comments, labels, field values, and sub-issues. Each include_* flag makes additional API calls.",
       inputSchema: OwnerRepoSchema.extend({
         issue_number: IssueNumberSchema,
@@ -27306,6 +27333,7 @@ function registerIssueList(server2) {
   server2.registerTool(
     "issue_list",
     {
+      annotations: READ_ONLY,
       description: "List issues in a repository. Optionally include org-level field values (Priority, Effort) and/or project board field values (Status, Application). Supports field-based filtering with filter_fields (AND logic).",
       inputSchema: OwnerRepoSchema.extend({
         state: _enum(["open", "closed", "all"]).optional().describe("Filter by issue state"),
@@ -27506,6 +27534,7 @@ function registerIssueSearch(server2) {
   server2.registerTool(
     "issue_search",
     {
+      annotations: READ_ONLY,
       description: "Search for issues in GitHub repositories using GitHub's search syntax.",
       inputSchema: object2({
         query: string2().min(1).max(1e3).describe("Search query using GitHub issues search syntax, e.g., 'label:bug repo:owner/repo'"),
@@ -27545,6 +27574,7 @@ function registerIssueAddComment(server2) {
   server2.registerTool(
     "issue_add_comment",
     {
+      annotations: WRITE,
       description: "Add a comment to an existing issue in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         issue_number: IssueNumberSchema,
@@ -27574,6 +27604,7 @@ function registerSubIssueWrite(server2) {
   server2.registerTool(
     "sub_issue_write",
     {
+      annotations: WRITE,
       description: "Add or remove a sub-issue from a parent issue in a GitHub repository. Method 'add' adds sub_issue_number as a sub-issue of issue_number. Method 'remove' removes the sub-issue relationship.",
       inputSchema: OwnerRepoSchema.extend({
         method: _enum(["add", "remove"]).describe("Operation: add or remove a sub-issue"),
@@ -27645,6 +27676,7 @@ function registerIssueCreate(server2) {
   server2.registerTool(
     "issue_create",
     {
+      annotations: WRITE,
       description: "Create a new issue in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         title: string2().min(1).describe("Issue title"),
@@ -27678,6 +27710,7 @@ function registerIssueClose(server2) {
   server2.registerTool(
     "issue_close",
     {
+      annotations: WRITE,
       description: "Close an issue in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         issue_number: IssueNumberSchema,
@@ -27719,6 +27752,7 @@ function registerIssueReopen(server2) {
   server2.registerTool(
     "issue_reopen",
     {
+      annotations: WRITE,
       description: "Reopen a closed issue in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         issue_number: IssueNumberSchema
@@ -27746,6 +27780,7 @@ function registerIssueUpdate(server2) {
   server2.registerTool(
     "issue_update",
     {
+      annotations: WRITE,
       description: "Update an issue's title, body, or state in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         issue_number: IssueNumberSchema,
@@ -27786,6 +27821,7 @@ function registerIssueAddLabel(server2) {
   server2.registerTool(
     "issue_add_label",
     {
+      annotations: WRITE,
       description: "Add labels to an issue in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         issue_number: IssueNumberSchema,
@@ -27814,6 +27850,7 @@ function registerIssueRemoveLabel(server2) {
   server2.registerTool(
     "issue_remove_label",
     {
+      annotations: WRITE,
       description: "Remove labels from an issue in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         issue_number: IssueNumberSchema,
@@ -27855,6 +27892,7 @@ function registerOwnerListIssueField(server2) {
   server2.registerTool(
     "owner_list_issue_field",
     {
+      annotations: READ_ONLY,
       description: "List all issue field definitions for an organization (e.g., Priority, Effort, Start date, Target date). Owner must be an organization.",
       inputSchema: object2({
         owner: string2().min(1).describe("Organization owner")
@@ -27879,6 +27917,7 @@ function registerIssueGetFieldValue(server2) {
   server2.registerTool(
     "issue_get_field_value",
     {
+      annotations: READ_ONLY,
       description: "Get the current field values (Priority, Effort, dates, etc.) assigned to an issue.",
       inputSchema: OwnerRepoSchema.extend({
         issue_number: IssueNumberSchema
@@ -27902,6 +27941,7 @@ function registerIssueSetFieldValue(server2) {
   server2.registerTool(
     "issue_set_field_value",
     {
+      annotations: WRITE,
       description: "Set field values (Priority, Effort, dates, etc.) on an issue. Accepts either field_id (numeric ID) or field_name (e.g. 'Priority'). For single-select fields, value can be the option name (e.g. 'Medium') or option ID. For dates, use ISO 8601 (e.g. '2026-06-15'). Pass null to clear a field.",
       inputSchema: OwnerRepoSchema.extend({
         issue_number: IssueNumberSchema,
@@ -27969,6 +28009,7 @@ function registerLabelList(server2) {
   server2.registerTool(
     "label_list",
     {
+      annotations: READ_ONLY,
       description: "List labels in a GitHub repository.",
       inputSchema: OwnerRepoSchema.extend({
         page: PaginationSchema.shape.page,
@@ -27999,6 +28040,7 @@ function registerLabelWrite(server2) {
   server2.registerTool(
     "label_write",
     {
+      annotations: WRITE,
       description: "Create, update, or delete a label in a GitHub repository. Method 'create' requires name and color. Method 'update' requires name (current name) and optional color/description/new_name. Method 'delete' requires name only.",
       inputSchema: OwnerRepoSchema.extend({
         method: _enum(["create", "update", "delete"]).describe("Action to perform on the label"),
@@ -28055,6 +28097,7 @@ function registerOwnerListProject(server2) {
   server2.registerTool(
     "owner_list_project",
     {
+      annotations: READ_ONLY,
       description: "List GitHub Projects (v2) for an owner. Works for both organizations and individual users.",
       inputSchema: object2({
         owner: string2().min(1).describe("Organization or user login"),
@@ -28157,6 +28200,7 @@ function registerProjectsGet(server2) {
   server2.registerTool(
     "projects_get",
     {
+      annotations: READ_ONLY,
       description: "Get a single GitHub Project (v2) by its GraphQL node ID with optional fields, items, and status updates. Each include_* flag makes additional API calls.",
       inputSchema: object2({
         project_id: string2().min(1).describe("GraphQL node ID of the project (obtain from owner_list_project)"),
@@ -28306,6 +28350,7 @@ function registerProjectsWrite(server2) {
   server2.registerTool(
     "projects_write",
     {
+      annotations: WRITE,
       description: "Manage items in a GitHub Project (v2): add, update field values, delete items, or create status updates. Methods: add_item (requires content_id), update_item (requires item_id + field_values; field_values each need field_id, value, and value_type), delete_item (requires item_id), create_status_update (requires body; optional status/start_date/target_date). Note: update_item sends field values one at a time \u2014 if one fails, earlier updates are already committed. Check partial: true in the response.",
       inputSchema: object2({
         project_id: string2().min(1).describe("GraphQL node ID of the project"),
@@ -28500,6 +28545,7 @@ function registerServerInfo(server2, meta) {
   server2.registerTool(
     "server_info",
     {
+      annotations: READ_ONLY,
       description: "Get information about this MCP server, including version, support links, and runtime configuration.",
       inputSchema: object2({})
     },
@@ -28507,6 +28553,8 @@ function registerServerInfo(server2, meta) {
       const runtime = {
         node_version: process.version,
         platform: process.platform,
+        read_only: !meta.writesEnabled,
+        writes_enabled: meta.writesEnabled,
         pinned_owner: process.env.GITHUB_OWNER ?? null,
         pinned_repo: process.env.GITHUB_REPO ?? null,
         log_level: process.env.GITHUB_LOG_LEVEL ?? "error",
@@ -28541,6 +28589,12 @@ function registerServerInfo(server2, meta) {
 // src/index.ts
 var require2 = createRequire(import.meta.url);
 var pkg = require2("../package.json");
+function readBool(name, fallback) {
+  const raw = process.env[name];
+  if (raw === void 0) return fallback;
+  return ["1", "true", "yes", "on"].includes(raw.toLowerCase());
+}
+var writesEnabled = readBool("GITHUB_MCP_ENABLE_WRITES", false);
 var server = new McpServer(
   { name: pkg.name, version: pkg.version },
   { capabilities: { tools: {} } }
@@ -28554,46 +28608,52 @@ var serverMeta = {
   repository: pkg.repository?.url ?? "",
   homepage: pkg.homepage ?? "",
   bug_tracker: pkg.bugs?.url ?? "",
-  bin: pkg.bin ?? {}
+  bin: pkg.bin ?? {},
+  writesEnabled
 };
 registerAuthGetCurrentLogin(server);
 registerFileGetContent(server);
-registerFileDelete(server);
 registerProfileGet(server);
 registerOwnerListRepository(server);
-registerFileCreateUpdate(server);
 registerCodeSearch(server);
 registerRepositorySearch(server);
 registerOrganizationSearch(server);
 registerOwnerListIssueType(server);
 registerOwnerListOrganization(server);
 registerPullRequestRead(server);
-registerPullRequestCreate(server);
-registerPullRequestMerge(server);
 registerIssueRead(server);
 registerIssueList(server);
 registerIssueSearch(server);
-registerIssueAddComment(server);
-registerSubIssueWrite(server);
-registerIssueCreate(server);
-registerIssueClose(server);
-registerIssueReopen(server);
-registerIssueUpdate(server);
-registerIssueAddLabel(server);
-registerIssueRemoveLabel(server);
 registerOwnerListIssueField(server);
 registerIssueGetFieldValue(server);
-registerIssueSetFieldValue(server);
 registerLabelList(server);
-registerLabelWrite(server);
 registerOwnerListProject(server);
 registerProjectsGet(server);
-registerProjectsWrite(server);
+if (writesEnabled) {
+  registerFileCreateUpdate(server);
+  registerFileDelete(server);
+  registerPullRequestCreate(server);
+  registerPullRequestMerge(server);
+  registerIssueAddComment(server);
+  registerSubIssueWrite(server);
+  registerIssueCreate(server);
+  registerIssueClose(server);
+  registerIssueReopen(server);
+  registerIssueUpdate(server);
+  registerIssueAddLabel(server);
+  registerIssueRemoveLabel(server);
+  registerIssueSetFieldValue(server);
+  registerLabelWrite(server);
+  registerProjectsWrite(server);
+}
 registerServerInfo(server, serverMeta);
 async function main() {
   const transport = new StdioServerTransport();
   await server.connect(transport);
-  console.error("github-pro-mcp running on stdio");
+  const toolCount = Object.keys(server._registeredTools ?? {}).length;
+  console.error(
+    `github-pro-mcp running on stdio (${writesEnabled ? "writes enabled" : "read-only"}, ${toolCount} tools)`
+  );
 }
 main().catch((err) => {
   console.error("Fatal error:", err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "github-pro-mcp",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "description": "MCP server providing GitHub API access with hybrid REST + GraphQL support",
   "main": "dist-package/index.js",
   "bin": {
@@ -29,7 +29,8 @@
     "test:consistency": "node --test --test-global-setup='src/__tests__/setup.mjs' 'src/__tests__/consistency.test.mjs'",
     "test:docker": "node --test 'test/docker/**/*.test.mjs'",
     "test:npm": "node --test 'test/integration/**/*.test.mjs'",
-    "test:all": "npm test && npm run test:docker && npm run test:npm",
+    "test:all": "npm test && npm run test:readonly && npm run test:docker && npm run test:npm",
+    "test:readonly": "node --test 'test/readonly.test.mjs'",
     "test:coverage": "node --experimental-test-coverage --test --test-global-setup='src/__tests__/setup.mjs' 'src/__tests__/**/*.test.mjs'",
     "test:inspector": "npx @modelcontextprotocol/inspector node dist/index.js",
     "prepack": "npm run build && npm run bundle",
@@ -55,7 +56,7 @@
   "bugs": {
     "url": "https://github.com/anantanandgupta/mcp-servers/issues"
   },
-  "homepage": "https://github.com/anantanandgupta/mcp-servers#readme",
+  "homepage": "https://mcp.anantanandgupta.net/github-pro-mcp/",
   "type": "module",
   "engines": {
     "node": ">=22.0.0"