G
MCP server · Developer
Govern the GitHub MCP server.
The GitHub MCP server gives an agent your whole repo surface in one connection. Govern it so reads are open, merges need review, and destructive ops are off.
Per-tool policy
An MCP server is a bag of tools. Enable them one at a time.
Connect GitHub once; HiveKey gates each tool per role. Read-only by default, writes on purpose, destructive ops denied.
mcp / github governed
search_code allow
get_file_contents allow
create_issue allow
create_pull_request allow
merge_pull_request review
delete_repository deny
Read and propose freely; gate the merge; never allow repo deletion from an agent.
In the path
HiveKey sits between the agent and GitHub.
Agent
wants a tool call
HiveKey
scope · guard · log
GitHub MCP
only allowed tools
Put the GitHub MCP server under one policy.
Connect GitHub, gate each tool per role, and log every call — across your whole agent fleet.