Tools
GitHub's own MCP server was advertising more OAuth scopes than it supports
github-mcp-server v1.12.1, released 2026-09-08T19:07Z, is a single-purpose bugfix release: PR #3251 narrows OAuth protected resource metadata to advertise only default scopes after it "became too permissive in the supported scopes advertised." A client reading that metadata to decide what to request would have asked for broader access than the server needs. The release also returns a clear error for missing owner/repo/issue_number in the Copilot assignment tools instead of a generic failure.
Source
↳ Follow the thread