Open
Description
Here is my config for Cursor and CI/CD:
{
"mcpServers": {
"github": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"GITHUB_PERSONAL_ACCESS_TOKEN=${process.env.GITHUB_PAT}",
"-e",
"GITHUB_READ_ONLY=1",
"ghcr.io/github/github-mcp-server"
]
}
}Server starts but regardless of the config I pass I can't limit the tools, I always get 51 reported in Cursor:
and CI/CD (github actions). I've tried to pass toolsets as well:
{
"mcpServers": {
"github": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"GITHUB_PERSONAL_ACCESS_TOKEN=${process.env.GITHUB_PAT}",
"-e",
"GITHUB_TOOLSETS=\"repos,issues,pull_requests,actions,code_security,experiments\"",
"ghcr.io/github/github-mcp-server"
]
}
}but to no avail. Am I missing something or is this a bug? My goal is to have read only tools.