Dependabot MCP Server

Stablesecurity

★35 starsTypeScriptcommunity

About

Overview

The Dependabot MCP Server enables AI agents to manage GitHub Dependabot security alerts. It provides tools for listing vulnerability alerts, viewing affected dependencies, and managing automated PR updates.

Capabilities

Tools & Capabilities

⚡list_alerts

List Dependabot alerts for a repo

⚡get_alert

Get details about a specific alert

⚡dismiss_alert

Dismiss an alert with reason

⚡list_updates

List Dependabot update PRs

Setup

Installation

bash

Install

npx -y mcp-server-dependabot

Examples

Example Usage

javascript

Usage

{
  "mcpServers": {
    "dependabot": {
      "command": "npx",
      "args": ["-y", "mcp-server-dependabot"],
      "env": { "GITHUB_TOKEN": "ghp_your-token" }
    }
  }
}

Quick Info

Authorcommunity

LanguageTypeScript

StatusStable

Stars★ 35

Last UpdatedFeb 12, 2026