git-proxy-mcp

Your Git credentials stay on your machine. Your repo lives in the AI's workspace.

A secure MCP server that lets cloud-based AI assistants (Claude.ai, ChatGPT, Gemini, etc.) work with private Git repositories using your existing Git credentials — without those credentials ever leaving your machine.

The Problem

Cloud-based AI coding assistants face a fundamental dilemma:

Approach	Problem
GitHub MCP Server	File-by-file API calls. 50 files = 50 calls. Can't run tests. Painfully slow.
Give AI your credentials	Security nightmare. Your PATs/SSH keys in someone else's cloud.
Only use public repos	Most real work is on private repositories.

The result: AI assistants that can write code but can't actually work on your projects like a real developer would.

The Solution

git-proxy-mcp acts as an authenticated streaming proxy between Git providers and AI workspaces:

┌─────────────────┐      ┌─────────────────┐      ┌─────────────────┐
│  Git Providers  │      │    YOUR PC      │      │    AI's VM      │
│                 │      │                 │      │                 │
│  GitHub         │◄────►│  git-proxy-mcp  │◄────►│  Claude.ai      │
│  GitLab         │      │                 │      │                 │
│  Bitbucket      │      │  (credentials   │      │  /home/claude/  │
│  Azure DevOps   │      │   stay here)    │      │    repo/        │
│  Self-hosted    │      │                 │      │  (files live    │
│                 │      │                 │      │   here)         │
└─────────────────┘      └─────────────────┘      └─────────────────┘

Key insight: The AI has its own VM with full Linux capabilities. It just can't authenticate to your private repos. We solve only that problem.

How It Works

Clone: AI requests a repo → MCP server authenticates → streams files directly to AI's VM
Work: AI has a complete local git repo. Branch, edit, test, commit — all native.
Push: AI sends commits → MCP server authenticates → pushes to remote

Credentials never leave your machine. Files never touch your machine.

Who Is This For?

Environment	Local Git?	Needs This?	Why
Claude.ai	❌ Cloud VM	✅ YES	Has compute, lacks credentials
ChatGPT + Code Interpreter	❌ Sandboxed	✅ YES	Same situation
Gemini + code execution	❌ Sandboxed	✅ YES	Same situation
Any cloud AI with VM	❌	✅ YES	Universal solution
Claude Code	✅ Local	❌ No	Already has direct access
Cursor	✅ Local	❌ No	Runs on your machine
GitHub Copilot	✅ Local	❌ No	IDE extension

Comparison: GitHub MCP vs git-proxy-mcp

Operation	GitHub MCP Server	git-proxy-mcp
Clone 100 files	100 API calls, minutes	1 streaming call, seconds
Run `cargo test`	❌ Impossible	✅ Native in AI's VM
Interactive rebase	❌ Impossible	✅ `git rebase -i`
Branch + edit + commit + push	4+ API calls	Work locally, 1 push
View git log/diff	API calls	Instant local commands
Large repositories	Timeout hell	Shallow clone, sparse checkout
Rate limits	Hit constantly	Just auth, minimal API use

Architecture

Security Model

┌─────────────────────────────────────────────────────────────────┐
│  YOUR PC (credentials stay here, files don't)                   │
│                                                                 │
│  ┌──────────────────┐      ┌─────────────────────────────────┐  │
│  │ git-proxy-mcp    │      │ Your Git Configuration          │  │
│  │                  │◄────►│                                 │  │
│  │ • Auth callbacks │      │ • ~/.gitconfig                  │
│  │ • Object stream  │      │ • SSH keys (ssh-agent)          │  │
│  │ • No file storage│      │ • Credential helpers            │  │
│  └────────┬─────────┘      └─────────────────────────────────┘  │
│           │                                                     │
└───────────┼─────────────────────────────────────────────────────┘
            │
            │ Streaming: files/patches (NOT credentials)
            ▼
┌─────────────────────────────────────────────────────────────────┐
│  AI's VM (files live here, credentials don't)                   │
│                                                                 │
│  ┌──────────────────┐                                           │
│  │ /home/claude/    │  AI workflow (all local, no network):     │
│  │   repo/          │  • git checkout -b feature                │
│  │     .git/        │  • vim src/main.rs                        │
│  │     src/         │  • cargo test                             │
│  │     Cargo.toml   │  • git commit -m "fix bug"                │
│  └──────────────────┘                                           │
└─────────────────────────────────────────────────────────────────┘

What Flows Where

Data	Your PC	Network	AI's VM
Credentials (PAT, SSH keys)	✅ Stays	❌ Never	❌ Never
Repository files	❌ Never stored	Streamed	✅ Lives here
Git objects/history	❌ Never stored	Streamed	✅ Lives here
Commits/patches	❌ Temporary only	Streamed	✅ Created here

MCP Tools

Tier 1: Single-Response Tools

`repo/clone`

Stream a repository to the AI's workspace (small-to-medium repos).

{
  "name": "repo/clone",
  "arguments": {
    "url": "https://github.com/user/private-repo",
    "branch": "main",
    "depth": 1,
    "sparse": ["src/", "Cargo.toml"]
  }
}

Response: Base64-encoded tar.gz with commit SHA and file count.

`repo/push`

Push a git bundle from AI's workspace to remote.

{
  "name": "repo/push",
  "arguments": {
    "url": "https://github.com/user/private-repo",
    "branch": "feature/fix-bug",
    "bundle": "<base64-encoded git bundle>",
    "force": false
  }
}

Response: Pushed commit SHA and branch name.

Tier 2: Chunked Streaming Tools (Large Repos)

For repositories too large to transfer in a single response.

`repo/clone_start`

Start a chunked clone session.

{
  "name": "repo/clone_start",
  "arguments": {
    "url": "https://gitlab.com/org/large-repo",
    "branch": "main",
    "depth": 1,
    "chunk_size": 1048576
  }
}

Response: Session ID, total chunks, total size.

`repo/clone_chunk`

Get a chunk from a streaming session.

{
  "name": "repo/clone_chunk",
  "arguments": {
    "session_id": "stream_abc123",
    "chunk_index": 0
  }
}

Response: Base64-encoded chunk data, is_last flag.

`repo/clone_cancel`

Cancel a streaming session (optional, auto-expires after 1 hour).

{
  "name": "repo/clone_cancel",
  "arguments": {
    "session_id": "stream_abc123"
  }
}

Other Tools

`repo/pull`

Sync new changes from remote to AI's workspace.

{
  "name": "repo/pull",
  "arguments": {
    "url": "https://github.com/user/private-repo",
    "branch": "main",
    "since_commit": "abc123"
  }
}

Response: Streamed delta of changed files.

`repo/diff`

Get diff between two commits.

{
  "name": "repo/diff",
  "arguments": {
    "url": "https://github.com/user/private-repo",
    "base_commit": "abc123",
    "head_commit": "def456"
  }
}

Response: Diff content with stats.

`repo/refs`

List remote branches and tags.

{
  "name": "repo/refs",
  "arguments": {
    "url": "https://github.com/user/private-repo"
  }
}

Response: List of refs with commit SHAs.

Utilities

`helper_script`

Get a Python helper script for processing results (decoding base64, extracting tar.gz).

{
  "name": "helper_script",
  "arguments": {}
}

Response: Python script source code.

Installation

Prerequisites

Configure Git to authenticate without prompting:

# macOS
git config --global credential.helper osxkeychain

# Windows
git config --global credential.helper manager

# Linux
git config --global credential.helper libsecret

For SSH, ensure your key is in ssh-agent:

eval "$(ssh-agent -s)"
ssh-add ~/.ssh/id_ed25519

Usage with Claude Desktop

Add to your Claude Desktop MCP configuration:

{
  "mcpServers": {
    "git-proxy": {
      "command": "git-proxy-mcp",
      "args": []
    }
  }
}

Configuration

Configuration file location:

Linux/macOS: ~/.git-proxy-mcp/config.json
Windows: %USERPROFILE%\.git-proxy-mcp\config.json

{
  "git_identity": {
    "name": "Claude AI",
    "email": "ai-assistant@your-domain.com"
  },
  "security": {
    "allow_force_push": false,
    "protected_branches": ["main", "master"]
  },
  "logging": {
    "level": "warn",
    "audit_log_path": "~/.git-proxy-mcp/audit.log"
  }
}

Configuration Options

Section	Option	Description
`git_identity`	`name`	Name for AI-assisted commits (e.g., "Claude AI")
`git_identity`	`email`	Email for AI-assisted commits
`security`	`allow_force_push`	Allow force pushes (default: false)
`security`	`protected_branches`	Branches that block force push
`security`	`repo_allowlist`	Only allow these repo patterns
`security`	`repo_blocklist`	Block these repo patterns
`logging`	`level`	Log level: trace, debug, info, warn, error
`logging`	`audit_log_path`	Path to audit log file
`timeouts`	`request_timeout_secs`	Git operation timeout (default: 300)
`rate_limits`	`max_burst`	Max burst operations (default: 20)
`rate_limits`	`refill_rate_per_sec`	Sustained rate limit (default: 5.0)

Contributing

Contributions welcome! See CONTRIBUTING.md for guidelines.

Follow the style guide in STYLE.md
Security issues: see SECURITY.md

Licence

GNU General Public License v3.0 — see LICENCE.

Name		Name	Last commit message	Last commit date
Latest commit History 380 Commits
.claude		.claude
.github		.github
.vscode		.vscode
config		config
docs		docs
src		src
tests		tests
.editorconfig		.editorconfig
.gitattributes		.gitattributes
.gitignore		.gitignore
.markdownlint-cli2.jsonc		.markdownlint-cli2.jsonc
.markdownlint.json		.markdownlint.json
CHANGELOG.md		CHANGELOG.md
CODE_OF_CONDUCT.md		CODE_OF_CONDUCT.md
CONTRIBUTING.md		CONTRIBUTING.md
Cargo.toml		Cargo.toml
LICENCE		LICENCE
README.md		README.md
SECURITY.md		SECURITY.md
STYLE.md		STYLE.md
rust-toolchain.toml		rust-toolchain.toml
rustfmt.toml		rustfmt.toml

License

MatejGomboc/git-proxy-mcp

Folders and files

Latest commit

History

Repository files navigation

git-proxy-mcp

The Problem

The Solution

How It Works

Who Is This For?

Comparison: GitHub MCP vs git-proxy-mcp

Architecture

Security Model

What Flows Where

MCP Tools

Tier 1: Single-Response Tools

repo/clone

repo/push

Tier 2: Chunked Streaming Tools (Large Repos)

repo/clone_start

repo/clone_chunk

repo/clone_cancel

Other Tools

repo/pull

repo/diff

repo/refs

Utilities

helper_script

Installation

Prerequisites

Usage with Claude Desktop

Configuration

Configuration Options

Contributing

Licence

Links

About

Topics

Resources

License

Code of conduct

Contributing

Security policy

Uh oh!

Stars

Watchers

Forks

Releases 1

Uh oh!

Contributors 4

Uh oh!

Languages

`repo/clone`

`repo/push`

`repo/clone_start`

`repo/clone_chunk`

`repo/clone_cancel`

`repo/pull`

`repo/diff`

`repo/refs`

`helper_script`