You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
httpCmd.Flags().Bool("trust-proxy-headers", false, "Honor X-Forwarded-Host and X-Forwarded-Proto when constructing OAuth resource metadata URLs. Only enable when the server is deployed behind a trusted proxy that sets these headers. Ignored when --base-url is set.")
-`assignees`: Usernames to assign to this issue (string[], optional)
79
+
-`body`: Issue body content (string, optional)
80
+
-`duplicate_of`: Issue number that this issue is a duplicate of. Only used when state_reason is 'duplicate'. (number, optional)
81
+
-`issue_fields`: Issue field values to set or clear. Each item requires 'field_name' and exactly one of 'value', 'field_option_name', or 'delete: true'. (object[], optional)
82
+
-`issue_number`: Issue number to update (number, optional)
83
+
-`labels`: Labels to apply to this issue (string[], optional)
84
+
-`method`: Write operation to perform on a single issue.
85
+
Options are:
86
+
- 'create' - creates a new issue.
87
+
- 'update' - updates an existing issue.
88
+
(string, required)
89
+
-`milestone`: Milestone number (number, optional)
90
+
-`owner`: Repository owner (string, required)
91
+
-`repo`: Repository name (string, required)
92
+
-`state`: New state (string, optional)
93
+
-`state_reason`: Reason for the state change. Ignored unless state is changed. (string, optional)
94
+
-`title`: Issue title (string, optional)
95
+
-`type`: Type of this issue. Only use if the repository has issue types configured. Use list_issue_types tool to get valid type values for the organization. If the repository doesn't support issue types, omit this parameter. (string, optional)
-`is_suggestion`: If true, this issue type change is sent to the API as a suggestion (suggest:true) rather than an applied value. Whether the type is applied or recorded as a proposal is determined by the API. (boolean, optional)
180
202
-`issue_number`: The issue number to update (number, required)
181
203
-`issue_type`: The issue type to set (string, required)
182
204
-`owner`: Repository owner (username or organization) (string, required)
Copy file name to clipboardExpand all lines: docs/insiders-features.md
+21Lines changed: 21 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -67,6 +67,27 @@ The list below is generated from the Go source. It covers tool **inventory and s
67
67
68
68
### `remote_mcp_issue_fields`
69
69
70
+
-**issue_write** - Create or update issue
71
+
-**Required OAuth Scopes**: `repo`
72
+
-`assignees`: Usernames to assign to this issue (string[], optional)
73
+
-`body`: Issue body content (string, optional)
74
+
-`duplicate_of`: Issue number that this issue is a duplicate of. Only used when state_reason is 'duplicate'. (number, optional)
75
+
-`issue_fields`: Issue field values to set or clear. Each item requires 'field_name' and exactly one of 'value', 'field_option_name', or 'delete: true'. (object[], optional)
76
+
-`issue_number`: Issue number to update (number, optional)
77
+
-`labels`: Labels to apply to this issue (string[], optional)
78
+
-`method`: Write operation to perform on a single issue.
79
+
Options are:
80
+
- 'create' - creates a new issue.
81
+
- 'update' - updates an existing issue.
82
+
(string, required)
83
+
-`milestone`: Milestone number (number, optional)
84
+
-`owner`: Repository owner (string, required)
85
+
-`repo`: Repository name (string, required)
86
+
-`state`: New state (string, optional)
87
+
-`state_reason`: Reason for the state change. Ignored unless state is changed. (string, optional)
88
+
-`title`: Issue title (string, optional)
89
+
-`type`: Type of this issue. Only use if the repository has issue types configured. Use list_issue_types tool to get valid type values for the organization. If the repository doesn't support issue types, omit this parameter. (string, optional)
Copy file name to clipboardExpand all lines: docs/streamable-http.md
+12Lines changed: 12 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -59,6 +59,18 @@ The OAuth protected resource metadata's `resource` attribute will be populated w
59
59
60
60
This allows OAuth clients to discover authentication requirements and endpoint information automatically.
61
61
62
+
### Behind a Trusted Proxy (advanced)
63
+
64
+
By default, the server ignores the `X-Forwarded-Host` and `X-Forwarded-Proto` headers when constructing OAuth resource metadata URLs, so an untrusted client cannot influence the URL advertised to MCP clients. For most deployments, setting `--base-url` to the externally visible URL is the right approach.
65
+
66
+
If the server sits behind an internal forwarder that you fully control (for example, an in-cluster gateway that needs to preserve the originating hostname per request), you can opt into honoring those headers:
67
+
68
+
```bash
69
+
github-mcp-server http --trust-proxy-headers
70
+
```
71
+
72
+
Equivalent environment variable: `GITHUB_TRUST_PROXY_HEADERS=1`. Only enable this when the upstream proxy is trusted to set or strip these headers; otherwise prefer `--base-url`. When `--base-url` is set, it always takes precedence and `--trust-proxy-headers` has no effect.
0 commit comments