# io.github.Dave-London/pare-github (npm · @paretools/github)

Pare GitHub ג€” Structured GitHub operations (PRs, issues, actions) as typed JSON.

- Trust score: 80/100 (high trust)
- Change this week: +34
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@paretools/github`: 80/100 (this document), [markdown](https://verifymcp.io/servers/dave-london-pare-github/paretools-github.md), [page](https://verifymcp.io/servers/dave-london-pare-github/paretools-github)

## Channel facts

- Registry: `npm`
- Package: `@paretools/github`
- Version: `0.8.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to Dave-London/Pare).
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 4 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1623 tokens (~108/item across 15 items; 15 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add dave-london-pare-github -- npx -y @paretools/github
```

### Codex

```bash
codex mcp add dave-london-pare-github -- npx -y @paretools/github
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dave-london-pare-github": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@paretools/github"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add dave-london-pare-github --command npx --arg -y --arg @paretools/github
```

### Hermes

```yaml
mcp_servers:
  dave-london-pare-github:
    command: "npx"
    args: ["-y", "@paretools/github"]
```

### Other

```json
{
  "mcpServers": {
    "dave-london-pare-github": {
      "command": "npx",
      "args": [
        "-y",
        "@paretools/github"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 80, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-02 (score 79, +53)

- [security improvement] Install scripts: unverified → pass
- [security improvement] Provenance: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [security] The attested source repository moved: Dave-London/Pare
- [functional regression] Capabilities: pass → unverified
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional] Licence: MIT

### 2026-08-01 (score 26, −10)

- [security regression] Malware scan: pass → unverified
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] MCP protocol: unverified → pass

### 2026-07-31 (score 36, +8)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 28, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (15)

### `pr-view` (~91 tokens)

PR View

Views a pull request by number. Returns structured data with state, checks, review decision, and diff stats. Use instead of running `gh pr view` in the terminal.

Input parameters:

- `compact` (boolean): Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
- `number` (number, required): Pull request number
- `path` (string): Repository path (default: cwd)

Output parameters:

- `additions` (number)
- `baseBranch` (string)
- `body`
- `changedFiles` (number)
- `checks` (array)
- `deletions` (number)
- `headBranch` (string)
- `mergeable` (string)
- `number` (number)
- `reviewDecision` (string)
- `state` (string)
- `title` (string)
- `url` (string)

### `pr-list` (~137 tokens)

PR List

Lists pull requests with optional filters. Returns structured list with PR number, state, title, author, and branch. Use instead of running `gh pr list` in the terminal.

Input parameters:

- `author` (string): Filter by author username
- `compact` (boolean): Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
- `label` (string): Filter by label
- `limit` (number): Maximum number of PRs to return (default: 30)
- `path` (string): Repository path (default: cwd)
- `state` (string): Filter by PR state (default: open)

Output parameters:

- `prs` (array)
- `total` (number)

### `pr-create` (~111 tokens)

PR Create

Creates a new pull request. Returns structured data with PR number and URL. Use instead of running `gh pr create` in the terminal.

Input parameters:

- `base` (string): Base branch (default: repo default branch)
- `body` (string, required): Pull request body/description
- `draft` (boolean): Create as draft PR
- `head` (string): Head branch (default: current branch)
- `path` (string): Repository path (default: cwd)
- `title` (string, required): Pull request title

Output parameters:

- `number` (number)
- `url` (string)

### `pr-merge` (~115 tokens)

PR Merge

Merges a pull request by number. Returns structured data with merge status, method, and URL. Use instead of running `gh pr merge` in the terminal.

Input parameters:

- `compact` (boolean): Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
- `deleteBranch` (boolean): Delete branch after merge
- `method` (string): Merge method (default: squash)
- `number` (number, required): Pull request number
- `path` (string): Repository path (default: cwd)

Output parameters:

- `merged` (boolean)
- `method` (string)
- `number` (number)
- `url` (string)

### `pr-comment` (~69 tokens)

PR Comment

Adds a comment to a pull request. Returns structured data with the comment URL. Use instead of running `gh pr comment` in the terminal.

Input parameters:

- `body` (string, required): Comment text
- `number` (number, required): Pull request number
- `path` (string): Repository path (default: cwd)

Output parameters:

- `url` (string)

### `pr-review` (~107 tokens)

PR Review

Submits a review on a pull request (approve, request-changes, or comment). Returns structured data with the review event and URL. Use instead of running `gh pr review` in the terminal.

Input parameters:

- `body` (string): Review body (required for request-changes and comment)
- `event` (string, required): Review type: approve, request-changes, or comment
- `number` (number, required): Pull request number
- `path` (string): Repository path (default: cwd)

Output parameters:

- `event` (string)
- `number` (number)
- `url` (string)

### `pr-update` (~144 tokens)

PR Update

Updates pull request metadata (title, body, labels, assignees). Returns structured data with PR number and URL. Use instead of running `gh pr edit` in the terminal.

Input parameters:

- `addAssignees` (array): Assignees to add
- `addLabels` (array): Labels to add
- `body` (string): New pull request body/description
- `number` (number, required): Pull request number
- `path` (string): Repository path (default: cwd)
- `removeAssignees` (array): Assignees to remove
- `removeLabels` (array): Labels to remove
- `title` (string): New pull request title

Output parameters:

- `number` (number)
- `url` (string)

### `issue-view` (~89 tokens)

Issue View

Views an issue by number. Returns structured data with state, labels, assignees, and body. Use instead of running `gh issue view` in the terminal.

Input parameters:

- `compact` (boolean): Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
- `number` (number, required): Issue number
- `path` (string): Repository path (default: cwd)

Output parameters:

- `assignees` (array)
- `body`
- `createdAt` (string)
- `labels` (array)
- `number` (number)
- `state` (string)
- `title` (string)
- `url` (string)

### `issue-list` (~139 tokens)

Issue List

Lists issues with optional filters. Returns structured list with issue number, state, title, labels, and assignees. Use instead of running `gh issue list` in the terminal.

Input parameters:

- `assignee` (string): Filter by assignee username
- `compact` (boolean): Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
- `label` (string): Filter by label
- `limit` (number): Maximum number of issues to return (default: 30)
- `path` (string): Repository path (default: cwd)
- `state` (string): Filter by issue state (default: open)

Output parameters:

- `issues` (array)
- `total` (number)

### `issue-create` (~78 tokens)

Issue Create

Creates a new issue. Returns structured data with issue number and URL. Use instead of running `gh issue create` in the terminal.

Input parameters:

- `body` (string, required): Issue body/description
- `labels` (array): Labels to apply
- `path` (string): Repository path (default: cwd)
- `title` (string, required): Issue title

Output parameters:

- `number` (number)
- `url` (string)

### `issue-close` (~92 tokens)

Issue Close

Closes an issue with an optional comment and reason. Returns structured data with issue number, state, and URL. Use instead of running `gh issue close` in the terminal.

Input parameters:

- `comment` (string): Closing comment
- `number` (number, required): Issue number
- `path` (string): Repository path (default: cwd)
- `reason` (string): Close reason: "completed" or "not planned"

Output parameters:

- `number` (number)
- `state` (string)
- `url` (string)

### `issue-comment` (~67 tokens)

Issue Comment

Adds a comment to an issue. Returns structured data with the comment URL. Use instead of running `gh issue comment` in the terminal.

Input parameters:

- `body` (string, required): Comment text
- `number` (number, required): Issue number
- `path` (string): Repository path (default: cwd)

Output parameters:

- `url` (string)

### `issue-update` (~140 tokens)

Issue Update

Updates issue metadata (title, body, labels, assignees). Returns structured data with issue number and URL. Use instead of running `gh issue edit` in the terminal.

Input parameters:

- `addAssignees` (array): Assignees to add
- `addLabels` (array): Labels to add
- `body` (string): New issue body/description
- `number` (number, required): Issue number
- `path` (string): Repository path (default: cwd)
- `removeAssignees` (array): Assignees to remove
- `removeLabels` (array): Labels to remove
- `title` (string): New issue title

Output parameters:

- `number` (number)
- `url` (string)

### `run-view` (~90 tokens)

Run View

Views a workflow run by ID. Returns structured data with status, conclusion, jobs, and workflow details. Use instead of running `gh run view` in the terminal.

Input parameters:

- `compact` (boolean): Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
- `id` (number, required): Workflow run ID
- `path` (string): Repository path (default: cwd)

Output parameters:

- `conclusion`
- `createdAt` (string)
- `headBranch` (string)
- `id` (number)
- `jobs` (array)
- `name` (string)
- `status` (string)
- `url` (string)
- `workflowName` (string)

### `run-list` (~121 tokens)

Run List

Lists workflow runs with optional filters. Returns structured list with run ID, status, conclusion, and workflow details. Use instead of running `gh run list` in the terminal.

Input parameters:

- `branch` (string): Filter by branch name
- `compact` (boolean): Auto-compact when structured output exceeds raw CLI tokens. Set false to always get full schema.
- `limit` (number): Maximum number of runs to return (default: 20)
- `path` (string): Repository path (default: cwd)
- `status` (string): Filter by run status

Output parameters:

- `runs` (array)
- `total` (number)

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/dave-london-pare-github/paretools-github#diagnostics

## Score history

- 2026-08-03: 80
- 2026-08-02: 79
- 2026-08-01: 26
- 2026-07-31: 36
- 2026-07-30: 28
- 2026-07-28: 46
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/@paretools/github
- Socket report: https://socket.dev/npm/package/@paretools/github
- Repository: https://github.com/Dave-London/Pare
- Changelog RSS feed: https://verifymcp.io/servers/dave-london-pare-github/paretools-github/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/dave-london-pare-github/paretools-github/changelog.json
- HTML version of this page: https://verifymcp.io/servers/dave-london-pare-github/paretools-github