jcarr
/
gemini-cli
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

GitHub MCP warning (#979)

This commit is contained in:
Eddie Santos 2025-06-12 15:23:45 -07:00 committed by GitHub
parent 6723c72fa5
commit 61d0cc39fd
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/cli/tutorials.md
View File

@ -4,10 +4,14 @@ Master usage of Gemini CLI to automate development tasks.
## Setting up Model Context Protocol (MCP) Servers ## Setting up Model Context Protocol (MCP) Servers
> **A Note on Third-Party MCP Servers:** Before using a third-party MCP server, ensure you trust its source and understand the tools it provides. Your use of third-party servers is at your own risk. > [!NOTE]
> Before using a third-party MCP server, ensure you trust its source and understand the tools it provides. Your use of third-party servers is at your own risk.
### GitHub MCP Server ### GitHub MCP Server
> [!WARNING]
> The GitHub MCP Server has known security vulnerabilities, proceed with caution.
The [GitHub MCP server] provides tools for interacting with GitHub repositories, such as creating issues, commenting on pull requests, and more. The [GitHub MCP server] provides tools for interacting with GitHub repositories, such as creating issues, commenting on pull requests, and more.
[GitHub MCP server]: https://github.com/github/github-mcp-server [GitHub MCP server]: https://github.com/github/github-mcp-server
@ -52,6 +56,9 @@ In your project's root directory, create or open the `.gemini/settings.json` fil
##### Set Your GitHub Token ##### Set Your GitHub Token
> [!CAUTION]
> Using a broadly scoped personal access token that has access to personal and private repositories can lead to information from the private repository leaked into the public repository. We recommend using a fine grained access token that doesn't share access to both public and private repositories.
Use an environment variable to store your PAT. Use an environment variable to store your PAT.
```bash ```bash