Evaluation record · mcp-server-git

MCP Git Server

v2026.6.16

Anthropic

MCPgitversion-controlmcpmodel-context-protocol

Strong

About This MCP

Official MCP reference server for local Git operations (commits, branches, version control). One of the seven reference servers still maintained after the 2025-05-29 archival; governance moved to the Agentic AI Foundation (Linux Foundation) on 2025-12-09 (stable spec 2025-11-25; 2026-07-28 revision at RC stage). CVE-2025-68143/68144/68145 (path traversal, argument injection; published 2026-01-20) are fixed in 2025.9.25 and 2025.12.18; current release 2026.6.16 includes all fixes.

Last Evaluated: July 9, 2026

Official Website

Trust Vector Analysis

Dimension Breakdown

🚀Performance & Reliability

git operation success rate

Operation success testing

Evidence

MCP Git Server — Reliable Git operations using native Git CLI or libraries

highVerified: 2026-07-09

repository parsing accuracy

Parsing accuracy assessment

Evidence

Git Implementation — Uses standard Git tools for accurate repository analysis

highVerified: 2026-07-09

large repository handling

Scalability testing

Evidence

Implementation Review — Performance may degrade with very large repositories (>100k commits)

mediumVerified: 2026-07-09

merge conflict handling

Conflict handling testing

Evidence

Git Conflict Resolution — Properly detects and reports merge conflicts for manual resolution

highVerified: 2026-07-09

error recovery

Error handling testing

Evidence

MCP Implementation — Graceful error handling with detailed error messages

highVerified: 2026-07-09

🛡️Security

repository access control

Access control testing

Evidence

File System Permissions — Respects local file system permissions but AI can access any readable repo

The Hacker News - Three Flaws in Anthropic MCP Git Server — CVE-2025-68143 (path traversal in git_init, CVSS 8.8, fixed in 2025.9.25) and CVE-2025-68145 (path traversal bypassing the --repository restriction, CVSS 7.1, fixed in 2025.12.18); both patched in current release 2026.6.16

highVerified: 2026-07-09

destructive operation risk

Operation authorization testing

Evidence

Security Analysis — AI can perform force pushes, branch deletions, and history rewrites

The Hacker News - Three Flaws in Anthropic MCP Git Server — CVE-2025-68144: argument injection via git_diff/git_checkout (CVSS 8.1) enabling arbitrary file overwrite/code execution via prompt injection; fixed in 2025.12.18, patched in current release 2026.6.16. Score unchanged: flaws are patched upstream, but they illustrate the destructive-operation risk surface

highVerified: 2026-07-09

credential exposure risk

Credential security analysis

Evidence

Git Credential Storage — Uses local Git credentials; potential for accidental exposure to LLM

mediumVerified: 2026-07-09

commit signing support

Signing capability review

Evidence

Git Commit Signing — Supports GPG signing if configured in local Git setup

mediumVerified: 2026-07-09

branch protection respect

Protection mechanism testing

Evidence

Implementation Review — Local operations only; remote branch protections enforced by remote server

mediumVerified: 2026-07-09

🔒Privacy & Compliance

code exposure

Data flow analysis

Evidence

MCP Data Flow — Repository content and commit history sent to LLM provider

highVerified: 2026-07-09

sensitive data detection

Privacy controls assessment

Evidence

Security Analysis — No built-in secret detection; risk of exposing API keys in commits

mediumVerified: 2026-07-09

commit history privacy

History privacy review

Evidence

Git Log Access — Full commit history including author names and emails accessible

highVerified: 2026-07-09

third party data sharing

Data sharing analysis

Evidence

LLM Provider Policies — Repository data shared with LLM provider per their privacy policy

highVerified: 2026-07-09

gitignore respect

File filtering assessment

Evidence

Implementation Review — Respects .gitignore for operations but can still read ignored files

mediumVerified: 2026-07-09

👁️Trust & Transparency

documentation quality

Documentation completeness review

Evidence

MCP Git Docs — Comprehensive documentation with examples and best practices

highVerified: 2026-07-09

operation visibility

Logging and traceability assessment

Evidence

Git and MCP Logging — All operations logged in MCP and Git reflog provides full audit trail

highVerified: 2026-07-09

open source transparency

Source code review

Evidence

GitHub Repository — Fully open source implementation with MIT license

highVerified: 2026-07-09

command coverage clarity

API documentation review

Evidence

MCP Server Documentation — Clear documentation of supported Git commands and operations

mediumVerified: 2026-07-09

⚙️Operational Excellence

ease of setup

Setup complexity assessment

Evidence

MCP Setup Guide — Simple setup requiring only Git installation on local system

highVerified: 2026-07-09

operation performance

Performance benchmarking

Evidence

Git Performance — Fast operations for most repos; performance depends on repository size

mediumVerified: 2026-07-09

reliability

Stability analysis

Evidence

Git Stability — Built on mature, battle-tested Git tooling

highVerified: 2026-07-09

feature coverage

Feature completeness assessment

Evidence

MCP Git Server — Covers commits, branches, logs, diffs, and most common Git operations

highVerified: 2026-07-09

community adoption

Community activity analysis

Evidence

GitHub Community — Popular MCP server for development workflows

Anthropic - Donating MCP to the Agentic AI Foundation — git is one of the seven reference servers still actively maintained after the 2025-05-29 archival; MCP governance moved to the Agentic AI Foundation under the Linux Foundation on 2025-12-09

PyPI - mcp-server-git — Latest release 2026.6.16 (published 2026-06-17); still listed among the seven maintained reference servers in modelcontextprotocol/servers README (repo ~88,300 stars, not archived)

mediumVerified: 2026-07-09

Strengths

+Comprehensive Git operation support (commits, branches, merges, logs)
+Built on mature and reliable Git infrastructure
+Excellent for development workflows and version control automation
+Full operation auditability through Git reflog and MCP logs
+Open source implementation actively maintained under the MCP project (Agentic AI Foundation)
+Simple setup requiring only local Git installation

Limitations

!Repository code and history exposed to LLM provider APIs
!Risk of destructive operations (force push, branch deletion, history rewrite); no safeguards against accidental commits or pushes
!No built-in secret detection or sensitive data filtering
!Can access Git credentials stored on local system
!Performance may degrade with very large repositories
!SECURITY: three CVEs published 2026-01-20 (CVE-2025-68143 path traversal in git_init; CVE-2025-68144 argument injection in git_diff/git_checkout; CVE-2025-68145 path traversal bypassing --repository); fixed in 2025.9.25 and 2025.12.18 - versions older than 2025.12.18 remain vulnerable, upgrade to current release
!STATUS 2026-07-09: actively maintained reference server (one of 7 retained after the 2025-05-29 archival); latest PyPI release 2026.6.16 (2026-06-17) includes all CVE fixes; governance under the Agentic AI Foundation (Linux Foundation, 2025-12-09)

Metadata

license: MIT

supported platforms

0: All platforms with Git installed

programming languages

0: TypeScript

1: Python

mcp version: 1.0

github repo: https://github.com/modelcontextprotocol/servers

github stars: 88259

api dependency: Git CLI

authentication: Uses local Git credentials

first release: 2024-11

maintained by: MCP project (Agentic AI Foundation / Linux Foundation since 2025-12-09)

status: Official - Active

transport types

0: stdio

installation methods

0: pip

Use Case Ratings

code generation

Excellent for AI-assisted development with version control integration

customer support

Limited applicability; mainly useful for technical support on code repositories

content creation

Good for managing documentation and content versioning in Git

data analysis

Useful for analyzing commit history, code churn, and repository metrics

research assistant

Great for researching code history, finding changes, and tracking evolution

legal compliance

Risk of exposing proprietary code; requires careful access controls

healthcare

Low suitability due to risk of exposing sensitive healthcare code

financial analysis

Moderate risk; requires careful repository access controls

education

Excellent for teaching Git, version control, and collaborative development

creative writing

Good for version controlling writing projects and tracking revisions