feat: read-only flag

Author: SamMorrowDrums

cmd/github-mcp-server/main.go

@@ -31,12 +31,13 @@ var (
 		Long:  `Start a server that communicates via standard input/output streams using JSON-RPC messages.`,
 		Run: func(cmd *cobra.Command, args []string) {
 			logFile := viper.GetString("log-file")
+			readOnly := viper.GetBool("read-only")
 			logger, err := initLogger(logFile)
 			if err != nil {
 				stdlog.Fatal("Failed to initialize logger:", err)
 			}
 			logCommands := viper.GetBool("enable-command-logging")
-			if err := runStdioServer(logger, logCommands); err != nil {
+			if err := runStdioServer(readOnly, logger, logCommands); err != nil {
 				stdlog.Fatal("failed to run stdio server:", err)
 			}
 		},
@@ -47,10 +48,12 @@ func init() {
 	cobra.OnInitialize(initConfig)
 
 	// Add global flags that will be shared by all commands
+	rootCmd.PersistentFlags().Bool("read-only", false, "Restrict the server to read-only operations")
 	rootCmd.PersistentFlags().String("log-file", "", "Path to log file")
 	rootCmd.PersistentFlags().Bool("enable-command-logging", false, "When enabled, the server will log all command requests and responses to the log file")
 
 	// Bind flag to viper
+	viper.BindPFlag("read-only", rootCmd.PersistentFlags().Lookup("read-only"))
 	viper.BindPFlag("log-file", rootCmd.PersistentFlags().Lookup("log-file"))
 	viper.BindPFlag("enable-command-logging", rootCmd.PersistentFlags().Lookup("enable-command-logging"))
 
@@ -81,7 +84,7 @@ func initLogger(outPath string) (*log.Logger, error) {
 	return logger, nil
 }
 
-func runStdioServer(logger *log.Logger, logCommands bool) error {
+func runStdioServer(readOnly bool, logger *log.Logger, logCommands bool) error {
 	// Create app context
 	ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
 	defer stop()
@@ -93,8 +96,8 @@ func runStdioServer(logger *log.Logger, logCommands bool) error {
 	}
 	ghClient := gogithub.NewClient(nil).WithAuthToken(token)
 
-	// Create server
-	ghServer := github.NewServer(ghClient)
+	// Create
+	ghServer := github.NewServer(ghClient, readOnly)
 	stdioServer := server.NewStdioServer(ghServer)
 
 	stdLogger := stdlog.New(logger.Writer(), "stdioserver", 0)

pkg/github/server.go

@@ -14,7 +14,7 @@ import (
 )
 
 // NewServer creates a new GitHub MCP server with the specified GH client and logger.
-func NewServer(client *github.Client) *server.MCPServer {
+func NewServer(client *github.Client, readOnly bool) *server.MCPServer {
 	// Create a new MCP server
 	s := server.NewMCPServer(
 		"github-mcp-server",
@@ -33,27 +33,33 @@ func NewServer(client *github.Client) *server.MCPServer {
 
 	// Add GitHub tools - Issues
 	s.AddTool(getIssue(client))
-	s.AddTool(addIssueComment(client))
 	s.AddTool(searchIssues(client))
+	if !readOnly {
+		s.AddTool(addIssueComment(client))
+	}
 
 	// Add GitHub tools - Pull Requests
 	s.AddTool(getPullRequest(client))
 	s.AddTool(listPullRequests(client))
-	s.AddTool(mergePullRequest(client))
 	s.AddTool(getPullRequestFiles(client))
 	s.AddTool(getPullRequestStatus(client))
-	s.AddTool(updatePullRequestBranch(client))
 	s.AddTool(getPullRequestComments(client))
 	s.AddTool(getPullRequestReviews(client))
+	if !readOnly {
+		s.AddTool(mergePullRequest(client))
+		s.AddTool(updatePullRequestBranch(client))
+	}
 
 	// Add GitHub tools - Repositories
-	s.AddTool(createOrUpdateFile(client))
 	s.AddTool(searchRepositories(client))
-	s.AddTool(createRepository(client))
 	s.AddTool(getFileContents(client))
-	s.AddTool(forkRepository(client))
-	s.AddTool(createBranch(client))
 	s.AddTool(listCommits(client))
+	if !readOnly {
+		s.AddTool(createOrUpdateFile(client))
+		s.AddTool(createRepository(client))
+		s.AddTool(forkRepository(client))
+		s.AddTool(createBranch(client))
+	}
 
 	// Add GitHub tools - Search
 	s.AddTool(searchCode(client))