Home / Servers / GitHub API / dependabot_list_alerts_for_repo
List Dependabot alerts for a repository
An MCP tool from the GitHub API server, hosted on mcp.hjlabs.in.
List Dependabot alerts for a repository OAuth app tokens and personal access tokens (classic) need the security_events scope to use this endpoint. If this endpoint is only used with public repositories, the token can use the public_repo… [GET /repos/{owner}/{repo}/dependabot/alerts]
Name on the gateway: github_api__dependabot_list_alerts_for_repo · read-only.
Parameters
| Name | Type | Description |
|---|---|---|
owner required | string | The account owner of the repository. The name is not case… |
repo required | string | The name of the repository without the .git extension. The… |
classification | string | A comma-separated list of vulnerability classifications. If specified, only… |
state | string | A comma-separated list of states. If specified, only alerts with these states… |
severity | string | A comma-separated list of severities. If specified, only alerts with these… |
ecosystem | string | A comma-separated list of ecosystems. If specified, only alerts for these… |
package | string | A comma-separated list of package names. If specified, only alerts for these… |
manifest | string | A comma-separated list of full manifest paths. If specified, only alerts for… |
epss_percentage | string | CVE Exploit Prediction Scoring System (EPSS) percentage. Can be specified as… |
has | string | Filters the list of alerts based on whether the alert has the given value. If… |
assignee | string | Filter alerts by assignees. Provide a comma-separated list of user handles… |
scope | development | runtime | The scope of the vulnerable dependency. If specified, only alerts with this… |
relationship | string | A comma-separated list of relationships of the vulnerable dependency to your… |
sort | created | updated | epss_percentage | The property by which to sort the results. created means when the alert was… |
direction | asc | desc | The direction to sort the results by. |
before | string | A cursor, as given in the Link header. If specified, the query only searches… |
after | string | A cursor, as given in the Link header. If specified, the query only searches… |
per_page | integer | The number of results per page (max 100). For more information, see "Using… |
How to call it
Through the Smart Gateway, any client can run it by name with call_tool, or let the gateway find it with search_tools:
{
"name": "github_api__dependabot_list_alerts_for_repo",
"arguments": {
"owner": "…",
"repo": "…"
}
}Or connect the GitHub API server directly, which lists 1,221 tools including this one:
claude mcp add --transport http hj-github-api https://mcp.hjlabs.in/mcp/github-api \
--header "Authorization: Bearer YOUR_API_KEY"Try asking
Use the list dependabot alerts for a repository tool with owner set to ….