100/100
Score = points from our five tests (install, handshake, maintenance, docs, license). Not a quality or security rating. Methodology
- Install20/20
- Handshake30/30
- Maintenance25/25
- Docs15/15
- License10/10
Retested 2026-11-12 on mcp-server-git==2026.11.11. The server needs Git 2.31 or later. Windows directory junctions are not yet covered (the vendor says a follow-up release will fix that).
Tool-call test (2026-11-12, direct MCP stdio client, no LLM): pass. 2 of 2 calls passed in the 2026-11-12 fixed-in retest. Evidence: local test run, Nov 12, 2026.
Transport (tested 2026-10-22): stdio
Tested version: 2026.11.11 · tested 2026-11-12
Token cost (estimate): approx. 1399 tokens, cl100k estimate (14 tools, measured 2026-11-12, version 2026.11.11). This is an estimate from our testing of the tool names, descriptions and input schemas, counted with cl100k_base.
Permissions: 8 read, 6 write (state-changing), 0 unclassified · Auth: none · Rate limit: unknown · Pricing unit: unknown #
Auth: none. Rate limit: unknown. Pricing unit: unknown.
git_add— write (state-changing)git_branch— readgit_checkout— write (state-changing)git_commit— write (state-changing)git_create_branch— write (state-changing)git_diff— readgit_diff_staged— readgit_diff_unstaged— readgit_log— readgit_merge— write (state-changing)git_remote— readgit_reset— write (state-changing)git_show— readgit_status— read
handshake and tools listed without a recorded key or OAuth
Score 100/100 · Tools 14 · Token cost approx. 1,399 tokens · Compare · Last tested 2026-11-12 · Version tested 2026.11.11 · Package mcp-server-gitmodelcontextprotocol/servers
Summary: Git (reference, Python) completed an MCP handshake without credentials and exposed 14 tools.
Evidence summary #
- Handshake
- pass
- Tools listed
- 14
- Context cost
- approx. 1399 tokens, cl100k estimate (14 tools, measured 2026-11-12, version 2026.11.11; an estimate) ranking ·add up your servers' context cost
- API key
- No key needed for the tools we called
- Tested
- 2026-11-12
Test results #
| Test | Result | Points | Evidence |
|---|---|---|---|
| install | pass | 20 | uv pip install mcp-server-git (Python venv, Linux) succeeded in 1s. |
| handshake | pass | 30 | MCP initialize +tools/list over stdio succeeded with no credentials; 14 tools listed in 7.9s. |
| maintenance | pass | 25 | Repo pushed 2 days before test; 91,914 GitHub stars. |
| docs | pass | 15 | README over 3,000 chars; install instructions present; mcpServers config example present. Check of the package's own README (PyPI long_description (package README)). |
| license | pass | 10 | MIT (OSI-approved). |
Local-model readiness #
Token cost (estimate): approx. 1399 tokens, cl100k estimate for 14 tools · about 17% of an 8k context. This is an estimate from our testing (counted with cl100k_base).
Small-model friendly (schema heuristic, not a model result): high.
Not tested #
Small-model task runs: Not yet tested.
What we tested and what we didn't #
Tested on 2026-11-12
- Install from the registry
- We connected with no credentials and asked for its tool list: it listed 14 tools (Method details: MCP
initializethentools/list) - Maintenance signals (last push, archived/deprecated status)
- Docs (README length, install and config example)
- License (OSI-approved or not)
- Token cost (estimate)
Not tested
- Security: not audited (no code review, no permission or data-flow analysis)
- Real tasks (no functional task runs yet)
- Behaviour with real credentials or a real account
- Performance, rate limits or load
- Correctness of results beyond the listed tasks
Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.
Known security issues #
Security fix released: GHSA-6hqx-gqrx-c5r2 (high) and GHSA-q74p-4wrc-q7w6 (moderate). Fixed in 2026.11.11 (advisory published 2026-11-11). The server needs Git 2.31 or later. Windows directory junctions are not yet covered (the vendor says a follow-up release will fix that).
Checked on 2026-11-12 for version 2026.11.11 against OSV, GitHub advisories, GitHub repository advisories. Scope: the package itself; dependencies not scanned.
No published advisories found in OSV and GitHub advisories whose affected range includes mcp-server-git 2026.11.11 as of 2026-11-12. This is not a security audit.
Other advisories we checked (6) #
- Tested version 2026.11.11 is not in the affected range of GHSA-5cgr-j3jf-jw3v .
- Tested version 2026.11.11 is not in the affected range of GHSA-9xwc-hfwc-8w59 .
- Tested version 2026.11.11 is not in the affected range of GHSA-j22h-9j4x-23w5 .
- Tested version 2026.11.11 is not in the affected range of GHSA-vjqx-cfc4-9h6v .
- Tested version 2026.11.11 is not in the affected range of GHSA-6hqx-gqrx-c5r2 .
- Tested version 2026.11.11 is not in the affected range of GHSA-q74p-4wrc-q7w6 .
Monthly roundup: MCP security issues, October 2026.
Tool list changes ↻ Tools changed (non-breaking) 2026-11-12 #
Tool list changed since last test (2026-11-11 → 2026-11-12): 1 changed. Confirmed by a re-run with the same arguments.
Show the diff #
- Changed schema:
git_log
Snapshot hash (fingerprint of the tool list) #
cc8e8e7ec6d2: SHA-256 of the canonical tool names, descriptions and input schemas. If it changes, the tool list changed.
Raw test record (JSON) #
{
"name": "mcp-server-git",
"version": "2026.11.11",
"registry": "pypi",
"status": "working",
"tested": "2026-11-12",
"tools_count": 14,
"deprecated": false,
"archived": false,
"tests": {
"install": [
"pass",
20,
"`uv pip install mcp-server-git` (Python venv, Linux) succeeded in 1s."
],
"handshake": [
"pass",
30,
"MCP `initialize` + `tools/list` over stdio succeeded with no credentials; 14 tools listed in 7.9s."
],
"maintenance": [
"pass",
25,
"Repo pushed 2 days before test; 91,914 GitHub stars."
],
"docs": [
"pass",
15,
"README over 3,000 chars; install instructions present; `mcpServers` config example present. Check of the package's own README (PyPI long_description (package README))."
],
"license": [
"pass",
10,
"MIT (OSI-approved)."
]
}
}
Install #
uvx mcp-server-git --repository <path-to-repo>
Pin the version we tested #
uvx mcp-server-git==2026.11.11 --repository <path-to-repo>
pip install mcp-server-git==2026.11.11
tested 2026-11-12. Newer versions may differ and were not tested by us.
{
"mcpServers": {
"git-reference-python": {
"command": "uvx",
"args": [
"mcp-server-git==2026.11.11",
"--repository",
"<path-to-repo>"
]
}
}
}
Tools listed #
git_add, git_branch, git_checkout, git_commit, git_create_branch, git_diff, git_diff_staged, git_diff_unstaged, git_log, git_merge, git_remote, git_reset, git_show, git_status
Tool history: captured Nov 11, 2026. All tool history.
Quick config #
{
"mcpServers": {
"git-reference-python": {
"command": "uvx",
"args": [
"mcp-server-git",
"--repository",
"<path-to-repo>"
]
}
}
}
Add to config Opens the config generator with this server selected.
Setup #
- Install. Run
uv pip install mcp-server-git(Python venv). This is the exact command we ran on 2026-11-12. - Configure. Add the mcpServers entry below to your MCP client config.
- Verify. Restart the client and check that tools/list returns tools (14 in our test).
{
"mcpServers": {
"git-reference-python": {
"command": "uvx",
"args": [
"mcp-server-git",
"--repository",
"<path-to-repo>"
]
}
}
}
Test history #
- 2026-11-12: Retested
- 2026-11-12: Tools changed (non-breaking)
- 2026-11-10: Retested
- 2026-10-22: New
Related: Best Git and GitHub MCP servers · Best dev MCP servers
FAQ #
Is Git (reference, Python) deprecated?
No. mcp-server-git was not deprecated or archived when we last tested it on 2026-11-12.
What replaces Git (reference, Python)?
Nothing; Git (reference, Python) is not deprecated as of 2026-11-12.
Does Git (reference, Python) need an API key?
No. It completed an MCP handshake with no credentials and listed 14 tools.
Embed the badge #
Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.