GitHub MCP Server now includes dependency vulnerability scanning via a new Dependabot toolset, currently in public preview. It allows AI coding agents in MCP-compatible IDEs to scan code changes for vulnerable dependencies before committing or opening a pull request. The toolset queries the GitHub Advisory Database and returns affected packages, severity levels, and recommended fixed versions. An optional advanced-security plugin provides a more tailored experience. Available for repositories with Dependabot alerts enabled, with setup instructions for GitHub Copilot CLI and VS Code.
Sort: