List Dependabot security alerts for a GitHub repository to identify and manage vulnerable dependencies. Supports filtering by state, severity, package, and ecosystem.
MIT
519,163 tools. Updated 2026-09-06 07:17
"Dependabot" matching MCP tools:
- Retrieve a specific Dependabot alert by number and repository to access security vulnerability details and remediation guidance.MIT
- Disable automated Dependabot security fixes for a repository to prevent automatic patching of vulnerabilities.-
- Configure the default repository access level for Dependabot across an organization. Assign permissions for Dependabot to access repositories by default.-
- Retrieve Dependabot security alerts for a repository, filterable by severity, state, package, and more.-
- Enables automated security fixes on a GitHub repository using Dependabot to address vulnerable dependencies.-
Matching MCP Servers
- AlicenseBqualityAmaintenanceSelf-hosted GitHub MCP server for PR, repo file, and Dependabot operations, supporting multiple MCP clients with personal access token auth.7MIT
- AlicenseAqualityBmaintenanceEnables AI assistants to monitor GitHub repository health by calculating health scores, fetching repository metadata, analyzing Dependabot alerts, checking CI/CD status, and retrieving code scanning alerts.271421MIT
- Retrieve Dependabot security alerts for an organization, with filters by severity, state, ecosystem, and more.-
- Update a Dependabot alert's status or details. Specify owner, repo, alert number, and request body.-
- Fetch Dependabot alerts for a GitHub repository to uncover vulnerable package dependencies. Pinpoint security risks in npm, pip, and other ecosystems before they impact your project.MIT
- Assess overall GitHub repository health by calculating a 0-100 score and A-F grade across CI, security, community, maintenance, and freshness. Includes improvement suggestions and historical trend data.MIT
- Installs missing CI/CD, security, dependabot, or maintenance files from a starter into an existing repo. Default dry-run previews the file plan; set dry_run false to apply only necessary changes.MIT
- Install authentication, payment, storage, production, and DevOps plugins into a BackGen project. Each plugin injects source files, registers routes, and updates dependencies.MIT
- Run a comprehensive security scan on a repository using multiple parallel scanners to detect vulnerabilities, secrets, and dependency CVEs, and receive a deduplicated severity-ranked report.MIT
- Compare two package versions to receive a structured upgrade analysis: semver classification, breaking changes, security advisories, migration guides, and a recommendation.MIT
- Retrieve GitHub API metadata including IP ranges, SSH key fingerprints, public keys, and password auth status to support firewall allowlisting, SSH host verification, and infrastructure automation.MIT
- Summarize GitHub security alerts (code scanning, Dependabot, secret scanning) with severity breakdown and recommended fix order.MIT
- Batch-analyze up to 50 package upgrades to get a unified risk report ranked by security, caution, review, likely-safe, and safe, with breaking changes and CVEs.MIT
- Audit a local repository for security CI hygiene, checking gitleaks, CodeQL, dependency audits, license compliance, Dependabot, and secret scanning. Ensures alignment with the Starter Series quality bar.MIT
- Retrieve Dependabot alerts for a repository, grouped by severity, to monitor open, fixed, or dismissed vulnerabilities.MIT
- Check whether Dependabot security updates and version updates are configured for a GitHub repository to identify missing automated dependency updates.MIT
- Audit a GitHub repository's Dependabot configuration and open security alerts to identify REPO-006 and REPO-007 issues.MIT