GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.
Connect Remote server
claude mcp add --transport http github-actions-audit https://unbearable-dev--github-actions-audit.apify.actor/mcp --header "Authorization: Bearer <YOUR_API_KEY>"
{
"mcpServers": {
"github-actions-audit": {
"url": "https://unbearable-dev--github-actions-audit.apify.actor/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}
{
"servers": {
"github-actions-audit": {
"type": "http",
"url": "https://unbearable-dev--github-actions-audit.apify.actor/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}
Settings > Connectors > Add custom connector
URL: https://unbearable-dev--github-actions-audit.apify.actor/mcp
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server asks for a key before it lists its tools. Connect it with your own key to see them.
Headers
| Name | Description |
|---|---|
AuthorizationRequired, secret | Apify API token. Format: 'Bearer <YOUR_APIFY_TOKEN>'. Get yours at https://console.apify.com/account/integrations |
Details
| Endpoint | https://unbearable-dev--github-actions-audit.apify.actor/mcp (Streamable HTTP) |
| First published | 10 Jun 2026 |
| Last updated | 10 Jun 2026 |
| Registry name | io.github.UnbearableDev/github-actions-audit |
More developer tools servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
