Agentic SDLC MCP

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/sakuracianna-agentic-sdlc-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 26, 2026.

Tools

12 read · 1 write · 0 delete

Secrets

1 (API keys, tokens or passwords)

Install scripts

None found

Runs as

Node.js package

Tools (13)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• agent_handoff_packetAgent Handoff Packetread-only

  Generate a compact handoff packet so another AI agent can continue SDLC work. Use when wrapping up a session, before handing off to a specialised agent, or when context is nearing its limit. Args: - owner, repo: Repository coordinates. - issueNumber (number?): Issue being worked on. - pullNumber (number?): PR being worked on. - releaseRef (string?): Release ref being worked on. - currentStatus (string?): Optional caller-authored status; system evidence is used when omitted. - goal / nonGoals / completedActions / decisions: Optional caller-authored handoff context. - nextSteps (…

• branch_protection_statusBranch Protection Statusread-only

  Read classic branch protection AND repository rulesets for a branch (defaults to the repo's default branch). Required token scope: `repo` (or `public_repo` for public-only repos) with admin/read access to branch protection. Args: - owner, repo: Repository coordinates. - branch: Optional. Falls back to the repository's default branch. Returns: Required reviews / status checks / force-push / deletion settings from both classic protection and rulesets, findings by severity, verification gaps, and a protected/partially_protected/unprotected/unknown conclusion.

• create_issue_setCreate GitHub Issue Set

  Split an SDLC plan into GitHub issues. Supports dryRun (default TRUE) - preview mode. SAFETY: dryRun defaults to true. You MUST explicitly pass dryRun:false to create issues. Dry-run output is designed to work as a human pre-write confirmation page: it includes a per-issue preview (title/labels/truncated body), warnings for issues missing labels, missing/short bodies, or titles exceeding GitHub's 256-character limit, and the exact repo coordinates that would be written to. Args: - owner, repo: Repository coordinates. - titlePrefix (string?): Prefix for every issue title. - issues (arr…

• create_pr_summaryCreate PR Summaryread-only

  Generate a structured PR summary from the pull request diff and metadata. The summary includes: change overview, affected files, test coverage signals, risks, review checklist, and release notes draft. Args: - owner, repo: Repository coordinates. - pullNumber (number): The PR to summarise. Returns: Markdown PR summary + structured metadata.

• plan_from_contextGenerate SDLC Plan from Contextread-only

  Generate a structured Agentic SDLC plan (Plan->Create->Test->Review->Optimize->Secure) from a goal and repo context. The plan is tailored to a `workType` (docs/feature/bugfix/refactor/security/release/infra) -- e.g. docs tasks do not default to requiring code unit tests, while bugfix tasks always include repro + regression tests. Template-based -- no LLM call needed. Reads basic repo metadata (and the repo's actual label list, to avoid inventing labels that don't exist) to enrich the plan. Args: - goal (string): The user's goal or feature description (required). - owner, repo: Repo coord…

• prepare_work_itemPrepare Work Item Briefread-only

  Generate a risk-aware implementation brief for a GitHub issue. The brief combines bounded Issue/comment evidence, repository policy, confirmed package scripts, related paths, and recent PR history to produce explainable risk, defensive requirements, negative scenarios, rollback, observability, and a safe handoff prompt. Args: - owner, repo: Repository coordinates. - issueNumber (number): The issue to prepare. - includeRelatedFiles (boolean): Heuristically list related file paths. Default: false. Explicit paths are checked on the default branch, actual adjacent tests are discovered w…

• quality_gate_statusQuality Gate Statusread-only

  Evaluate real merge-gate evidence for a pull request or CI evidence for a git ref. Args: - owner, repo: Repository coordinates. - pullNumber (number?): PR number (preferred); evaluates CI, reviews, policy, labels, and mergeability. - ref (string?): Branch name or commit SHA; evaluates CI only. - blockingLabels (string[]): Exact case-insensitive PR labels that block merging. Pass [] to disable. Returns: A structured evidence packet, blockers, warnings, next actions, and a conservative conclusion.

• release_readiness_checkRelease Readiness Checkread-only

  Pre-release assessment: CI status, open bugs, CHANGELOG, release checklist, rollback template. Required token scopes: - repo, or public_repo for public-only repos (checks, issues, and file contents access) Args: - owner, repo: Repository coordinates. - baseRef (string?): Deprecated compatibility field; ignored. - headRef (string?): Branch, tag, or commit SHA to release (defaults to default branch). - pullNumber (number?): Uses the PR head commit for CI status. Returns: isReady flag, blocking issues, CI status, docs check, release checklist, rollback template.

• repo_contextGet Repository Contextread-only

  Read baseline context for a GitHub repository, including metadata, README summary, package.json summary, tech stack, common scripts, workflow file names, governance signals, agent instruction file summaries, open issues, and open PRs. Use this tool at the start of any SDLC workflow to understand the codebase before planning or creating work items. Args: - owner (string?): GitHub org or user. Defaults to GITHUB_OWNER env var. - repo (string?): Repository name. Defaults to GITHUB_REPO env var. - includeReadme (boolean): Include truncated README. Default: true. - includePackageJson (boo…

• review_pr_against_standardReview PR Against SDLC Standardread-only

  Review a pull request against Agentic SDLC standards. Standards: - basic: Core checks (tests, description, draft status, commit count) - strict: basic + large diff detection, missing docs - security-focused: strict + mature secret-scanner CI evidence + supplemental patch heuristics, .env files, lockfile changes, dist files Ownership check (independent of standard, runs when checkOwnership is true and a CODEOWNERS file exists): Matches changed files against .github/CODEOWNERS (or CODEOWNERS / docs/CODEOWNERS), and flags any matched owner who is neither the PR author, a requested rev…

• sdlc_evidence_packetSDLC Evidence Packetread-only

  Generate a versioned, read-only evidence packet for one Issue, pull request, or release ref. Repository text is treated as untrusted data. Caller assertions remain unverified. Markdown is rendered from the structured packet and high-confidence prompt injection is omitted from the Markdown channel.

• security_triageSecurity Triageread-only

  Read GitHub security alerts (code scanning, Dependabot, secret scanning) and produce a triage report. Required token scopes: - security_events, or public_repo for public-only repos (Code Scanning) - security_events, or public_repo for public-only repos (Dependabot) - repo or security_events (Secret Scanning) Args: - owner, repo: Repository coordinates. - includeCodeScanning / includeDependabot / includeSecretScanning: Default true. Returns: Alert summary, severity breakdown, recommended fix order, suggested issues.

• workflow_permissions_auditWorkflow Permissions Auditread-only

  Scan `.github/workflows/*.yml` for `permissions` declarations (top-level and per-job) and flag least-privilege gaps. Required token scope: `repo` (or `public_repo` for public-only repos) with read access to repository contents. Args: - owner, repo: Repository coordinates. - ref: Optional. Branch, tag, or SHA to read workflow files from. Falls back to the repository's default branch. Flags: - No `permissions` declared anywhere in the file (workflow or job level) -- relies on the repo/org default token scope instead of an explicit declaration. - `permissions: write-all` (top-level or …

Signals

Stars

1

Forks

0

Open issues

5

Last commit

Oct 14, 2026 (14 days ago)

Last release

Oct 14, 2026 (14 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.github.SakuraCianna/agentic-sdlc-mcp

Version

1.11.0

Auth

API key

Packages

npm agentic-sdlc-mcp

License

MIT

Repository

github.com/SakuraCianna/agentic-sdlc-mcp

Website

github.com/SakuraCianna/agentic-sdlc-mcp#readme

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql