RXed AI News

GitHub — can an agent use it?

The index's protocol benchmark: an official remote MCP server GA since 04/09/2025, published OpenAPI descriptions, and Terms that explicitly permit machine accounts. The gap is money — plans and Marketplace apps are still bought by a human in the UI.

FIND & RETRIEVE9.2/10Can an agent get correct information?

Machine-readable surface9/10

docs.github.com honours `Accept: text/markdown` and exposes a dedicated docs API (/api/pagelist, /api/article, /api/search/v1) alongside raw.githubusercontent.com, Atom activity feeds and webhooks, though anonymous HTML access is now throttled to 60 req/h. source

Information retrieval quality9/10

Every number an agent needs is on the public surface with figures attached — $0/$4/$21 per user per month, Codespaces at $0.18/hour compute and $0.07/GB storage, 5,000 req/h authenticated, plus 90-day per-component uptime on githubstatus.com. source

Documentation for machines9.5/10

Date-versioned REST reference (X-GitHub-Api-Version), an auto-generated official OpenAPI 3.0/3.1 description in github/rest-api-description, a dated changelog, and a breaking-changes page listing all ~20 changes in version 2026-03-10 with per-endpoint migration instructions. source

ACT & TRANSACT8.5/10Can an agent do the job?

Action coverage9.5/10

REST plus GraphQL cover repos, issues, PRs, Actions, Codespaces, Projects, Copilot seat assignment and — since 04/06/2026 — full budget create/update/delete; the residual UI-only actions are plan purchase and Marketplace checkout, and there is no test-mode mirror of production. source

Agent protocol support10/10

Official github/github-mcp-server with a GA hosted remote endpoint at api.githubcopilot.com/mcp (GA 04/09/2025), 21 toolsets, /readonly and X-MCP-Toolsets scoping, tracking the next MCP spec as of 23/07/2026 — plus the GitHub MCP Registry and the AGENTS.md convention. source

Access & auth friction9/10

Fine-grained PATs are self-serve in minutes with per-repository and per-permission scoping and a 30-day default expiry, GitHub Apps issue short-lived installation tokens from a JWT, and the remote MCP server completes an OAuth flow; the only friction is that org owners can require approval for fine-grained tokens. source

Agent payment capability5/10

GitHub supports no agent payment protocol (no ACP, AP2, MPP or x402) and plan/Marketplace purchase is hosted-checkout only, but real money does move via API — the GraphQL createSponsorship/createSponsorships mutations and Copilot seat provisioning both incur charges, and the GA budgets API gives programmatic spend caps and usage audit. source

Cost & rate fairness9/10

5,000 req/h for an authenticated PAT on the free tier, 12,500–15,000/h for GitHub App installations on Enterprise Cloud, 1,000/h per repo for GITHUB_TOKEN, with secondary limits published (100 concurrent, 900 points/min/endpoint, 80 content-creating req/min) and no price premium on automated traffic. source

TRUST & DURABILITY9.0/10Will it still work next quarter?

Permission & ToS stance9/10

ToS section B.3 states "We do permit machine accounts" (one free machine account per human) and the Acceptable Use Policy explicitly excludes API use from its scraping ban — "Scraping does not refer to the collection of information through our API" — with no litigation history against agents; the caps are on excessive bulk activity and token sharing. source

Reliability & continuity9/10

githubstatus.com publishes per-component 90-day uptime (API Requests 99.91%, Actions 99.73%) with RSS/Atom and webhooks, monthly availability reports quantify each incident (June 2026: six incidents, worst ~9% API auth failures over 1h20m), and REST versions get a ≥24-month support window with Deprecation/Sunset headers — 2022-11-28 runs until 10/03/2028. source

Sources

Point-in-time assessment — services change terms, prices and APIs often. That volatility is itself scored under Reliability & continuity. Re-verified at least quarterly.

• docs.github.com/rest — Official REST API reference — endpoint coverage, per-endpoint auth and rate-limit notes, X-GitHub-Api-Version versioning (accessed 2026-07-25)
• docs.github.com/en/rest/using-the-rest-api/rate-lim… — Official rate limits: 60/h unauthenticated, 5,000/h authenticated, 12,500–15,000/h App installations, 1,000/h GITHUB_TOKEN per repo, secondary limits (accessed 2026-07-25)
• docs.github.com/en/site-policy/github-terms/github-… — Official ToS — section H API Terms and section B.3 machine accounts ("We do permit machine accounts", one free machine account) (accessed 2026-07-25)
• docs.github.com/en/site-policy/acceptable-use-polic… — Official AUP — scraping definition explicitly excludes API collection; bans excessive automated bulk activity and spam (accessed 2026-07-25)
• github.com/github/github-mcp-server/blob/main/docs/… — Official MCP server docs — remote endpoint api.githubcopilot.com/mcp/, 21 toolsets, /readonly path and X-MCP-* headers (accessed 2026-07-25)
• github.blog/changelog/2025-09-04-remote-github-mcp-… — GitHub changelog — remote MCP server reached GA on 04/09/2025 after public preview from 12/06/2025 (accessed 2026-07-25)
• github.blog/changelog/2026-07-23-github-mcp-server-… — GitHub changelog 23/07/2026 — MCP server moved to the stateless next spec ahead of its 28/07/2026 release, sessions and initialize removed (accessed 2026-07-25)
• docs.github.com/en/rest/about-the-rest-api/api-vers… — API version policy — versions 2022-11-28 (supported to 10/03/2028) and 2026-03-10, ≥24-month support window, Deprecation/Sunset headers then 410 Gone (accessed 2026-07-25)
• docs.github.com/en/rest/about-the-rest-api/breaking… — Breaking-changes catalogue for version 2026-03-10 — ~20 removals/type/status-code changes with per-endpoint migration guidance (accessed 2026-07-25)
• github.blog/changelog/2026-06-04-budget-and-usage-m… — Budget and usage management APIs GA 04/06/2026 — programmatic create/update/delete of budgets and alerts, previously UI-only (accessed 2026-07-25)
• docs.github.com/en/graphql/reference/mutations — GraphQL mutation reference — createSponsorship / createSponsorships / cancelSponsorship / createSponsorsTier are the money-moving endpoints (accessed 2026-07-25)
• docs.github.com/en/sponsors/integrating-with-github… — Sponsors GraphQL API — official integration path; documented limitation that createSponsorship does not work for one-time payments (accessed 2026-07-25)
• docs.github.com/en/authentication/keeping-your-acco… — Fine-grained PATs — self-serve, per-repo and per-permission scoping, 30-day default expiry, optional org approval requirement (accessed 2026-07-25)
• github.com/github/rest-api-description — Official machine-readable OpenAPI 3.0 and 3.1 descriptions of the REST API, auto-generated from GitHub's canonical spec, bundled and dereferenced (accessed 2026-07-25)
• github.com/pricing — Public pricing — Free $0, Team $4/user/mo, Enterprise $21/user/mo; Codespaces $0.18/hr compute + $0.07/GB storage; Git LFS $5/mo per 50GB (accessed 2026-07-25)
• githubstatus.com — Status page — RSS/Atom feeds and webhooks, 90-day per-component uptime (API Requests 99.91%, Actions 99.73%, Pull Requests 99.76%) (accessed 2026-07-25)
• github.blog/news-insights/company-news/github-avail… — Monthly availability report — six June 2026 incidents quantified, incl. ~9% API auth failure rate over 1h20m on 10/06/2026 (accessed 2026-07-25)
• github.blog/changelog/2025-05-08-updated-rate-limit… — Tightening of unauthenticated limits in response to increased scraping activity — pushes agents toward authenticated access (accessed 2026-07-25)
• github.blog/news-insights/company-news/welcome-home… — Agent HQ announcement (GitHub Universe, 28/10/2025) — third-party coding agents, mission control, AGENTS.md, MCP registry in VS Code (accessed 2026-07-25)
• docs.github.com/en/apps/github-marketplace/selling-… — Marketplace billing — purchase and plan-change events are webhook-driven from a human checkout; the Marketplace REST API is read-only for publishers (accessed 2026-07-25)