github.com
GitHub is a source code hosting and collaboration platform for Git repositories, issues, pull requests, automation, and related developer workflows. It also provides APIs and tooling for integrating repository, organization, and application operations.
GitHub exposes a versioned REST API at api.github.com, a GraphQL API at api.github.com/graphql, and the `gh` CLI; authentication is primarily via personal access tokens, GitHub App tokens/JWTs, OAuth app tokens, or `gh auth login`.
- GitHub REST APIdiscovered
- GitHub GraphQL APIdiscovered
- GitHub CLIdiscovered
Create a personal access token from your GitHub account settings as described in Managing your personal access tokens. Choose fine-grained permissions or classic scopes that match the API operations you need; GitHub notes that fine-grained PATs include read access to public repositories.
Register a GitHub App using Register a GitHub App, then generate a private key for the app and create a JWT as described under GitHub App authentication in About authentication with a GitHub App. Use this when an endpoint specifically requires authenticating as the app itself.
First register a GitHub App. Install it on the target account or organization, then generate an installation access token as described in Authenticating as a GitHub App installation. GitHub states this token works with both the REST API and the GraphQL API.
Create an OAuth app following Creating an OAuth app, configure its callback URL, then send users through the OAuth flow described in Authorizing OAuth apps to obtain access tokens for API calls.
$ gh auth loginAcquired by the CLI — running gh auth login opens the auth flow and stores the credential.
conventions · 1/8 published
- integrations.json✗
/.well-known/integrations.json - llms.txt✓https://github.com/llms.txt
- API catalog✗
/.well-known/api-catalog - OpenAPI document✗
/api/schema/, /openapi.json, /swagger.json, /api/openapi.json, or /v1/openapi.json - MCP server card✗
/.well-known/mcp/server-card.json - OAuth protected resource✗
/.well-known/oauth-protected-resource - Agent card✗
/.well-known/agent-card.json - Agent skills✗
/.well-known/agent-skills/index.json
Publish these signals → /publishing