GitHub · Capability

GitHub Repos API — Access

GitHub Repos API — Access. 21 operations. Lead operation: List Repository Access To Self-hosted Runner Group In An Organization. Self-contained Naftiko capability covering one Github business surface.

Run with Naftiko GithubAccess

What You Can Do

GET
Listrepositoryaccesstoselfhostedrunnergroupinanorganization — List Repository Access To Self-hosted Runner Group In An Organization
/v1/orgs/{org}/actions/runner-groups/{runner-group-id}/repositories
PUT
Setrepositoryaccessforselfhostedrunnergroupinanorganization — Set Repository Access For Self-hosted Runner Group In An Organization
/v1/orgs/{org}/actions/runner-groups/{runner-group-id}/repositories
PUT
Addrepositoryaccesstoselfhostedrunnergroupinanorganization — Add Repository Access To Self-hosted Runner Group In An Organization
/v1/orgs/{org}/actions/runner-groups/{runner-group-id}/repositories/{repository-id}
DELETE
Removerepositoryaccesstoselfhostedrunnergroupinanorganization — Remove Repository Access To Self-hosted Runner Group In An Organization
/v1/orgs/{org}/actions/runner-groups/{runner-group-id}/repositories/{repository-id}
GET
Getthelevelofaccessforworkflowsoutsideoftherepository — Get The Level Of Access For Workflows Outside Of The Repository
/v1/repos/{owner}/{repo}/actions/permissions/access
PUT
Setthelevelofaccessforworkflowsoutsideoftherepository — Set The Level Of Access For Workflows Outside Of The Repository
/v1/repos/{owner}/{repo}/actions/permissions/access
GET
Getaccessrestrictions — Get Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions
DELETE
Deleteaccessrestrictions — Delete Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions
GET
Getappswithaccesstotheprotectedbranch — Get Apps With Access To The Protected Branch
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps
POST
Addappaccessrestrictions — Add App Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps
PUT
Setappaccessrestrictions — Set App Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps
DELETE
Removeappaccessrestrictions — Remove App Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps
GET
Getteamswithaccesstotheprotectedbranch — Get Teams With Access To The Protected Branch
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams
POST
Addteamaccessrestrictions — Add Team Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams
PUT
Setteamaccessrestrictions — Set Team Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams
DELETE
Removeteamaccessrestrictions — Remove Team Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams
GET
Getuserswithaccesstotheprotectedbranch — Get Users With Access To The Protected Branch
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users
POST
Adduseraccessrestrictions — Add User Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users
PUT
Setuseraccessrestrictions — Set User Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users
DELETE
Removeuseraccessrestrictions — Remove User Access Restrictions
/v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users
GET
Listrepositoriesaccessibletotheuseraccesstoken — List Repositories Accessible To The User Access Token
/v1/user/installations/{installation-id}/repositories

MCP Tools

list-repository-access-self-hosted

List Repository Access To Self-hosted Runner Group In An Organization

read-only idempotent
set-repository-access-self-hosted

Set Repository Access For Self-hosted Runner Group In An Organization

idempotent
add-repository-access-self-hosted

Add Repository Access To Self-hosted Runner Group In An Organization

idempotent
remove-repository-access-self-hosted

Remove Repository Access To Self-hosted Runner Group In An Organization

idempotent
get-level-access-workflows-outside

Get The Level Of Access For Workflows Outside Of The Repository

read-only idempotent
set-level-access-workflows-outside

Set The Level Of Access For Workflows Outside Of The Repository

idempotent
get-access-restrictions

Get Access Restrictions

read-only idempotent
delete-access-restrictions

Delete Access Restrictions

idempotent
get-apps-access-protected-branch

Get Apps With Access To The Protected Branch

read-only idempotent
add-app-access-restrictions

Add App Access Restrictions

set-app-access-restrictions

Set App Access Restrictions

idempotent
remove-app-access-restrictions

Remove App Access Restrictions

idempotent
get-teams-access-protected-branch

Get Teams With Access To The Protected Branch

read-only idempotent
add-team-access-restrictions

Add Team Access Restrictions

set-team-access-restrictions

Set Team Access Restrictions

idempotent
remove-team-access-restrictions

Remove Team Access Restrictions

idempotent
get-users-access-protected-branch

Get Users With Access To The Protected Branch

read-only idempotent
add-user-access-restrictions

Add User Access Restrictions

set-user-access-restrictions

Set User Access Restrictions

idempotent
remove-user-access-restrictions

Remove User Access Restrictions

idempotent
list-repositories-accessible-user-access

List Repositories Accessible To The User Access Token

read-only idempotent

Capability Spec

temp-access.yaml Raw ↑
naftiko: 1.0.0-alpha2
info:
  label: GitHub Repos API — Access
  description: 'GitHub Repos API — Access. 21 operations. Lead operation: List Repository Access To Self-hosted Runner Group
    In An Organization. Self-contained Naftiko capability covering one Github business surface.'
  tags:
  - Github
  - Access
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    GITHUB_API_KEY: GITHUB_API_KEY
capability:
  consumes:
  - type: http
    namespace: temp-access
    baseUri: ''
    description: GitHub Repos API — Access business capability. Self-contained, no shared references.
    resources:
    - name: orgs-org-actions-runner-groups-runner_group_id-repositories
      path: /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories
      operations:
      - name: listrepositoryaccesstoselfhostedrunnergroupinanorganization
        method: GET
        description: List Repository Access To Self-hosted Runner Group In An Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
      - name: setrepositoryaccessforselfhostedrunnergroupinanorganization
        method: PUT
        description: Set Repository Access For Self-hosted Runner Group In An Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: orgs-org-actions-runner-groups-runner_group_id-repositories-repository_id
      path: /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}
      operations:
      - name: addrepositoryaccesstoselfhostedrunnergroupinanorganization
        method: PUT
        description: Add Repository Access To Self-hosted Runner Group In An Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
      - name: removerepositoryaccesstoselfhostedrunnergroupinanorganization
        method: DELETE
        description: Remove Repository Access To Self-hosted Runner Group In An Organization
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
    - name: repos-owner-repo-actions-permissions-access
      path: /repos/{owner}/{repo}/actions/permissions/access
      operations:
      - name: getthelevelofaccessforworkflowsoutsideoftherepository
        method: GET
        description: Get The Level Of Access For Workflows Outside Of The Repository
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
      - name: setthelevelofaccessforworkflowsoutsideoftherepository
        method: PUT
        description: Set The Level Of Access For Workflows Outside Of The Repository
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: repos-owner-repo-branches-branch-protection-restrictions
      path: /repos/{owner}/{repo}/branches/{branch}/protection/restrictions
      operations:
      - name: getaccessrestrictions
        method: GET
        description: Get Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
      - name: deleteaccessrestrictions
        method: DELETE
        description: Delete Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
    - name: repos-owner-repo-branches-branch-protection-restrictions-apps
      path: /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps
      operations:
      - name: getappswithaccesstotheprotectedbranch
        method: GET
        description: Get Apps With Access To The Protected Branch
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
      - name: addappaccessrestrictions
        method: POST
        description: Add App Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: setappaccessrestrictions
        method: PUT
        description: Set App Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: removeappaccessrestrictions
        method: DELETE
        description: Remove App Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: repos-owner-repo-branches-branch-protection-restrictions-teams
      path: /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams
      operations:
      - name: getteamswithaccesstotheprotectedbranch
        method: GET
        description: Get Teams With Access To The Protected Branch
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
      - name: addteamaccessrestrictions
        method: POST
        description: Add Team Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: setteamaccessrestrictions
        method: PUT
        description: Set Team Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: removeteamaccessrestrictions
        method: DELETE
        description: Remove Team Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: repos-owner-repo-branches-branch-protection-restrictions-users
      path: /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users
      operations:
      - name: getuserswithaccesstotheprotectedbranch
        method: GET
        description: Get Users With Access To The Protected Branch
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
      - name: adduseraccessrestrictions
        method: POST
        description: Add User Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: setuseraccessrestrictions
        method: PUT
        description: Set User Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: removeuseraccessrestrictions
        method: DELETE
        description: Remove User Access Restrictions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: user-installations-installation_id-repositories
      path: /user/installations/{installation_id}/repositories
      operations:
      - name: listrepositoriesaccessibletotheuseraccesstoken
        method: GET
        description: List Repositories Accessible To The User Access Token
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Authorization
          in: header
          type: string
        - name: X-GitHub-Api-Version
          in: header
          type: string
        - name: Accept
          in: header
          type: string
    authentication:
      type: bearer
      token: '{{env.GITHUB_API_KEY}}'
  exposes:
  - type: rest
    namespace: temp-access-rest
    port: 8080
    description: REST adapter for GitHub Repos API — Access. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/orgs/{org}/actions/runner-groups/{runner-group-id}/repositories
      name: orgs-org-actions-runner-groups-runner-group-id-repositories
      description: REST surface for orgs-org-actions-runner-groups-runner_group_id-repositories.
      operations:
      - method: GET
        name: listrepositoryaccesstoselfhostedrunnergroupinanorganization
        description: List Repository Access To Self-hosted Runner Group In An Organization
        call: temp-access.listrepositoryaccesstoselfhostedrunnergroupinanorganization
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: setrepositoryaccessforselfhostedrunnergroupinanorganization
        description: Set Repository Access For Self-hosted Runner Group In An Organization
        call: temp-access.setrepositoryaccessforselfhostedrunnergroupinanorganization
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/orgs/{org}/actions/runner-groups/{runner-group-id}/repositories/{repository-id}
      name: orgs-org-actions-runner-groups-runner-group-id-repositories-repository-id
      description: REST surface for orgs-org-actions-runner-groups-runner_group_id-repositories-repository_id.
      operations:
      - method: PUT
        name: addrepositoryaccesstoselfhostedrunnergroupinanorganization
        description: Add Repository Access To Self-hosted Runner Group In An Organization
        call: temp-access.addrepositoryaccesstoselfhostedrunnergroupinanorganization
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: removerepositoryaccesstoselfhostedrunnergroupinanorganization
        description: Remove Repository Access To Self-hosted Runner Group In An Organization
        call: temp-access.removerepositoryaccesstoselfhostedrunnergroupinanorganization
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/repos/{owner}/{repo}/actions/permissions/access
      name: repos-owner-repo-actions-permissions-access
      description: REST surface for repos-owner-repo-actions-permissions-access.
      operations:
      - method: GET
        name: getthelevelofaccessforworkflowsoutsideoftherepository
        description: Get The Level Of Access For Workflows Outside Of The Repository
        call: temp-access.getthelevelofaccessforworkflowsoutsideoftherepository
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: setthelevelofaccessforworkflowsoutsideoftherepository
        description: Set The Level Of Access For Workflows Outside Of The Repository
        call: temp-access.setthelevelofaccessforworkflowsoutsideoftherepository
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions
      name: repos-owner-repo-branches-branch-protection-restrictions
      description: REST surface for repos-owner-repo-branches-branch-protection-restrictions.
      operations:
      - method: GET
        name: getaccessrestrictions
        description: Get Access Restrictions
        call: temp-access.getaccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deleteaccessrestrictions
        description: Delete Access Restrictions
        call: temp-access.deleteaccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps
      name: repos-owner-repo-branches-branch-protection-restrictions-apps
      description: REST surface for repos-owner-repo-branches-branch-protection-restrictions-apps.
      operations:
      - method: GET
        name: getappswithaccesstotheprotectedbranch
        description: Get Apps With Access To The Protected Branch
        call: temp-access.getappswithaccesstotheprotectedbranch
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: addappaccessrestrictions
        description: Add App Access Restrictions
        call: temp-access.addappaccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: setappaccessrestrictions
        description: Set App Access Restrictions
        call: temp-access.setappaccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: removeappaccessrestrictions
        description: Remove App Access Restrictions
        call: temp-access.removeappaccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams
      name: repos-owner-repo-branches-branch-protection-restrictions-teams
      description: REST surface for repos-owner-repo-branches-branch-protection-restrictions-teams.
      operations:
      - method: GET
        name: getteamswithaccesstotheprotectedbranch
        description: Get Teams With Access To The Protected Branch
        call: temp-access.getteamswithaccesstotheprotectedbranch
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: addteamaccessrestrictions
        description: Add Team Access Restrictions
        call: temp-access.addteamaccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: setteamaccessrestrictions
        description: Set Team Access Restrictions
        call: temp-access.setteamaccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: removeteamaccessrestrictions
        description: Remove Team Access Restrictions
        call: temp-access.removeteamaccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users
      name: repos-owner-repo-branches-branch-protection-restrictions-users
      description: REST surface for repos-owner-repo-branches-branch-protection-restrictions-users.
      operations:
      - method: GET
        name: getuserswithaccesstotheprotectedbranch
        description: Get Users With Access To The Protected Branch
        call: temp-access.getuserswithaccesstotheprotectedbranch
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: adduseraccessrestrictions
        description: Add User Access Restrictions
        call: temp-access.adduseraccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: setuseraccessrestrictions
        description: Set User Access Restrictions
        call: temp-access.setuseraccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: removeuseraccessrestrictions
        description: Remove User Access Restrictions
        call: temp-access.removeuseraccessrestrictions
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/user/installations/{installation-id}/repositories
      name: user-installations-installation-id-repositories
      description: REST surface for user-installations-installation_id-repositories.
      operations:
      - method: GET
        name: listrepositoriesaccessibletotheuseraccesstoken
        description: List Repositories Accessible To The User Access Token
        call: temp-access.listrepositoriesaccessibletotheuseraccesstoken
        with:
          Authorization: rest.Authorization
          X-GitHub-Api-Version: rest.X-GitHub-Api-Version
          Accept: rest.Accept
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: temp-access-mcp
    port: 9090
    transport: http
    description: MCP adapter for GitHub Repos API — Access. One tool per consumed operation, routed inline through this capability's
      consumes block.
    tools:
    - name: list-repository-access-self-hosted
      description: List Repository Access To Self-hosted Runner Group In An Organization
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: temp-access.listrepositoryaccesstoselfhostedrunnergroupinanorganization
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
      outputParameters:
      - type: object
        mapping: $.
    - name: set-repository-access-self-hosted
      description: Set Repository Access For Self-hosted Runner Group In An Organization
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: temp-access.setrepositoryaccessforselfhostedrunnergroupinanorganization
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: add-repository-access-self-hosted
      description: Add Repository Access To Self-hosted Runner Group In An Organization
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: temp-access.addrepositoryaccesstoselfhostedrunnergroupinanorganization
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
      outputParameters:
      - type: object
        mapping: $.
    - name: remove-repository-access-self-hosted
      description: Remove Repository Access To Self-hosted Runner Group In An Organization
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: temp-access.removerepositoryaccesstoselfhostedrunnergroupinanorganization
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
      outputParameters:
      - type: object
        mapping: $.
    - name: get-level-access-workflows-outside
      description: Get The Level Of Access For Workflows Outside Of The Repository
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: temp-access.getthelevelofaccessforworkflowsoutsideoftherepository
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
      outputParameters:
      - type: object
        mapping: $.
    - name: set-level-access-workflows-outside
      description: Set The Level Of Access For Workflows Outside Of The Repository
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: temp-access.setthelevelofaccessforworkflowsoutsideoftherepository
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-access-restrictions
      description: Get Access Restrictions
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: temp-access.getaccessrestrictions
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-access-restrictions
      description: Delete Access Restrictions
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: temp-access.deleteaccessrestrictions
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
      outputParameters:
      - type: object
        mapping: $.
    - name: get-apps-access-protected-branch
      description: Get Apps With Access To The Protected Branch
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: temp-access.getappswithaccesstotheprotectedbranch
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
      outputParameters:
      - type: object
        mapping: $.
    - name: add-app-access-restrictions
      description: Add App Access Restrictions
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: temp-access.addappaccessrestrictions
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: set-app-access-restrictions
      description: Set App Access Restrictions
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: temp-access.setappaccessrestrictions
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: remove-app-access-restrictions
      description: Remove App Access Restrictions
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: temp-access.removeappaccessrestrictions
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-teams-access-protected-branch
      description: Get Teams With Access To The Protected Branch
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: temp-access.getteamswithaccesstotheprotectedbranch
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
      outputParameters:
      - type: object
        mapping: $.
    - name: add-team-access-restrictions
      description: Add Team Access Restrictions
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: temp-access.addteamaccessrestrictions
      with:
        Authorization: tools.Authorization
        X-GitHub-Api-Version: tools.X-GitHub-Api-Version
        Accept: tools.Accept
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: set-team-access-restrictions
      description: Set Team Access Restrictions
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: temp-access.setteamaccessrestric

# --- truncated at 32 KB (34 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/github/refs/heads/main/capabilities/temp-access.yaml