Pass GitHub PAT to MCP subprocess

2026-08-23 18:44:14 +02:00
parent a9847c43eb
commit ddde433224
6 changed files with 35 additions and 1 deletions
@@ -17,5 +17,9 @@ EXPOSE 8000
 # This is the same OpenWebUI-compatible stateless transport used by Athena's
 # other Python/stdio MCP adapters. The official GitHub binary remains the only
 # component implementing GitHub operations.
-ENTRYPOINT ["mcp-proxy", "--host", "0.0.0.0", "--port", "8000", "--stateless", "--"]
+# mcp-proxy intentionally starts stdio children with a minimal environment.
+# Explicit pass-through is required so the GitHub subprocess receives the PAT
+# already injected into this container by Docker. The value is never placed on
+# the command line, image, logs or Open WebUI connection record.
+ENTRYPOINT ["mcp-proxy", "--host", "0.0.0.0", "--port", "8000", "--stateless", "--pass-environment", "--"]
 CMD ["/usr/local/bin/github-mcp-server", "stdio", "--read-only", "--tools", "search_repositories,get_repository_tree,get_file_contents,search_code"]