http-mcp-headers
An implementation note kept as a skill for gh-aw's Copilot engine, about MCP servers reached over HTTP whose headers contain GitHub Actions secrets.
What the skill teaches
An implementation note kept as a skill for gh-aw's Copilot engine, about MCP servers reached over HTTP whose headers contain GitHub Actions secrets. It describes how the generated MCP configuration must pull the secrets out of the headers, declare them as environment variables in the run step, pass them through the configuration's env section and refer to them in the headers, with an example workflow. It is reference for gh-aw contributors.
Capabilities
- Pass Actions secrets into HTTP MCP headers safely
- Generate the env section of an MCP configuration
- Test secret handling in compiled workflows
About
- Publisher
- GitHub
- Tool
- GitHub
Install
The project doesn't document install steps that we could confirm. See the project's own instructions
MCP servers and skills can run code on your computer and act on your data. Review the source before installing.
Details
| Fact | Value | Source |
|---|---|---|
| Type | Skill | |
| Tool | GitHub | |
| Publisher | GitHub | source |
| Official status | Officialin GitHub's own GitHub organisation (github/gh-aw, GitHub Agentic Workflows) | source |
| Needs an API key or sign-in | Not stated in its documentation | |
| Includes scripts | No | source |
| Platforms | Not stated in its documentation | |
| AI clients | Not stated in its documentation | |
| Licence | MIT | source |
| Pricing | Not stated in its documentation | |
| Activity | Last commit Nov 11, 20265,616 GitHub starsDownload data not available (not on npm or PyPI) | source |
| Links | Repository Website |
Sources
- Skill file (SKILL.md)github.com/github/gh-aw · Backs: Official status, PublisherNov 10, 2026
- Licence file (LICENSE)github.com/github/gh-aw · Backs: LicenceNov 13, 2026
- GitHub repositorygithub.com/github/gh-aw · Backs: Activity, LicenceNov 11, 2026
- Folder in the repository (http-mcp-headers)github.com/github/gh-aw · Backs: Includes scriptsNov 10, 2026