operate
Agent Ops — 93 Governed GitHub Tools
Your AI reads repos, PRs, and workflows under your token — every call logged.
What you get
Under your credentials, on your audit trail
Every tool call runs under the requesting user's GitHub token and is logged. The AI operates with exactly the access you granted — nothing hidden, nothing off-book.
Read-only by default, writes gated
48 of the tools are read-only and run freely; 45 that can change your repos are write-gated behind approval, so an agent can inspect widely but never mutate without a gate.
Scoped to the repos you name
Agent Ops only sees the repositories you grant it — not your whole GitHub account. Revoke the token and every one of the 93 tools goes dark at once; there is no second credential to hunt down.
How Agent Ops works
- 1
Your AI assistant is given the ZipLoom GitHub tool registry.
- 2
Read-only tools (repos, PRs, workflows, advisories) run under your token.
- 3
Write-capable tools require an explicit approval gate before executing.
- 4
Every call is recorded to your audit trail.
What this check inspects
Which repositories the connection can see — the ones you grant, not the whole account.
What each of the 93 tools can do, so the scope is explicit rather than implied.
Every action an agent takes against your repositories, in the audit log.
Whether a token is still needed, so access doesn't outlive the work.
What it means when this fails
Giving an AI agent write access to your repositories is a real risk if the scope is vague. Scoped grants plus an audit trail mean the blast radius is known in advance and revocation is one action — rather than hunting down which of several credentials is still live.
Questions
- What can the agent actually do?
- The tools cover reading, branching, committing, pull requests, issues, and CI. All of it is inside the repositories you granted.
- How do I revoke access?
- Revoke the token and every tool goes dark at once. There's no second credential to find.
- Which agents can use it?
- Anything that speaks MCP, including Claude and other MCP-capable tools.
Related features