Git

Connect GitHub or Gitea to let agent sessions clone private repos, push branches, open pull requests, and comment on issues — all without exposing credentials inside sessions.

Linking your account

Go to Settings → Git Accounts and connect GitHub or Gitea. flamel stores a token server-side. When a session starts, credentials are injected into the git_mcp server at runtime — they are never written to disk inside the session sandbox, and the provider never sees them directly.

What agents can do

Once linked, supported providers have access to a full set of Git operations via git_mcp:

OperationHow it works
ClonePrivate repos work — credentials injected automatically
Commit & pushTo any branch you have write access to
Pull requestsCreate, view, and comment via the GitHub/Gitea API
IssuesCreate, view, comment, and close
CI/CD runsList and view workflow runs

Credential safety

The git_mcp binary handles all git network operations. Raw shell git commands invoked inside sessions go through it too — they never receive your token directly. If a session is compromised (e.g. via a malicious dependency), it cannot exfiltrate your Git credentials.

You can still use public repos without linking a Git account. Only private repos and write operations require it.