Lino Steenkamp linosteenkamp

GitHub MCP Server with GitHub CLI — Clean Token Setup for Claude Code

No hardcoded tokens. No op run wrappers. Just gh auth login and a small bridge script.

The Problem

The GitHub MCP server needs a GITHUB_TOKEN or GITHUB_PERSONAL_ACCESS_TOKEN to authenticate. The naive approach is to hardcode it in your MCP config — but that's a plaintext secret sitting in a dotfile, one accidental commit away from leaking.

The Solution

Instructions largely found from here: https://www.esev.com/blog/post/2015-01-pgp-ssh-key-on-yubikey-neo/ https://www.ahrenstein.com/blog/using-a-yubikey-4-and-gpg-for-ssh-on-a-mac/

Install the required MacOS software

brew install gnupg2 pinentry-mac
brew install --cask gpg-suite
brew install ykman

	#!/bin/bash

	pemFiles=/etc/letsencrypt/live/steenkamps.org/*.pem
	pemMd5=/etc/letsencrypt/live/steenkamps.org/pem.md5
	certPath=/etc/letsencrypt/live/steenkamps.org
	cert=cert.pem
	key=privkey.pem
	sshIdentity=/root/.ssh/id_rsa
	mikrotikUser=admin
	mikrotikIp=192.168.1.254

	#!/bin/bash

	DNS_FILE="$HOME/.my_public_ip"
	SUCCESS="200"
	DO_API_KEY=""
	DO_DOMAIN=""
	DO_DNS_RECORD_ID=""

	#- Get public ip
	ip=$(curl --silent api.ipify.org)

	#!/bin/bash

	CKD_KEY="client-key-data"
	CCD_KEY="client-certificate-data"
	CAD_KEY="certificate-authority-data"

	json=$(kubectl config view --raw -o json)

	#- Retrieve Certificates and Keys for all contexts
	echo "$json" \| jq -c '.contexts[].context' \| while read line

	backup_path="~/sql_restore/"

	dbs=$(find $backup_path -type f -name "*.gz" \| sort)

	echo "========================== Restore Database ===================================="

	for db in $dbs;
	do
	dbname=`echo $db \| basename $db \| awk '{print substr($0, 1, index($0, ".") -1 )}'`

	#! /bin/bash

	BACKUP_DESTINATION="/Users/linosteenkamp/Database/Backups"
	MYSQL_CONNECTION="aax-k8s-mysql-develop"

	display_usage() {
	if ! command -v mysql_config_editor > /dev/null; then
	Echo "MySQL not Installed!"
	Echo "Please install MySQL before using this script"
	exit 1

	#!/bin/bash

	# Add md5 hash to the end every line in a CSV file
	# Usage ./hash_csv_records.sh input.csv > output.csv

	input="${1:-/dev/stdin}"
	SEP=";"


	if [[ $(uname) == 'Linux' ]]; then

	#!/bin/bash

	# URL for speedtest-api (Change this to match your setup)
	URL="localhost:3000/api/test/create"

	# Path to speedtest-cli (Change this to match the path to your speedtest-cli executable)
	SPEEDTEST_CLI_PATH="/usr/local/bin/speedtest-cli"

	# Input Field Seperator for splitting the CSV result into an array
	IFS=","