go-tokenless runs on your own machine — the client starts it, so there is no endpoint to ping. 29 installs a week from npm. Last commit 6 Oct 2026.
Move npm publishing in GitHub Actions from NPM_TOKEN to trusted publishing (OIDC).
Nothing serious here today
Today is the operative word: we check go-tokenless every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add go-tokenless -- npx -y go-tokenless{
"mcpServers": {
"go-tokenless": {
"command": "npx",
"args": [
"-y",
"go-tokenless"
]
}
}
}[mcp_servers.go-tokenless]
command = "npx"
args = ["-y", "go-tokenless"]{
"mcpServers": {
"go-tokenless": {
"command": "npx",
"args": [
"-y",
"go-tokenless"
]
}
}
}{
"servers": {
"go-tokenless": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"go-tokenless"
]
}
}
}Alternatives to go-tokenless
same job, measured the same wayFinds the GitHub Actions steps that stop running on 2026-09-23, with the version to move to
MCP server for GitHub operations (PRs, issues, actions) with structured, token-efficient output
Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.
Translates a lockfile diff into a human-readable upgrade plan for npm, PyPI, and GitHub Actions.
Renamed to FactReason. Now published as io.github.factreason/factreason — please use that entry.
What rose on GitHub and in Korean shopping search each day, as published on trend.ondo.sh
MCP-native AI SRE: ask what's broken in production, get a reviewed GitHub fix PR.
AWS, GitHub and connected services from your agent, no keys to paste, plus local shell and browser.
go-tokenless — questions
Answers built from our own checks of this server.