gh-release-mcp
An MCP server that lets an agent list and download GitHub release assets — with multi-mirror parallel ranged download and sha256 verification. Zero external binaries (pure Python standard library: no
aria2,curl,gh,jq). By embedai.com.cn.
Built for restricted networks: it probes which mirrors support HTTP Range (206), splits a file across mirrors and downloads segments in parallel, then verifies sha256 from GitHub's own asset digest.
Tools
| Tool | What it does |
|---|---|
list_release_assets |
List a release's assets (name, size, url). |
download_release_asset |
Download one asset (by name) or several (by glob pattern) with parallel ranged requests across mirrors; verifies sha256 when available. |
Install / run
# run instantly (no install)
uvx gh-release-mcp
# or via pip
pip install gh-release-mcp
gh-release-mcp
It speaks MCP over stdio.
Configure your client
opencode (opencode.json):
{
"mcp": {
"gh-release": {
"type": "local",
"command": ["uvx", "gh-release-mcp"]
}
}
}
Claude Desktop / Cursor (mcpServers):
{
"mcpServers": {
"gh-release": { "command": "uvx", "args": ["gh-release-mcp"] }
}
}
Tools in detail
download_release_asset arguments:
| arg | meaning |
|---|---|
owner, repo |
e.g. NationalSecurityAgency, ghidra |
tag |
release tag; omit or latest |
name |
exact asset name (optional) |
pattern |
glob, e.g. *PUBLIC*.zip (optional) |
dest |
destination directory (default: cwd) |
mirrors |
mirror prefixes (must support Range); default ghproxy.net + ghfast.top |
connections |
segments per file (default 8) |
Env vars: GITHUB_TOKEN (optional, raises API limits / private repos).
Example prompts
- "Using gh-release, list the assets of
BurntSushi/ripgreplatest." - "Download
NationalSecurityAgency/ghidraGhidra_12.1.4_buildmatching*PUBLIC*.zipinto./ghidra."
Related
- CLI tool (no MCP): gh-download · PyPI
gh-download-embedai - Blog: https://embedai.com.cn
License
MIT
Metadata
Release files for gh-release-mcp 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| gh_release_mcp-0.1.0.tar.gz | 6.7 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| gh_release_mcp-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 14.1 kB
Release files / gh_release_mcp-0.1.0.tar.gz
| Download URL | gh_release_mcp-0.1.0.tar.gz |
|---|---|
| Size | 6.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
d86720d62e508eb7e7319233fd35776e6c5b4c5d03a88b43329a55a05ff5d526
|
|
BLAKE2b-256 checksum How to use checksums |
65b0dc216d22749fa39a400c1b4a4b1a37bfe35d163e2e6f3760472dfb1ad4d7
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 15, 2026.
Transparency logRelease files / gh_release_mcp-0.1.0-py3-none-any.whl
| Download URL | gh_release_mcp-0.1.0-py3-none-any.whl |
|---|---|
| Size | 7.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
79caf6a83c5ab5de1ad2a88a6d11e7ef6391b620f230925cbb99e47531ef2f99
|
|
BLAKE2b-256 checksum How to use checksums |
edab34d441898800840ee245345421c1019563fc45b47225605de9aaf99699be
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 15, 2026.
Transparency log