sourcey
Submit

agents:SKILL.mdmcp.jsonopenapi.yml

← GitHub

Can an agent create a repository with GitHub REST API?

The agent needs you to sign it up or register a client and provide a key or token. You also handle changes to its access.

observedProbed revision sha256:6bada403b549…

Who does each step

how grades work →

Whether the agent handles it alone or a person has to step in.

  1. 01

    Discover

    Machine

    The vendor's machine-readable docs show the agent where and how to call this job.

  2. 02

    Access

    Workaround · setup

    You give the agent a key or token.

  3. 03

    Onboard

    Workaround · setup

    You sign up or register a client for the agent.

  4. 04

    Pay

    Not applicable

    Nothing to pay for the job.

  5. 05

    Confirm

    Machine

    The response or specification defines errors the agent can distinguish from success.

  6. 06

    Sustain

    Workaround · setup

    You replace or revoke the agent's access when it needs to change.

  • Access: handing over a key or token.
  • Onboard: signing up or registering a client for the agent.
  • Sustain: renewing, replacing or revoking its access.

To remove these handoffs: support OAuth client registration so the agent can register its own client and ask for consent; provide an agent registration route, such as auth.md, a sign-up API or OAuth client registration; provide key management or OAuth refresh and revocation so the agent can maintain its own access.

Agent surfaces

4 kinds · 8 entries
For agents
api.github.com3 more
github.com/llms.txtapi.githubcopilot.comdocs.github.com/llms.txt
Names the job's endpoint
ARD
api.githubcopilot.com/mcp/server-card
ARD
OAuth
github.com/login/oauth1 more
api.githubcopilot.com/mcp
protected resource
MCP
api.githubcopilot.com/mcp/
server card

The probe

12 Oct 2026 · 00:00 UTC · 42.13 s

Each request it sent and what came back; the descriptors it read, counted, with what they named.

Discover44 descriptor reads8 facts
Found
ARDapi.githubcopilot.com/mcp/server-cardFor agentsgithub.com/llms.txtOAuthapi.githubcopilot.com/mcpOAuthgithub.com/login/oauthFor agentsdocs.github.com/llms.txtFor agentsapi.github.comFor agentsapi.githubcopilot.comMCPapi.githubcopilot.com/mcp/
From
github.com/.well-known/ai-catalog.json · github.com/llms.txt · api.githubcopilot.com/.well-known/oauth-protected-resource/mcp · docs.github.com/llms.txt · github.com/github/github-mcp-server · api.githubcopilot.com/mcp/server-card
This endpoint
api.github.com is named by a document written for agents
Job requestPOST api.github.com/user/repos40176 ms
Request
POST https://api.github.com/user/repos
Response
401 · application/json · 120 bytes
Body
sha256:b7dbd173f33b19650f61b1c528737e2037cf768d90076fdfce5d32541765e29e
Exchange
sha256:6826fdb991d4ac2c9f9dd7f1af90056d6c02f567edc06ca24cc6c6c183fbab10
Resource metadataGET api.github.com/.well-known/oauth-protected-resource/user/repos40443 ms
Request
GET https://api.github.com/.well-known/oauth-protected-resource/user/repos
Response
404 · application/json · 106 bytes
Body
sha256:edbd0367cec893df36f67acb56c3aa23810be28850977c35e0fedaf64aad286b
Exchange
sha256:c4f8475181f9b5b70799f5c39cf174bf039caabb3df17199f314e612b8eb1677
Resource metadataGET api.github.com/.well-known/oauth-protected-resource40440 ms
Request
GET https://api.github.com/.well-known/oauth-protected-resource
Response
404 · application/json · 106 bytes
Body
sha256:edbd0367cec893df36f67acb56c3aa23810be28850977c35e0fedaf64aad286b
Exchange
sha256:6e86b89e31cdafe879df55206ccf6674bfdb767b8f1eaedb55311ab6dc33a853
Job requestsession openedPOST api.githubcopilot.com/mcp/40142 ms
Request
POST https://api.githubcopilot.com/mcp/
Response
401 · text/plain · 51 bytes
Body
sha256:4a0ce5d82fa7dc96319f8d936917c101415f0be2aef8724bfcc8da2be50a120b
Exchange
sha256:b957f241b0a8ae4b9824bd800da06c701fa2e5dad96dcd7e3aa9d9a619aa5e92
Resource metadataGET api.githubcopilot.com/.well-known/oauth-protected-resource/mcp/20046 ms
Request
GET https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp/
Response
200 · application/json · 328 bytes
Body
sha256:cbabd24fd62d5d52687cd6e47d66a17a1d817a029834b757ee65e9d3cf1c7aef
Exchange
sha256:33d32b9ef43cad70e0cd0cfaca92eba0b21ceb5608eef277ae6bfad08b39e9b4
Authorization serverGET github.com/.well-known/oauth-authorization-server/login/oauth20040 ms
Request
GET https://github.com/.well-known/oauth-authorization-server/login/oauth
Response
200 · application/json · 653 bytes
Body
sha256:4c0e55fc5fdec1baf85b2007b09724d48912409939f85ade1be5e68850c43b59
Exchange
sha256:525a93d329f76cd985ca1346b9786cb635d351010ea3ccf104e374b720670f3c
Declared pageGET github.com/signup40364 ms
Request
GET https://github.com/signup
Response
403 · text/html · 428 bytes
Body
sha256:b2a79518accc505b03c626e69541fc868f4a31848aca694a250393fd7f52e7db
Exchange
sha256:51a0a552ba787f2f4f3f9a0d3f7d121bbbe44ede72551f613cb26664e4efaf61

GitHub on the startup-offers board

catalog record →

The grade’s badge

One image that keeps itself current, linking here.

Live badge for GitHub REST API, agent grade: B+[![agent grade](https://sourcey.com/badges/agent-readiness/arp_01m4pmg4zyqrv6gq5keg72zb49.svg)](https://sourcey.com/c/github/agent-readiness/github-rest-api/repository-create)

Improve the report

Correct it, probe it again, or improve the path.

Report outdated evidenceRequest reassessmentClaim this record
Profile
arp_01m4pmg4zyqrv6gq5keg72zb49
Projection
sha256:5108d3cce231cf7f37d4cc1a1f3d2dd881fcba54ce3002ff26ccf40833528dd8
Policy
kind-2026-10-12 · sha256:0a4e4996176ce674b4f3ce910c5fca4f37c9b53bcdf51656d53a1a92fcf2c879

A report or a reassessment request names this profile, its revision and its projection. How report cards are assessed →View the exact declaration