Title: `list_dependabot_alerts` always fails with HTTP 400 — tool hardcodes `page`/`per_page`, but the Dependabot alerts endpoint requires cursor pagination · Issue #2648 · github/github-mcp-server · GitHub
Open Graph Title: `list_dependabot_alerts` always fails with HTTP 400 — tool hardcodes `page`/`per_page`, but the Dependabot alerts endpoint requires cursor pagination · Issue #2648 · github/github-mcp-server
X Title: `list_dependabot_alerts` always fails with HTTP 400 — tool hardcodes `page`/`per_page`, but the Dependabot alerts endpoint requires cursor pagination · Issue #2648 · github/github-mcp-server
Description: Describe the bug The list_dependabot_alerts tool fails on every repository because it unconditionally appends page and per_page query parameters to the request. GitHub's "List Dependabot alerts for a repository" REST endpoint does not su...
Open Graph Description: Describe the bug The list_dependabot_alerts tool fails on every repository because it unconditionally appends page and per_page query parameters to the request. GitHub's "List Dependabot alerts for...
X Description: Describe the bug The list_dependabot_alerts tool fails on every repository because it unconditionally appends page and per_page query parameters to the request. GitHub's "List Dependabot a...
Opengraph URL: https://github.com/github/github-mcp-server/issues/2648
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"`list_dependabot_alerts` always fails with HTTP 400 — tool hardcodes `page`/`per_page`, but the Dependabot alerts endpoint requires cursor pagination","articleBody":"### Describe the bug\nThe `list_dependabot_alerts` tool fails on every repository because it unconditionally appends `page` and `per_page` query parameters to the request. GitHub's \"List Dependabot alerts for a repository\" REST endpoint does not support `page`-based pagination — it uses cursor pagination (`before`/`after`/`first`/`last`) — and therefore responds with `400 Pagination using the page parameter is not supported.` There is no parameter exposed on the tool to suppress `page`, so the tool is completely unusable for listing alerts. By contrast, `list_code_scanning_alerts` and `list_secret_scanning_alerts` work correctly.\n\n### Affected version\n1.2.0\n\n### Steps to reproduce the behavior\n1. Call the `list_dependabot_alerts` tool with only `owner` and `repo` set (no pagination arguments).\n2. View the request the server generates and the API response.\n3. See the error — the server appends `page=1\u0026per_page=30` and the API rejects it.\n\n### Expected vs actual behavior\n**Expected:** the tool returns the repository's open Dependabot alerts (or an empty list), the same way `list_code_scanning_alerts` and `list_secret_scanning_alerts` do.\n\n**Actual:** every call returns HTTP 400 because the server sends `page`/`per_page`, which the Dependabot alerts list endpoint does not accept. This happens even when no pagination arguments are supplied (the server defaults to `page=1\u0026per_page=30`).\n\n**Likely root cause / suggested fix:** the Dependabot alerts list endpoint only supports cursor pagination. The tool should use `before`/`after`/`first`/`last` and must not send `page`/`per_page` for this endpoint (or it should paginate internally via cursors).\n\n### Logs\n```\nGET https://api.github.com/repos/OWNER/REPO/dependabot/alerts?page=1\u0026per_page=30\n→ 400 Pagination using the `page` parameter is not supported. []\n```\n","author":{"url":"https://github.com/amattas","@type":"Person","name":"amattas"},"datePublished":"2026-06-08T15:29:10.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/2648/github-mcp-server/issues/2648"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:0feb2675-814b-9950-0aaf-7ddba77b6c1a |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | D30E:21D81F:79F6:A37A:6A622BFA |
| html-safe-nonce | 04499ca01f89f26122c1907efa3bef4091274cde4fe14f5452b5fa783727c73f |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJEMzBFOjIxRDgxRjo3OUY2OkEzN0E6NkE2MjJCRkEiLCJ2aXNpdG9yX2lkIjoiMTI0OTI1MzQ0ODEzMjczMzk0NiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | c52982301d659ebcb416fb8d4f4d12b571198ab59ed5860b962084f7ca60d1f9 |
| hovercard-subject-tag | issue:4614216557 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/github/github-mcp-server/2648/issue_layout |
| twitter:image | https://opengraph.githubassets.com/82e8a7ed0b0015c831ef882b4fb4de1ba0bfb27e274aa0d7ec36354bff335bd9/github/github-mcp-server/issues/2648 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/82e8a7ed0b0015c831ef882b4fb4de1ba0bfb27e274aa0d7ec36354bff335bd9/github/github-mcp-server/issues/2648 |
| og:image:alt | Describe the bug The list_dependabot_alerts tool fails on every repository because it unconditionally appends page and per_page query parameters to the request. GitHub's "List Dependabot alerts for... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | amattas |
| hostname | github.com |
| expected-hostname | github.com |
| None | 0e882415c7b47986d65f899389c870b31642bb1c6f36516eb042618596c60e62 |
| turbo-cache-control | no-preview |
| go-import | github.com/github/github-mcp-server git https://github.com/github/github-mcp-server.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 942771284 |
| octolytics-dimension-repository_nwo | github/github-mcp-server |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 942771284 |
| octolytics-dimension-repository_network_root_nwo | github/github-mcp-server |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 230e2af5fc0870303dd4569d72d2bb393ed52c52 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width