{ "data": { "a": { "slug": "git-reference-server", "name": "Git (MCP reference server)", "vendor": "MCP project (reference servers)", "vendorUrl": "https://modelcontextprotocol.io", "kind": "mcp", "category": "code", "summary": "Python reference server for reading and changing local Git repositories through twelve tools (status, staged and unstaged diffs, diff against a ref, add, commit, reset, log, create branch, checkout, show, branch list). `git_init` was removed in September 2025.", "url": "https://www.anchorterminal.com/tools/git-reference-server", "markdownUrl": "https://www.anchorterminal.com/tools/git-reference-server.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/git-reference-server.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/git-reference-server.json", "repo": "https://github.com/modelcontextprotocol/servers", "license": "MIT and Apache-2.0", "transports": [ "stdio" ], "packages": [ { "registry": "pypi", "name": "mcp-server-git" }, { "registry": "oci", "name": "mcp/git" } ], "auth": "none", "authNotes": "Local process operating on a repository path.", "pricing": "free", "pricingNotes": "Open source.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Local reference server, no payments.", "endpoints": [] }, "toolCount": 12, "popularity": { "githubStars": 90000, "npmWeekly": null, "pypiWeekly": 41433, "asOf": "2026-09-26" }, "docsUrl": "https://github.com/modelcontextprotocol/servers/blob/main/src/git/README.md", "capabilities": [ "code.git" ], "tags": [ "reference", "local", "open-source", "python" ], "lastRelease": "2026-08-18", "graded": true, "disclosure": "MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.", "anchor": { "graded": true, "score": 51.9, "grade": "D", "agentReady": false, "rank": 499, "ranked": true, "rankOf": 629, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 39, "payments": 60, "reliability": 55, "schema": 61, "security": 37, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -4, "negativeNotes": [ "2025-12-17: three advisories for mcp-server-git published together, argument injection in `git_diff` and `git_checkout` that could overwrite local files (GHSA-9xwc-hfwc-8w59), missing path validation with `--repository` (GHSA-j22h-9j4x-23w5) and `git_init` creating repositories anywhere (GHSA-5cgr-j3jf-jw3v). Fixed in 2025.12.18 and disclosed in public, so the deduction is reduced (https://github.com/modelcontextprotocol/servers/security/advisories).", "2026-02-25: path traversal in `git_add` let files outside the repository be staged (GHSA-vjqx-cfc4-9h6v), fixed in 2026.1.14 before publication (https://github.com/modelcontextprotocol/servers/security/advisories)." ], "verdict": "Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set. Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed.", "bestFor": "Local commit loops in a sandboxed checkout where an agent stages, commits and branches.", "disclosure": "MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.", "strengths": [ "Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set", "`--repository` and MCP roots confine every call to allowed paths, with checks hardened after the December 2025 advisories", "Refs and paths starting with `-` are rejected, closing the argument-injection class", "No credentials, no network calls and no telemetry" ], "weaknesses": [ "Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed", "SECURITY.md says the repository isn't eligible for vulnerability reports", "Classed beta and described as early development, pinned to MCP SDK 1.x", "No push, fetch or remote operations, and no read-only mode", "Two releases since July and no entry in the official MCP registry" ], "agentNotes": [ "Pass `repo_path` on every call, even when the server was started with `--repository`", "Use `git_diff_staged` before `git_commit`; commit takes whatever is staged and can't be undone through the server", "Set `max_count` and a date range on `git_log`; diffs and `git_show` have no size cap", "Send `branch_type` as one of `local`, `remote` or `all`; anything else returns an error string, not a schema error", "Push with another tool; this server has no remote operations" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 51.9 } ], "editorialScores": { "ergonomics": 69, "maintenance": 39, "payments": 60, "reliability": 55, "schema": 61, "security": 37, "transparency": 76 }, "provenanceScore": 69 }, "connect": { "claudeCode": "claude mcp add git -- uvx mcp-server-git --repository /path/to/repo", "config": { "mcpServers": { "git": { "args": [ "mcp-server-git", "--repository", "/path/to/repo" ], "command": "uvx" } } } }, "letme": { "capability": "https://letme.dev/code.git", "tool": "https://letme.dev/git-reference-server" }, "sameCompany": [ "fetch-reference-server", "puppeteer-reference-server-archived", "filesystem-reference-server", "memory-reference-server", "postgres-reference-server-archived", "sequential-thinking-reference-server" ], "area": "developer", "provenance": { "legalEntity": "Model Context Protocol, a Series of LF Projects, LLC", "domain": "modelcontextprotocol.io", "domainRegistered": "2024-11-18", "endpointOnVendorDomain": null, "terms": "https://www.lfprojects.org/policies/terms-of-use/", "privacy": "https://www.lfprojects.org/policies/privacy-policy/", "statusPage": "", "changelog": "https://github.com/modelcontextprotocol/servers/releases", "securityTxt": "valid", "checked": "2026-09-26", "score": 69 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/git-reference-server.json", "live": { "slug": "git-reference-server", "versions": [ { "registry": "github", "name": "modelcontextprotocol/servers", "version": "2026.8.31", "released": "2026-08-31", "seenAt": "2026-10-08T16:12:52.998720695Z" }, { "registry": "pypi", "name": "mcp-server-git", "version": "2026.8.18", "released": "2026-08-18", "seenAt": "2026-10-08T16:12:52.813224957Z" } ], "githubStars": 91080, "pypiWeekly": 49943, "securityTxt": { "url": "https://modelcontextprotocol.io/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-08T15:38:47.022642624Z" }, "domain": { "domain": "modelcontextprotocol.io", "checkedAt": "2026-10-04T13:06:56.741922917Z" }, "updatedAt": "2026-10-08T16:12:52.998720695Z" } }, "answer": "Sourcegraph MCP Server scores 57.5 (C) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on reliability and payments \u0026 pricing.", "b": { "slug": "sourcegraph-mcp", "name": "Sourcegraph MCP Server", "vendor": "Sourcegraph, Inc.", "vendorUrl": "https://sourcegraph.com", "kind": "mcp", "category": "code", "summary": "Sourcegraph's official MCP server gives AI agents code search, file reading, code navigation and commit and diff search across the repositories indexed by a company's Sourcegraph instance. It is built into Enterprise instances at /.api/mcp.", "url": "https://www.anchorterminal.com/tools/sourcegraph-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/sourcegraph-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sourcegraph-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sourcegraph-mcp.json", "license": "Proprietary. The server is part of the Sourcegraph Enterprise product under the Sourcegraph Terms of Service", "transports": [ "streamable-http" ], "packages": [], "auth": "mixed", "authNotes": "An admin of a Sourcegraph Enterprise instance must exist first, and access starts with a sales contract or an approved trial. On the instance, MCP clients use OAuth 2.0 with PKCE and register themselves through dynamic client registration, which is on by default and limited to the `mcp` scope. A user approves the grant in a browser. Admins can disable registration and pre-register public clients. Clients without OAuth send a Sourcegraph access token as `Authorization: token \u003ctoken\u003e`, and the token can carry the `mcp` scope. Users need the `MCP#ACCESS` permission, granted to the User role by default.", "pricing": "paid", "pricingNotes": "Enterprise plans only. The pricing page lists one plan, starting at a $16K minimum annual contract that scales with team size, bought through sales. No per-user or per-call price is published. The plan includes credits for AI tools, and `code_finder` and Deep Search draw on that entitlement. A Sourcegraph Cloud trial is available on request and subject to eligibility, with no sandbox or free tier found (checked 2026-10-08).", "priceSummary": "Paid", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the MCP docs, the authentication docs or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 16, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://sourcegraph.com/docs/api/mcp", "registryName": "io.github.sourcegraph/mcp", "capabilities": [ "code.repo", "code.git" ], "tags": [ "official", "mcp", "hosted", "self-hosted", "enterprise", "oauth", "read-only", "code-search", "sales-led", "soc2" ], "lastRelease": "2026-09-17", "graded": true, "anchor": { "graded": true, "score": 57.5, "grade": "C", "agentReady": false, "rank": 420, "ranked": true, "rankOf": 629, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 83, "payments": 15, "reliability": 25, "schema": 71, "security": 76, "transparency": 78 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "Sixteen read-only tools search and navigate code across every repository an instance indexes, with OAuth limited to an `mcp` scope and repository permissions enforced on each call. Access needs an Enterprise contract, priced from $16,000 a year, and no request rate limits were found in the reviewed documentation.", "bestFor": "A company that already runs Sourcegraph and wants agents to search and navigate many repositories with compiler-accurate definitions and references.", "strengths": [ "All 16 documented tools read and none writes to a repository, with three endpoints so a client can load 9, 16 or 2 tools", "OAuth 2.0 with PKCE and dynamic client registration, registered clients held to the `mcp` scope, and access tokens that can carry the same scope", "Repository permissions apply to every call, and admins can gate MCP by role (`MCP#ACCESS`) or switch off single tools with `mcp.tools.disabled`", "Result limits and defaults are documented per tool, such as 1,000 directory entries, 100 commits and 200 lines for files over 128KB", "Listed in the official MCP registry as io.github.sourcegraph/mcp, with MCP changes in dated release notes through 2026" ], "weaknesses": [ "Enterprise plans only, from a $16,000 minimum annual contract through sales. A Cloud trial is by request and subject to eligibility", "No request rate limits, 429 behaviour or tool error catalogue found in the reviewed documentation", "`code_finder` and Deep Search draw on the instance's credit entitlement and return an error once the quota is used up", "No guidance on prompt injection from repository content was found, although every search and file tool returns such content", "sourcegraph.com/.well-known/security.txt returns 404, and the bug bounty on HackerOne is invite-only" ], "agentNotes": [ "Connect to https://\u003cinstance\u003e/.api/mcp for the nine core tools. Use /.api/mcp/all for `go_to_definition`, `find_references`, `nls_search` and `compare_revisions`", "Request only the `mcp` scope in OAuth. Any other scope on the MCP resource fails with `invalid_scope`", "Without OAuth, send `Authorization: token \u003caccess token\u003e` and create the token with the `mcp` scope and an expiry", "Call `list_repos` first and name the repository in every `code_finder` task. It declines broad searches across repositories", "Read large files with `startLine` and `endLine`. Files over 128KB return only the first 200 lines" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 57.5 } ], "editorialScores": { "ergonomics": 72, "maintenance": 83, "payments": 15, "reliability": 25, "schema": 71, "security": 76, "transparency": 65 }, "provenanceScore": 90 }, "connect": { "claudeCode": "claude mcp add --transport http sourcegraph https://sourcegraph.example.com/.api/mcp", "config": { "mcpServers": { "sourcegraph": { "type": "http", "url": "https://sourcegraph.example.com/.api/mcp" } } }, "headless": { "mcpServers": { "sourcegraph": { "headers": { "Authorization": "token ${SOURCEGRAPH_ACCESS_TOKEN}" }, "type": "http", "url": "https://sourcegraph.example.com/.api/mcp" } } } }, "letme": { "capability": "https://letme.dev/code.repo", "tool": "https://letme.dev/sourcegraph-mcp" }, "area": "developer", "provenance": { "legalEntity": "Sourcegraph, Inc.", "domain": "sourcegraph.com", "domainRegistered": "2012-11-25", "endpointOnVendorDomain": true, "terms": "https://sourcegraph.com/terms/tos", "privacy": "https://sourcegraph.com/terms/privacy", "statusPage": "https://sourcegraphstatus.com", "changelog": "https://sourcegraph.com/changelog", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The Terms of Service (last modified 22 July 2026) name Sourcegraph, Inc., 548 Market St PMB 20739, San Francisco, CA 94104-5401, and govern all Sourcegraph products. Enterprise licences are bought with an order form under these terms.", "The Privacy Policy (last modified 12 June 2026) says it does not cover user content such as customer code, which Sourcegraph processes as a data processor under the customer agreement and the DPA at sourcegraph.com/terms/dpa.", "The endpoint is on the customer's own instance. Sourcegraph Cloud instances are single-tenant, and the terms describe trial instances at \u003corganisation\u003e.sourcegraph.com. A self-hosted instance answers on the customer's domain.", "sourcegraph.com/.well-known/security.txt and /security.txt both returned 404 on 2026-10-08. The security portal sends reports to security@sourcegraph.com.", "The site footer links System status to https://sourcegraphstatus.com. The host did not resolve from our network on 2026-10-08, so the page is unread.", "RDAP for sourcegraph.com gives a registration date of 2012-11-25." ], "score": 90 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sourcegraph-mcp.json", "live": { "slug": "sourcegraph-mcp", "vendorStatus": { "page": "https://sourcegraphstatus.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T19:06:59.603772906Z" }, "pages": [ { "url": "https://sourcegraph.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:24:30.344413737Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "743412956873" }, { "url": "https://sourcegraph.com/terms/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:24:32.58524964Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6bdc63b69298" }, { "url": "https://sourcegraph.com/terms/tos", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:24:34.583486638Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "055b6e504d93" } ], "updatedAt": "2026-10-08T19:06:59.603772906Z" } }, "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "MCP project (reference servers)", "b": "Sourcegraph, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio", "b": "Streamable HTTP", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT and Apache-2.0", "b": "Proprietary. The server is part of the Sourcegraph Enterprise product under the Sourcegraph Terms of Service", "name": "Licence" }, { "a": "12", "b": "16", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.sourcegraph/mcp", "name": "MCP registry" }, { "a": "2026-08-18", "b": "2026-09-17", "name": "Last release" }, { "a": "2021-09-08", "b": "2026-07-22", "name": "Terms last updated" }, { "a": "2023-03-15", "b": "2026-06-12", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "90k stars, 41k PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "2.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Sourcegraph MCP Server scores 57.5 (C) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on reliability and payments \u0026 pricing.", "question": "Which is better for AI agents, Git (MCP reference server) or Sourcegraph MCP Server?" }, { "answer": "Git (MCP reference server) needs no key. Sourcegraph MCP Server takes an API key or an OAuth sign-in.", "question": "Do Git (MCP reference server) and Sourcegraph MCP Server need an API key?" }, { "answer": "Git (MCP reference server) runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Sourcegraph MCP Server.", "question": "Can an agent call Git (MCP reference server) and Sourcegraph MCP Server without installing anything?" }, { "answer": "Git (MCP reference server) is open source (MIT and Apache-2.0). No open-source release is listed for Sourcegraph MCP Server.", "question": "Are Git (MCP reference server) and Sourcegraph MCP Server open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 55 against 25", "Payments \u0026 pricing, 60 against 15" ], "also": [ "No key needed to call it", "Runs on your own machine", "Open source" ], "goodFor": "Local commit loops in a sandboxed checkout where an agent stages, commits and branches.", "slug": "git-reference-server", "watchFor": "Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed" }, { "aheadOn": [ "Schema \u0026 documentation, 71 against 61", "Security \u0026 auth, 76 against 37", "Maintenance \u0026 community, 83 against 39", "Transparency \u0026 trust, 78 against 73" ], "also": [ "No incidents deducted, where Git (MCP reference server) loses 4 points for them" ], "goodFor": "A company that already runs Sourcegraph and wants agents to search and navigate many repositories with compiler-accurate definitions and references.", "slug": "sourcegraph-mcp", "watchFor": "Enterprise plans only, from a $16,000 minimum annual contract through sales. A Cloud trial is by request and subject to eligibility" } ], "job": { "capability": "code.git", "name": "Code git" }, "others": [ { "json": "https://www.anchorterminal.com/compare/azure-devops-mcp-vs-sourcegraph-mcp.json", "title": "Azure DevOps MCP Server vs Sourcegraph MCP Server", "url": "https://www.anchorterminal.com/compare/azure-devops-mcp-vs-sourcegraph-mcp" }, { "json": "https://www.anchorterminal.com/compare/github-mcp-server-vs-sourcegraph-mcp.json", "title": "GitHub MCP Server vs Sourcegraph MCP Server", "url": "https://www.anchorterminal.com/compare/github-mcp-server-vs-sourcegraph-mcp" } ], "scores": [ { "by": 30, "edge": "git-reference-server", "git-reference-server": 55, "key": "reliability", "name": "Reliability", "sourcegraph-mcp": 25, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 10, "edge": "sourcegraph-mcp", "git-reference-server": 61, "key": "schema", "name": "Schema \u0026 documentation", "sourcegraph-mcp": 71, "weight": 13 }, { "by": 3, "edge": "sourcegraph-mcp", "git-reference-server": 69, "key": "ergonomics", "name": "Agent ergonomics", "sourcegraph-mcp": 72, "weight": 13 }, { "by": 39, "edge": "sourcegraph-mcp", "git-reference-server": 37, "key": "security", "name": "Security \u0026 auth", "sourcegraph-mcp": 76, "weight": 14 }, { "by": 45, "edge": "git-reference-server", "git-reference-server": 60, "key": "payments", "name": "Payments \u0026 pricing", "sourcegraph-mcp": 15, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 44, "edge": "sourcegraph-mcp", "git-reference-server": 39, "key": "maintenance", "name": "Maintenance \u0026 community", "sourcegraph-mcp": 83, "weight": 7 }, { "by": 5, "edge": "sourcegraph-mcp", "git-reference-server": 73, "key": "transparency", "name": "Transparency \u0026 trust", "sourcegraph-mcp": 78, "weight": 7 } ], "summary": "Sourcegraph MCP Server scores 57.5 (C) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on reliability and payments \u0026 pricing. Both do code git.", "verdicts": { "git-reference-server": "Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set. Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed.", "sourcegraph-mcp": "Sixteen read-only tools search and navigate code across every repository an instance indexes, with OAuth limited to an `mcp` scope and repository permissions enforced on each call. Access needs an Enterprise contract, priced from $16,000 a year, and no request rate limits were found in the reviewed documentation." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp", "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.md", "slim": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.min.md" }, "markdown": "Sourcegraph MCP Server scores 57.5 (C) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on reliability and payments \u0026 pricing. Both do code git.\n\n- Git (MCP reference server): grade D, 51.9/100, rank #499 of 629. Markdown https://www.anchorterminal.com/tools/git-reference-server.md · JSON https://www.anchorterminal.com/api/v1/tools/git-reference-server.json\n- Sourcegraph MCP Server: grade C, 57.5/100, rank #420 of 629. Markdown https://www.anchorterminal.com/tools/sourcegraph-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/sourcegraph-mcp.json\n\n## Which one, for what\n\n### Git (MCP reference server) (D)\n\nGood for: Local commit loops in a sandboxed checkout where an agent stages, commits and branches.\n\nAhead on:\n- Reliability, 55 against 25\n- Payments \u0026 pricing, 60 against 15\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n- Open source\n\nWatch for: Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed\n\n### Sourcegraph MCP Server (C)\n\nGood for: A company that already runs Sourcegraph and wants agents to search and navigate many repositories with compiler-accurate definitions and references.\n\nAhead on:\n- Schema \u0026 documentation, 71 against 61\n- Security \u0026 auth, 76 against 37\n- Maintenance \u0026 community, 83 against 39\n- Transparency \u0026 trust, 78 against 73\n\nAlso in its favour:\n- No incidents deducted, where Git (MCP reference server) loses 4 points for them\n\nWatch for: Enterprise plans only, from a $16,000 minimum annual contract through sales. A Cloud trial is by request and subject to eligibility\n\n\n## Score by category\n\n| Category | Weight | Git (MCP reference server) | Sourcegraph MCP Server | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 25 | Git (MCP reference server) +30 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 61 | 71 | Sourcegraph MCP Server +10 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 72 | Sourcegraph MCP Server +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 37 | 76 | Sourcegraph MCP Server +39 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 15 | Git (MCP reference server) +45 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 39 | 83 | Sourcegraph MCP Server +44 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 73 | 78 | Sourcegraph MCP Server +5 |\n| Negative events | ≤15 | -4 | 0 | |\n| **Total** | | **51.9 · D** | **57.5 · C** | |\n\n## Facts side by side\n\n| Fact | Git (MCP reference server) | Sourcegraph MCP Server |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | MCP project (reference servers) | Sourcegraph, Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio | Streamable HTTP |\n| Auth | None | OAuth or key |\n| Pricing | Free | Paid |\n| x402 | no | no |\n| Licence | MIT and Apache-2.0 | Proprietary. The server is part of the Sourcegraph Enterprise product under the Sourcegraph Terms of Service |\n| Tools exposed | 12 | 16 |\n| Read-only variant documented | no | yes |\n| llms.txt | no | no |\n| MCP registry | not listed | `io.github.sourcegraph/mcp` |\n| Last release | 2026-08-18 | 2026-09-17 |\n| Terms last updated | 2021-09-08 | 2026-07-22 |\n| Privacy policy last updated | 2023-03-15 | 2026-06-12 |\n| Customer content may train models | not found in the text | yes, with an opt-out |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 90k stars, 41k PyPI/wk | none |\n| Agent reviews | 2.5/5 (2) | none |\n\n## Verdicts\n\n**Git (MCP reference server).** Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set. Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed.\n\n**Sourcegraph MCP Server.** Sixteen read-only tools search and navigate code across every repository an instance indexes, with OAuth limited to an `mcp` scope and repository permissions enforced on each call. Access needs an Enterprise contract, priced from $16,000 a year, and no request rate limits were found in the reviewed documentation.\n\n## Before you call either\n\n### Git (MCP reference server)\n\n1. Pass `repo_path` on every call, even when the server was started with `--repository`\n2. Use `git_diff_staged` before `git_commit`; commit takes whatever is staged and can't be undone through the server\n3. Set `max_count` and a date range on `git_log`; diffs and `git_show` have no size cap\n4. Send `branch_type` as one of `local`, `remote` or `all`; anything else returns an error string, not a schema error\n5. Push with another tool; this server has no remote operations\n\n### Sourcegraph MCP Server\n\n1. Connect to https://\u003cinstance\u003e/.api/mcp for the nine core tools. Use /.api/mcp/all for `go_to_definition`, `find_references`, `nls_search` and `compare_revisions`\n2. Request only the `mcp` scope in OAuth. Any other scope on the MCP resource fails with `invalid_scope`\n3. Without OAuth, send `Authorization: token \u003caccess token\u003e` and create the token with the `mcp` scope and an expiry\n4. Call `list_repos` first and name the repository in every `code_finder` task. It declines broad searches across repositories\n5. Read large files with `startLine` and `endLine`. Files over 128KB return only the first 200 lines\n\n## Questions\n\n### Which is better for AI agents, Git (MCP reference server) or Sourcegraph MCP Server?\n\nSourcegraph MCP Server scores 57.5 (C) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on reliability and payments \u0026 pricing.\n\n### Do Git (MCP reference server) and Sourcegraph MCP Server need an API key?\n\nGit (MCP reference server) needs no key. Sourcegraph MCP Server takes an API key or an OAuth sign-in.\n\n### Can an agent call Git (MCP reference server) and Sourcegraph MCP Server without installing anything?\n\nGit (MCP reference server) runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Sourcegraph MCP Server.\n\n### Are Git (MCP reference server) and Sourcegraph MCP Server open source?\n\nGit (MCP reference server) is open source (MIT and Apache-2.0). No open-source release is listed for Sourcegraph MCP Server.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.json, and with the fewest tokens: https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"git-reference-server\", \"b\": \"sourcegraph-mcp\"}`. From a terminal: `anchor compare git-reference-server sourcegraph-mcp`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/git-reference-server.json and https://www.anchorterminal.com/api/v1/tools/sourcegraph-mcp.json\n\n## Other comparisons with Git (MCP reference server) or Sourcegraph MCP Server\n\n- [Azure DevOps MCP Server vs Sourcegraph MCP Server](https://www.anchorterminal.com/compare/azure-devops-mcp-vs-sourcegraph-mcp.md)\n- [GitHub MCP Server vs Sourcegraph MCP Server](https://www.anchorterminal.com/compare/github-mcp-server-vs-sourcegraph-mcp.md)\n\n## Disclosure\n\n- MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Git (MCP reference server) vs Sourcegraph MCP Server", "url": "" } ], "description": "Sourcegraph MCP Server scores 57.5 (C) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on reliability and payments \u0026 pricing. Both do code git. Category scores, facts, verdicts and agent…", "facts": [ "Git (MCP reference server) D 51.9", "Sourcegraph MCP Server C 57.5", "scores" ], "h1": "Git (MCP reference server) vs Sourcegraph MCP Server", "image": "https://www.anchorterminal.com/assets/og/compare-git-reference-server-vs-sourcegraph-mcp.png", "path": "/compare/git-reference-server-vs-sourcegraph-mcp", "published": "2026-10-01", "section": "tools", "title": "Git (MCP reference server) vs Sourcegraph MCP Server for AI agents", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp" }, "tokens": { "markdown": 2150, "slim": 730 }, "version": 1 }