holocron/plugins/gitea/references/token-access.md

topic, description

topic	description
token-access	Gitea MCP token scope inventory — what works with the configured token vs. what requires additional scopes

Gitea MCP Token Access

Current token scope

• write:issue
• write:repository

What works

Repository discovery

Tool	Works	Notes
search_repos	✅	Finds repos by keyword
list_my_repos	❌	Needs read:user
list_org_repos	❌	Needs read:user (inferred from get_user_orgs failure)
get_repository_tree	✅	With write:repository
get_dir_contents	✅	With write:repository
get_file_contents	✅	With write:repository
create_or_update_file	✅	Core write:repository op
delete_file	✅	Core write:repository op

Issues

Tool	Works	Notes
list_issues	✅	Full list with state filter
search_issues	✅	Cross-repo search
issue_read (get)	✅
issue_read (get_comments)	✅
issue_read (get_labels)	✅
issue_write (create)	✅	Core write:issue op
issue_write (update)	✅
issue_write (add_comment)	✅
issue_write (edit_comment)	✅
issue_write (add_labels, remove_label, replace_labels, clear_labels)	✅
label_read	✅
label_write	✅
milestone_read	✅
milestone_write	✅

Pull Requests

Tool	Works	Notes
list_pull_requests	✅
pull_request_read (get, get_diff, get_files, get_status, get_reviews)	✅
pull_request_write (create, update, close, reopen, merge, update_branch)	✅	Needs write:repository
pull_request_review_write	✅

Branches & Commits

Tool	Works	Notes
list_branches	✅
create_branch	✅	write:repository
delete_branch	✅	write:repository
list_commits	✅
get_commit	✅

Releases & Tags

Tool	Works	Notes
list_releases, get_release, get_latest_release	✅
create_release, delete_release	✅	write:repository
list_tags, get_tag, create_tag, delete_tag	✅	write:repository

Actions (CI)

Tool	Works	Notes
actions_config_read (list_repo_secrets)	❌	"user should be the owner of the repo" — token auth not accepted for secrets
actions_config_write	untested (write — not tested to avoid side effects)
actions_run_read (list_workflows)	✅ empty	No workflows defined; returns {total_count:0,workflows:[]}
actions_run_read (list_runs)	❌	"user should be the owner of the repo" — 403
actions_run_write	untested (write — not tested to avoid side effects)

User & Identity

Tool	Works	Notes
get_me	❌	Needs read:user
search_users	❌	Needs read:user
get_user_orgs	❌	Needs read:user and read:organization

Other

Tool	Works	Notes
wiki_read	❌	404 — wiki not enabled for this repo
wiki_write	untested (write — not tested to avoid side effects)
notification_read	❌	Needs read:notification scope
notification_write	untested (write — not tested to avoid side effects)
timetracking_read (list_repo_times)	✅ empty	No tracked times; returns string message
timetracking_write	untested (write — not tested to avoid side effects)
package_read	❌	Needs read:package scope
package_write	untested (write — not tested to avoid side effects)