Set up the GitHub App

Install the app

1. In the dashboard, open Automations and choose Connect GitHub.
2. Install the SpecMCP GitHub App on your organization and select the repositories it may access. You can change the repository selection on GitHub at any time.

The app requests these repository permissions:

• Contents: read to read the pull request and the related files the analysis needs.
• Pull requests: write to post the review and inline comments.
• Issues: write to post the summary comment.
• Checks: write to report the check result.

If you change permissions later, GitHub asks the organization owner to accept the update on the installation. Until the update is accepted, the new permission does not take effect, so a check can succeed while comments silently fail.

Assign certification scopes

Open Automations and set a default scope for all repositories, or a custom scope for an individual repository. A repository with no custom scope uses the default. You can also pin scopes per repository in a .specmcp.yml file on the base branch, which takes precedence over the dashboard.

Once a scope is assigned and the app is installed, the next pull request is analyzed automatically.