[notapopsicle]

Summary

Add list_automation_tags to list caller-visible automation tags through public REST, with pagination, in the opt-in copilot_automations toolset.

Why

Agents need to find a repository's automation tags and their stable IDs. The tool is read-only and isn't enabled by default. Live REST availability and permission behavior still need integration testing.

What changed

• Register the list tool with its schema, docs and production-path tests.
• Preserve REST pagination and error responses, and reject exact-dot repository paths before HTTP.

MCP impact

• New tool added: list_automation_tags, available in read-only mode.

Prompts tested (tool changes only)

No natural-language prompts or live API calls were tested. Automated tests exercise MCP discovery and CallTool with mocked REST responses in both supported protocol modes.

Security / limits

• Auth / permissions considered: uses the existing authenticated client and repo scope filter.
• Data exposure, filtering, or token/size limits considered: returns known public fields, sanitizes tag names and descriptions, preserves denial errors and fetches one page per call.

Tool renaming

• I am not renaming tools as part of this PR. Existing tool names are unchanged.

Lint & tests

• Linted locally with ./script/lint
• Tested locally with ./script/test

Passed env -u UPDATE_TOOLSNAPS go test ./pkg/github -run '^Test_ListAutomationTags$' -count=1 -json (package: 0.932s). The named test ran, including snapshot, discovery, HTTP, pagination, error and exact-dot regression assertions. Full lint and the full suite were left for CI.

Docs

• Updated (README / docs / examples): generated tool and toolset entries are included. Hosted deployment isn't established by those entries.

[Copilot]

🟡 Changes recommended

Incomplete input validation can send authenticated requests to unintended API routes.

2 open issues

• Reject .. path segments in owner and repository identifiers · New
• Validate direct handler arguments before making HTTP requests · New

What changed in this PR

Adds the read-only list_automation_tags tool to the opt-in copilot_automations toolset so agents can discover repository automation tags and stable IDs.

Changes:

• Implements paginated REST retrieval with typed responses and API error handling.
• Adds discovery, protocol compatibility, pagination, and validation tests.
• Updates tool snapshots and generated documentation.

File	Description
README.md	Documents the new toolset and tool parameters.
pkg/​github/​tools.go	Adds toolset metadata and registers the tool.
pkg/​github/​automation_tags.go	Implements tag retrieval, pagination, and error handling.
pkg/​github/​automation_tags_test.go	Tests discovery and mocked MCP-to-REST calls.
pkg/​github/​__toolsnaps__/​list_automation_tags.snap	Records the tool’s description, annotations, and input schema.
docs/​remote-server.md	Adds generated toolset endpoint and installation links.

_{Review effort: Max}