[notapopsicle]

Summary

Add create_automation_tag to create a repository automation tag through public REST.

Why

Agents need to create tags to organize automations. Creating a tag doesn't execute an automation. The tool stays opt-in and is excluded from read-only mode; live REST availability and permission behavior still need integration testing.

What changed

• Register the create tool with its schema, docs and production-path tests.
• Generate a fresh idempotency key for each call and document that retrying can create another tag.

MCP impact

• New tool added: create_automation_tag in copilot_automations, with required owner, repo and name and an optional description.

Prompts tested (tool changes only)

No natural-language prompts or live API calls were tested. Automated tests exercise MCP discovery and CallTool with mocked REST responses in both supported protocol modes.

Security / limits

• Auth / permissions considered: uses the existing authenticated client and repo scope filter, and excludes the tool from read-only discovery.
• Data exposure, filtering, or token/size limits considered: returns known public fields, sanitizes tag names and descriptions, preserves REST errors and rejects exact-dot repository paths before HTTP. Calls don't deduplicate by tag name.

Tool renaming

• I am not renaming tools as part of this PR. Existing tool names are unchanged.

Lint & tests

• Linted locally with ./script/lint
• Tested locally with ./script/test

Passed env -u UPDATE_TOOLSNAPS go test ./pkg/github -run '^Test_CreateAutomationTag$' -count=1 -json (package: 1.040s). The named test ran, including snapshot, discovery, HTTP payload, unique-key and exact-dot regression assertions. Full lint and the full suite were left for CI.

Docs

• Updated (README / docs / examples): generated tool and parameter documentation is included.

Related

Stacked on github/github-mcp-server#3562. Reuses the tag model and toolset from github/github-mcp-server#3561.

[Copilot]

🔵 Needs a closer look

The new write endpoint’s live REST contract and permission behavior still need human verification beyond mocked tests.

No open issues 🎉

What changed in this PR

Adds create_automation_tag to the opt-in copilot_automations toolset, extending existing tag listing and retrieval with tag creation without executing automations.

Changes:

• Registers the write tool with required repository and name inputs, repo scope requirements, and exclusion from read-only mode.
• Generates a fresh idempotency key per call and documents that retries can create additional tags.
• Adds documentation, a schema snapshot, and mocked discovery and call tests across both protocol modes.

File	Description
README.md	Documents the new tool and its parameters.
pkg/​github/​tools.go	Registers CreateAutomationTag in the tool inventory.
pkg/​github/​automation_tags.go	Implements the schema, validation, REST request, and response handling.
pkg/​github/​automation_tags_test.go	Tests discovery, payloads, unique keys, errors, and protocol output.
pkg/​github/​__toolsnaps__/​create_automation_tag.snap	Records the tool’s schema and annotations.

_{Review effort: Max}