diff --git a/docs/src/content/docs/guides/getting-started-mcp.md b/docs/src/content/docs/guides/getting-started-mcp.md index a3ee9e12335..14865de108f 100644 --- a/docs/src/content/docs/guides/getting-started-mcp.md +++ b/docs/src/content/docs/guides/getting-started-mcp.md @@ -101,7 +101,7 @@ The `default` toolset includes: `context`, `repos`, `issues`, `pull_requests`. W ### Operating Modes -Remote mode (`mode: remote`) connects to a hosted server for faster startup with no Docker required. Local mode (`mode: local`) runs in Docker, enabling version pinning for offline or restricted environments. See [Remote vs Local Mode](/gh-aw/reference/github-tools/#github-tools-remote-mode). +Remote mode (`mode: remote`) connects to a hosted server for faster startup with no Docker required. Local mode (`mode: local`) runs in Docker, enabling version pinning for offline or restricted environments. See [Remote vs Local Mode](/gh-aw/reference/github-tools/#github-tools-access-modes). The GitHub MCP server always operates read-only. Write operations are handled through [safe outputs](/gh-aw/reference/safe-outputs/), which run in a separate permission-controlled job. diff --git a/docs/src/content/docs/reference/github-tools.md b/docs/src/content/docs/reference/github-tools.md index 00564cb3088..c840016c2aa 100644 --- a/docs/src/content/docs/reference/github-tools.md +++ b/docs/src/content/docs/reference/github-tools.md @@ -132,7 +132,7 @@ This is required when your workflow requires any of the following: - Read access to GitHub org or user information - Read access to other private repos - Read access to projects -- GitHub tools [Remote Mode](#github-tools-remote-mode) +- GitHub tools [Remote Mode](#github-tools-access-modes) ### Using a Personal Access Token (PAT) diff --git a/docs/src/content/docs/reference/tokens.md b/docs/src/content/docs/reference/tokens.md index 5b70b15722a..5e40ce74b59 100644 --- a/docs/src/content/docs/reference/tokens.md +++ b/docs/src/content/docs/reference/tokens.md @@ -118,7 +118,7 @@ The primary token for authenticating GitHub API operations through the [GitHub M | Property | Value | |---|---| | **Source** | User-created PAT stored as repository secret | -| **Required** | Depends on mode — required for [remote mode](/gh-aw/reference/github-tools/#github-tools-remote-mode) and [lockdown mode](/gh-aw/reference/lockdown-mode/) | +| **Required** | Depends on mode — required for [remote mode](/gh-aw/reference/github-tools/#github-tools-access-modes) and [lockdown mode](/gh-aw/reference/lockdown-mode/) | | **Permissions** | Depends on [toolsets](/gh-aw/reference/github-tools/#github-toolsets) used (e.g., repo scope for repos toolset, project scope for projects) | | **Fallback** | `GH_AW_GITHUB_TOKEN` → `GITHUB_TOKEN` | | **Used by** | GitHub MCP server (local and remote modes), guard policy enforcement |