MCP servers
Connect remote MCP servers so reviews can look up your documentation, tickets, and other project context when it helps HeyDeer understand a change.
Add a server
Open Organization settings → MCP servers, choose Add MCP server, and fill in the fields below. Only GitHub organization owners, or the account owner in a personal workspace, can manage MCP servers.
| Field | What to enter |
|---|---|
| Server name | Lowercase letters, digits, hyphens, and underscores, starting with a letter, up to 64 characters, such as project-docs. |
| HTTPS endpoint | The server’s Streamable HTTP address, such as https://mcp.your-service.com/mcp. |
| Bearer token (optional) | A token, if the server requires one. |
- The endpoint must use HTTPS on port 443 and a public domain name: no IP addresses, localhost, or private network names, and no query string or credentials in the address.
- Not supported: OAuth sign-in, custom headers, local servers started from a command, and servers that support only the older SSE transport.
Bearer tokens
HeyDeer sends the token as Authorization: Bearer <token>, so enter only the token. Tokens are stored encrypted and never shown again. When editing, leave the field blank to keep the saved token, or select Remove saved token. If you change the endpoint, enter a new token or remove the saved one.
Repository connections
Every repository inherits the organization’s servers. In Repositories → (a repository) → MCP servers you can:
| Action | Effect |
|---|---|
| Add MCP server | Adds a server only this repository uses. |
| Override | Replaces an inherited connection, including its token, for this repository. |
| Disable | Turns an inherited server off for this repository. |
| Use organization default | Removes the override or the disabled state. |
Up to 20 servers for the organization and 20 for each repository, counting overrides and disabled servers.
Privacy and trust
Requests can include code and review context, which the server’s operator handles under its own policies. HeyDeer can call any tool a server offers, so connect only servers you trust and use read-only tokens. See Security.