[Bug] Built-in GitHub MCP connector fails with "Authentication Failed: Bad credentials" due to deprecated npm package

Resolved 💬 2 comments Opened Apr 16, 2026 by ytrewq-a Closed May 25, 2026

Bug Description
Title: Built-in GitHub MCP connector: "Authentication Failed: Bad credentials" on every tool call — deprecated npm package Description: Since April 8, 2026 ~06:00 UTC, every GitHub tool call via the built-in Claude GitHub connector fails with: {"code":-32603,"message":"Authentication Failed: Bad credentials"} Environment: - Claude Code Desktop v1.2581+ (macOS) - claude.ai web (Chrome, Firefox, incognito — all affected) - Plan: Max - Affects: all repositories (private orgs, public repos) Root cause (from ~/Library/Logs/Claude/mcp-server-github.log): The bundled npm package @modelcontextprotocol/server-github@2025.4.8 is marked "Package no longer supported" on npm. The server starts and lists tools correctly, but every GitHub REST API call returns 403 Bad credentials. Steps to reproduce: 1. Connect the built-in GitHub connector via Settings → Connectors 2. In any conversation, call any GitHub tool (get_file_contents, push_files, etc.) 3. Result: Authentication Failed: Bad credentials (100% consistent) What does NOT fix it: - Disconnecting/reconnecting the OAuth flow (tried 30+ times) - Revoking and re-authorizing from GitHub Settings → Authorized OAuth Apps - Different browsers, incognito, no VPN, no extensions - Desktop app vs web — same result Expected behavior: GitHub tools execute successfully using the OAuth token managed by Anthropic. Actual behavior: Every call fails. The deprecated package is unable to authenticate against GitHub API. Fix required: Update @modelcontextprotocol/server-github to the current supported version in the Claude desktop app bundle. Support ticket reference: 215473826881674 (open since April 8, 2026)

Environment Info

  • Platform: darwin
  • Terminal: WarpTerminal
  • Version: 2.1.110
  • Feedback ID: 86c2e286-3065-4a9a-903e-85c8e76d17ac

Errors

[]

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗