[erstebank] MCP Server OAuth Misdirects to github.com for GHEC with Data Residency

[RobotKrabs]

Warning - This is a public repository, please be mindful of sharing sensitive data

Why are you seeing this issue?

This is a support escalation! You can find out more about expectations on communications and response times in the on-call docs. Thank you for doing your part to keep GitHub customers happy!

Severity

Note, for Sev1 issues always page the team first, using the PagerDuty information in the service catalog and the command .pager trigger <rotation> <reason>. Opening an issue for a Sev2 incident can come later (and can be done by the available Escalation Engineer).

• sev1 - Engineering must respond, when paged, within their on-call SLO
• sev2 - Engineering must respond to this issue within one business day
• sev3 - Engineering must respond to this issue within one week

Service

github-mcp-server

Context

Customer on GitHub Enterprise Cloud with data residency (subdomain: ebhu.ghe.com) is unable to use OAuth authentication with the remote GitHub MCP server in VS Code. The MCP server's .well-known/oauth-protected-resource metadata returns github.com/login/oauth as the authorization server, causing VS Code to attempt authentication against github.com instead of the customer's ghe.com instance. This contradicts the data residency isolation model and blocks the customer from using the documented OAuth flow.

GitHub Support Plan

• Top 20
• Premium Plus
• Premium
• Enterprise
• Free/Pro/Team

GitHub Product(s) Impacted (check appropriate boxes and provide GHES version if applicable)

• GitHub.com (including GHEC)
• GitHub Enterprise Server.
  • Running version: x.y.z
  • Recently upgraded from version: x.y.z (upgrade date: yyyy-mm-dd)
• Proxima (ghe.com)
  • Customer tenant: -

Customer Impact

If applicable, list the impacted entities:

• Enterprise: -
• Organization: -
• Repository: -
• User: -

Zendesk Ticket(s), support bundles, and other relevant Issues and links

Issue

A clear and concise description of what the issue is.

To Reproduce

Steps to reproduce the behavior:

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Expected behavior

A clear and concise description of what you expected to happen.

Screenshots

If applicable, add screenshots to help explain your problem.

Additional context

Add any other context about the problem here.

cc:
@github/copilot-mcp-core-eng
@toby

Support Squad(s): @github/support-squad-worktent