Expand description
Manifest-flow orchestrator.
GitHub doesn’t expose a pure REST API for creating apps — the only programmatic path is the Manifest flow, which requires exactly one browser confirmation. The flow:
- Tool starts a one-shot HTTP listener on an ephemeral localhost port.
- Tool generates an HTML page with a hidden-form POST to GitHub’s
manifest endpoint (
https://github.com/.../settings/apps/new), auto-submits via JS. Manifest body includesredirect_url=http://localhost:<port>/callback. - Tool opens the operator’s default browser to that page (1 click on the “Create from manifest” confirmation in GitHub).
- GitHub redirects the browser to the localhost listener with
?code=<temp>. - Listener captures the code, returns “you can close this tab”.
- Tool exchanges the code via
POST /app-manifests/{code}/conversions. - Tool optionally opens the install URL with target_id pre-filled (one
more click) and polls
GET /app/installationsuntil the installation shows up. - Tool writes credentials (id, slug, pem, installation_id) to the sink.