Connect GitHub or GitLab to view repository activity in Orbit. This is separate from linking a local folder or using Git to clone a repository.
Add an account
Open Settings → Connections → Add connection in the desktop app. Choose GitHub or GitLab, enter a label, and set the repository owner when you want an organisation or group rather than your personal account.
For GitLab, use GitLab.com or your self-hosted HTTPS instance URL, including a port if needed. A group owner can include subgroups. For GitHub, the owner should match the token’s resource owner.
GitHub token permissions
Orbit’s connection form links to GitHub token setup. Create a fine-grained token with an expiration, choose the resource owner, and select only the repositories you need.
Set Contents, Issues, Pull requests, Actions, and Commit statuses to Read-only. Metadata read access is included. Paste the token into Orbit and save the connection. If your organisation requires approval, its administrator must approve access before private repositories become available.
The connection form links to token setup. If GitHub’s screens have changed, see its personal access token guide.
GitLab token permissions
Use the token-creation link for your instance. Create a token with an expiration and read_api access to read repository activity. Copy it before leaving the provider’s page, paste it into Orbit, and save. See GitLab’s personal access token guide for its current setup screens.
Credentials are stored encrypted through the desktop system’s secure credential storage. They are not included in workspace exports or returned to MCP clients.
Connect a repository
Saving an account does not enable activity for every project. Open a project’s Sources → Add source to choose a repository from the connection, or use Enable GitHub activity / Enable GitLab activity in an existing repository’s menu. Choose its connection and activity settings, then save.
See repository activity and inbox for refreshing and filtering results.
Maintain or remove a connection
Use Edit connection to change its label or repository owner without replacing the token. Use Replace token for an expired or revoked credential. If the provider reports a retry time, wait until that time before refreshing.
Removing a connection deletes its saved token and cached provider activity from Orbit and disconnects associated repositories. Local code and tasks remain. This does not revoke the token at GitHub or GitLab; revoke it there separately when it should no longer work.