GitLab MCP Server

by jmrplens·io.github.jmrplens/gitlab-mcp-server·v3.0.0

No reviews yet

Go MCP server for GitLab: 2 dynamic tools reach 1000+ REST/GraphQL actions. Free/CE, no paid tier.

A97/100grade A

Write a review Run it

What users say

No reviews yet

Be the first

Safety scan

A97/100

full report

Adoption

Growing

37 stars

Reviews

Write one

Nobody has reviewed GitLab MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

GitLab MCP Server tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

–Code scanpackage could not be scannedn/a
Live reliabilityremote reachable in 705ms (auth required)20/20
–Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
Auth qualityOAuth resource metadata advertised on 40115/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 97/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Install directly

claude mcp add --transport http gitlab-mcp-server https://mcp.jmrp.io/gitlab

Add to Cursor

GitLab MCP Server: common questions

Is GitLab MCP Server safe?: Yes, by our scan: it is graded A (97/100). Read the GitLab MCP Server safety report
How do I install GitLab MCP Server?: It runs remotely at mcp.jmrp.io. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does GitLab MCP Server need an API key?: No key to paste: it signs you in with OAuth when your client connects.
Is GitLab MCP Server maintained?: The last commit was in the last day (2026-09-19). The latest release is v3.0.0.
Is GitLab MCP Server up?: 100% of our last 1 checks got an answer. We check remote servers about four times a day.
What can I use instead of GitLab MCP Server?: Servers from other publishers that do the same job: Gitlab MCP server, Gitlab Docs MCP server and k8s AIops MCP server. Compare all GitLab MCP Server alternatives.

Alternatives to GitLab MCP Server

Same job from other publishers: the closest match first, then the best rated.

All GitLab MCP Server alternatives →

Gitlab
GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more.
not reviewed
Widely used
B
Gitlab Docs
Search and browse 2,900+ official GitLab documentation pages via MCP
not reviewed
Growing
A
k8s AIops
Governed Kubernetes ops — 55 MCP tools with audit, budget, undo, risk-tier audit labels.
More from AIops-tools →
not reviewed
Growing
A
Actions Deprecation Lint 2026
Node 20 is removed from GitHub-hosted runners on 2026-09-23 and ubuntu-22.04 deprecation opens 2026
not reviewed
Growing
A
Superpowers.social
Live X/Twitter and Reddit research. 10 read-only MCP tools, Google/GitHub sign-in. Free tier.
not reviewed
Growing
A

GitLab MCP Server vs Gitlab GitLab MCP Server vs Gitlab Docs GitLab MCP Server vs k8s AIops

Run it through the gateway

With the gateway added, ask your agent for it by name:

agent prompt

call io.github.jmrplens/gitlab-mcp-server → <tool>

Free per call. Metered, capped by your key, logged for reliability.

Add the gateway (gw.mcp.market)

Rating: —
Safety grade: A · 97/100
Stars: 37
Downloads/wk: –
Price: Free
Licence: MIT
Transport: Remote · mixed
Uptime: 100% · 1/1 checks
Version: 3.0.0
Category: Developer tools
Last release: 2026-09-19

Credentials it needs

GITLAB_URLGitLab instance URL (default: https://gitlab.com; set for self-managed instances)
GITLAB_TOKENsecretGitLab Personal Access Token (glpat-...)
GITLAB_MCP_SKIP_TLS_VERIFYSkip TLS certificate verification for self-signed certs (default: false)
GITLAB_MCP_TOOL_SURFACETool catalog selector: dynamic, meta, or individual (default: dynamic)
GITLAB_MCP_CAPABILITY_SURFACEResource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full
GITLAB_MCP_META_PARAM_SCHEMAMeta-tool input schema detail: opaque, compact, or full (default: opaque)
GITLAB_MCP_TIERGitLab edition tier: free/ce, premium, or ultimate. When unset, detected from GET /license (fallback free). Gates Premium/Ultimate tools; GitLab.com Ultimate also exposes Orbit Knowledge Graph tools. Replaces the deprecated GITLAB_ENTERPRISE boolean
GITLAB_MCP_READ_ONLYRead-only mode: disables all mutating tools (default: false)
GITLAB_MCP_SAFE_MODESafe mode: intercepts mutating tools and returns a JSON preview instead of executing (default: false)
GITLAB_MCP_EMBEDDED_RESOURCESAppend EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)
GITLAB_MCP_EXCLUDE_TOOLSComma-separated tool names to exclude from registration (e.g. gitlab_admin,gitlab_runner)
GITLAB_MCP_IGNORE_SCOPESSkip Personal Access Token scope detection and register all tools regardless of token permissions (default: false)
GITLAB_MCP_UPLOAD_MAX_FILE_SIZEMaximum attachment upload size in bytes or human-readable (e.g. 2GB). Default: 2147483648 (2 GB)
GITLAB_MCP_ALLOWED_IMPORT_DIRSExtra OS path-list-separated directories allowed for local GitLab import archives
GITLAB_MCP_RATE_LIMIT_RPSPer-server tools/call rate limit in requests per second; 0 disables it (default: 0)
GITLAB_MCP_RATE_LIMIT_BURSTToken-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)
GITLAB_MCP_LOG_LEVELLogging verbosity (default: info)
GITLAB_URLGitLab instance URL (default: https://gitlab.com; set for self-managed instances)
GITLAB_TOKENsecretGitLab Personal Access Token (glpat-...)
GITLAB_MCP_SKIP_TLS_VERIFYSkip TLS certificate verification for self-signed certs (default: false)
GITLAB_MCP_TOOL_SURFACETool catalog selector: dynamic, meta, or individual (default: dynamic)
GITLAB_MCP_CAPABILITY_SURFACEResource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full
GITLAB_MCP_META_PARAM_SCHEMAMeta-tool input schema detail: opaque, compact, or full (default: opaque)
GITLAB_MCP_TIERGitLab edition tier: free/ce, premium, or ultimate. When unset, detected from GET /license (fallback free). Gates Premium/Ultimate tools; GitLab.com Ultimate also exposes Orbit Knowledge Graph tools. Replaces the deprecated GITLAB_ENTERPRISE boolean
GITLAB_MCP_READ_ONLYRead-only mode: disables all mutating tools (default: false)
GITLAB_MCP_SAFE_MODESafe mode: intercepts mutating tools and returns a JSON preview instead of executing (default: false)
GITLAB_MCP_EMBEDDED_RESOURCESAppend EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)
GITLAB_MCP_EXCLUDE_TOOLSComma-separated tool names to exclude from registration (e.g. gitlab_admin,gitlab_runner)
GITLAB_MCP_IGNORE_SCOPESSkip Personal Access Token scope detection and register all tools regardless of token permissions (default: false)
GITLAB_MCP_UPLOAD_MAX_FILE_SIZEMaximum attachment upload size in bytes or human-readable (e.g. 2GB). Default: 2147483648 (2 GB)
GITLAB_MCP_ALLOWED_IMPORT_DIRSExtra OS path-list-separated directories allowed for local GitLab import archives
GITLAB_MCP_RATE_LIMIT_RPSPer-server tools/call rate limit in requests per second; 0 disables it (default: 0)
GITLAB_MCP_RATE_LIMIT_BURSTToken-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)
GITLAB_MCP_LOG_LEVELLogging verbosity (default: info)
GITLAB_URLGitLab instance URL (default: https://gitlab.com; set for self-managed instances)
GITLAB_TOKENsecretGitLab Personal Access Token (glpat-...)
GITLAB_MCP_SKIP_TLS_VERIFYSkip TLS certificate verification for self-signed certs (default: false)
GITLAB_MCP_TOOL_SURFACETool catalog selector: dynamic, meta, or individual (default: dynamic)
GITLAB_MCP_CAPABILITY_SURFACEResource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full
GITLAB_MCP_META_PARAM_SCHEMAMeta-tool input schema detail: opaque, compact, or full (default: opaque)
GITLAB_MCP_TIERGitLab edition tier: free/ce, premium, or ultimate. When unset, detected from GET /license (fallback free). Gates Premium/Ultimate tools; GitLab.com Ultimate also exposes Orbit Knowledge Graph tools. Replaces the deprecated GITLAB_ENTERPRISE boolean
GITLAB_MCP_READ_ONLYRead-only mode: disables all mutating tools (default: false)
GITLAB_MCP_SAFE_MODESafe mode: intercepts mutating tools and returns a JSON preview instead of executing (default: false)
GITLAB_MCP_EMBEDDED_RESOURCESAppend EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)
GITLAB_MCP_EXCLUDE_TOOLSComma-separated tool names to exclude from registration (e.g. gitlab_admin,gitlab_runner)
GITLAB_MCP_IGNORE_SCOPESSkip Personal Access Token scope detection and register all tools regardless of token permissions (default: false)
GITLAB_MCP_UPLOAD_MAX_FILE_SIZEMaximum attachment upload size in bytes or human-readable (e.g. 2GB). Default: 2147483648 (2 GB)
GITLAB_MCP_ALLOWED_IMPORT_DIRSExtra OS path-list-separated directories allowed for local GitLab import archives
GITLAB_MCP_RATE_LIMIT_RPSPer-server tools/call rate limit in requests per second; 0 disables it (default: 0)
GITLAB_MCP_RATE_LIMIT_BURSTToken-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)
GITLAB_MCP_LOG_LEVELLogging verbosity (default: info)
GITLAB_URLGitLab instance URL (default: https://gitlab.com; set for self-managed instances)
GITLAB_TOKENsecretGitLab Personal Access Token (glpat-...)
GITLAB_MCP_SKIP_TLS_VERIFYSkip TLS certificate verification for self-signed certs (default: false)
GITLAB_MCP_TOOL_SURFACETool catalog selector: dynamic, meta, or individual (default: dynamic)
GITLAB_MCP_CAPABILITY_SURFACEResource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full
GITLAB_MCP_META_PARAM_SCHEMAMeta-tool input schema detail: opaque, compact, or full (default: opaque)
GITLAB_MCP_TIERGitLab edition tier: free/ce, premium, or ultimate. When unset, detected from GET /license (fallback free). Gates Premium/Ultimate tools; GitLab.com Ultimate also exposes Orbit Knowledge Graph tools. Replaces the deprecated GITLAB_ENTERPRISE boolean
GITLAB_MCP_READ_ONLYRead-only mode: disables all mutating tools (default: false)
GITLAB_MCP_SAFE_MODESafe mode: intercepts mutating tools and returns a JSON preview instead of executing (default: false)
GITLAB_MCP_EMBEDDED_RESOURCESAppend EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)
GITLAB_MCP_EXCLUDE_TOOLSComma-separated tool names to exclude from registration (e.g. gitlab_admin,gitlab_runner)
GITLAB_MCP_IGNORE_SCOPESSkip Personal Access Token scope detection and register all tools regardless of token permissions (default: false)
GITLAB_MCP_UPLOAD_MAX_FILE_SIZEMaximum attachment upload size in bytes or human-readable (e.g. 2GB). Default: 2147483648 (2 GB)
GITLAB_MCP_ALLOWED_IMPORT_DIRSExtra OS path-list-separated directories allowed for local GitLab import archives
GITLAB_MCP_RATE_LIMIT_RPSPer-server tools/call rate limit in requests per second; 0 disables it (default: 0)
GITLAB_MCP_RATE_LIMIT_BURSTToken-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)
GITLAB_MCP_LOG_LEVELLogging verbosity (default: info)
GITLAB_URLGitLab instance URL (default: https://gitlab.com; set for self-managed instances)
GITLAB_TOKENsecretGitLab Personal Access Token (glpat-...)
GITLAB_MCP_SKIP_TLS_VERIFYSkip TLS certificate verification for self-signed certs (default: false)
GITLAB_MCP_TOOL_SURFACETool catalog selector: dynamic, meta, or individual (default: dynamic)
GITLAB_MCP_CAPABILITY_SURFACEResource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full
GITLAB_MCP_META_PARAM_SCHEMAMeta-tool input schema detail: opaque, compact, or full (default: opaque)
GITLAB_MCP_TIERGitLab edition tier: free/ce, premium, or ultimate. When unset, detected from GET /license (fallback free). Gates Premium/Ultimate tools; GitLab.com Ultimate also exposes Orbit Knowledge Graph tools. Replaces the deprecated GITLAB_ENTERPRISE boolean
GITLAB_MCP_READ_ONLYRead-only mode: disables all mutating tools (default: false)
GITLAB_MCP_SAFE_MODESafe mode: intercepts mutating tools and returns a JSON preview instead of executing (default: false)
GITLAB_MCP_EMBEDDED_RESOURCESAppend EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)
GITLAB_MCP_EXCLUDE_TOOLSComma-separated tool names to exclude from registration (e.g. gitlab_admin,gitlab_runner)
GITLAB_MCP_IGNORE_SCOPESSkip Personal Access Token scope detection and register all tools regardless of token permissions (default: false)
GITLAB_MCP_UPLOAD_MAX_FILE_SIZEMaximum attachment upload size in bytes or human-readable (e.g. 2GB). Default: 2147483648 (2 GB)
GITLAB_MCP_ALLOWED_IMPORT_DIRSExtra OS path-list-separated directories allowed for local GitLab import archives
GITLAB_MCP_RATE_LIMIT_RPSPer-server tools/call rate limit in requests per second; 0 disables it (default: 0)
GITLAB_MCP_RATE_LIMIT_BURSTToken-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)
GITLAB_MCP_LOG_LEVELLogging verbosity (default: info)

Endpoint

https://mcp.jmrp.io/gitlab

streamable-http

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/jmrplens-gitlab-mcp-server.svg)](https://mcp.market/server/jmrplens-gitlab-mcp-server)

How the badge works