gitlab-mcp

by zereight·io.github.zereight/gitlab-mcp·v2.1.63

No reviews yet

GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more.

B75/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B75/100

full report

Adoption

Widely used

2.0k stars97k downloads/wk

Reviews

Write one

Nobody has reviewed gitlab-mcp yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Tools

Tool lists for local packages are only visible after install.

Public scan report

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

1 medium

Code scan52 source files scanned20/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 3 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

mediumNetwork call to a raw IP addressnet.raw-ip

build/auth-cli.js: …lab.com"; const DEFAULT_REDIRECT_URI = "http://127.0.0.1:8888/callback"; export const AUTH_CLI_HELP = …

Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Install directly

Runs npx -y @zereight/mcp-gitlab on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add gitlab-mcp -- npx -y @zereight/mcp-gitlab

Add to Cursor

Alternatives to gitlab-mcp

Same job from other publishers, ranked by rating then adoption.

See all →

kubernetes-mcp-server
A Model Context Protocol (MCP) server for Kubernetes and OpenShift
not reviewed
Established
A
GitHub
Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.
not reviewed
Established
A
notion-mcp-server
Token-auth Notion MCP: pages, databases, blocks, comments, files. Runs headless in CI and agents.
not reviewed
Established
B
homebutler
Tells an agent what changed on a server since it last looked - status, Docker, backups, Proxmox.
not reviewed
Established
C
Radar Kubernetes MCP Server
Kubernetes MCP server for diagnosis, resource management, GitOps, and RBAC-enforced operations.
not reviewed
Established
A

gitlab-mcp vs kubernetes-mcp-server gitlab-mcp vs GitHub gitlab-mcp vs notion-mcp-server

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 75/100
Stars: 2.0k
Downloads/wk: 97k
Price: Free
Licence: MIT
Transport: Local · npm
Version: 2.1.63
Category: Developer tools
Last release: 2026-09-16

Credentials it needs

GITLAB_PERSONAL_ACCESS_TOKENsecretGitLab personal access token for local stdio use. Create a token with the GitLab scopes needed by the tools you plan to use, such as api or read_api.
GITLAB_JOB_TOKENsecretOptional GitLab CI job token to use instead of a personal access token when running inside GitLab CI.
GITLAB_AUTH_COOKIE_PATHOptional path to a GitLab authentication cookie file for cookie-based authentication.
GITLAB_API_URLGitLab API base URL. Use https://gitlab.com/api/v4 for GitLab.com or your self-managed GitLab API URL.
GITLAB_ALLOWED_PROJECT_IDSOptional comma-separated list of GitLab project IDs that this server is allowed to access.
GITLAB_READ_ONLY_MODESet to true to expose only read-only tools and block write operations.
USE_GITLAB_WIKISet to true to enable GitLab wiki tools.
GITLAB_TOOLSETSOptional comma-separated list of toolsets to enable, such as projects, issues, merge_requests, pipelines, releases, users, groups, wiki, or search.
GITLAB_TOOLSOptional comma-separated list of individual tool names to add on top of enabled toolsets.
GITLAB_DENIED_TOOLS_REGEXOptional regular expression used to hide matching tools from the server.
GITLAB_TOOL_POLICY_APPROVEOptional comma-separated list of tool names that require explicit approval before execution.
GITLAB_TOOL_POLICY_HIDDENOptional comma-separated list of tool names to hide from tools/list.
NODE_TLS_REJECT_UNAUTHORIZEDSet to 0 only when you intentionally need to connect to a GitLab instance with invalid or self-signed TLS certificates.
GITLAB_CA_CERT_PATHOptional path to a custom CA certificate file for self-managed GitLab instances.
GITLAB_MASKING_ENABLEDSet to true to mask text tool results and returned errors using built-in or configured rules.
GITLAB_MASKING_CONFIGOptional path to a response-masking JSON configuration file.
GITLAB_MASKING_POLICY_FILEOptional protected server-owned JSON file containing managed masking policies.
GITLAB_MASKING_WORKSPACE_DIRDirectory used to resolve response-masking configuration paths.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing