How do I install Gitlab?

Gitlab supports both local and remote installation. For local use, install it via npm (npx) and add the configuration to your AI app. For remote access, add the server URL to your MCP configuration.

Is Gitlab safe to use?

Yes. Gitlab passed MCP Marketplace's automated security scan with a score of 9.5/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What credentials does Gitlab need?

Gitlab requires the following credentials or environment variables: GITLAB_URL, GITLAB_TOKEN, GITLAB_MCP_SKIP_TLS_VERIFY, GITLAB_MCP_TOOL_SURFACE, GITLAB_MCP_TIER, GITLAB_MCP_READ_ONLY, GITLAB_MCP_SAFE_MODE, GITLAB_MCP_LOG_LEVEL, GITLAB_MCP_CAPABILITY_SURFACE, GITLAB_MCP_META_PARAM_SCHEMA, GITLAB_MCP_EMBEDDED_RESOURCES, GITLAB_MCP_EXCLUDE_TOOLS, GITLAB_MCP_IGNORE_SCOPES, GITLAB_MCP_UPLOAD_MAX_FILE_SIZE, GITLAB_MCP_ALLOWED_UPLOAD_DIRS, GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS, GITLAB_MCP_ALLOWED_IMPORT_DIRS, GITLAB_MCP_RATE_LIMIT_RPS, GITLAB_MCP_RATE_LIMIT_BURST. You can find setup instructions on the server detail page.

What AI apps work with Gitlab?

Gitlab uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Gitlab MCP Server

by Jmrplens

Developer ToolsLow Risk9.5MCP RegistryLocalRemote

Free

Server data from the Official MCP Registry

Go MCP server for GitLab: 2 dynamic tools reach ~876 actions on Free/CE, up to ~1103 on Ultimate.

About

Go MCP server for GitLab: 2 dynamic tools reach ~876 actions on Free/CE, up to ~1103 on Ultimate.

Remote endpoints: streamable-http: https://mcp.jmrp.io/gitlab

Security Report

9.5

Low Risk9.5Low Risk

Valid MCP server (2 strong, 1 medium validity signals). No known CVEs in dependencies. ⚠️ Package registry links to a different repository than scanned source. Imported from the Official MCP Registry. 2 finding(s) downgraded by scanner intelligence.

Endpoint verified · Requires authentication · 3 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

GitLab instance URL (default: https://gitlab.com; set for self-managed instances)Optional

Environment variable: GITLAB_URL

GitLab Personal Access Token (glpat-...)Required

Environment variable: GITLAB_TOKEN

Skip TLS certificate verification for self-signed certs (default: false)Optional

Environment variable: GITLAB_MCP_SKIP_TLS_VERIFY

Tool catalog selector: dynamic, meta, or individual (default: dynamic)Optional

Environment variable: GITLAB_MCP_TOOL_SURFACE

GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph toolsOptional

Environment variable: GITLAB_MCP_TIER

Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)Optional

Environment variable: GITLAB_MCP_READ_ONLY

Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)Optional

Environment variable: GITLAB_MCP_SAFE_MODE

Logging verbosity (default: info)Optional

Environment variable: GITLAB_MCP_LOG_LEVEL

Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require fullOptional

Environment variable: GITLAB_MCP_CAPABILITY_SURFACE

Meta-tool input schema detail: opaque, compact, or full (default: opaque)Optional

Environment variable: GITLAB_MCP_META_PARAM_SCHEMA

Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)Optional

Environment variable: GITLAB_MCP_EMBEDDED_RESOURCES

Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner)Optional

Environment variable: GITLAB_MCP_EXCLUDE_TOOLS

Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false)Optional

Environment variable: GITLAB_MCP_IGNORE_SCOPES

Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB)Optional

Environment variable: GITLAB_MCP_UPLOAD_MAX_FILE_SIZE

Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local pathsOptional

Environment variable: GITLAB_MCP_ALLOWED_UPLOAD_DIRS

Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local pathsOptional

Environment variable: GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS

Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local pathsOptional

Environment variable: GITLAB_MCP_ALLOWED_IMPORT_DIRS

Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0)Optional

Environment variable: GITLAB_MCP_RATE_LIMIT_RPS

Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)Optional

Environment variable: GITLAB_MCP_RATE_LIMIT_BURST

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!

4.7

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

Gitlab MCP Server

About

Security Report

Findings (3)

Permissions Required

What You'll Need

How to Install & Connect

Reviews

No reviews yet

More Developer Tools MCP Servers

Rea

Paperclip

Git

Fetch

Toleno

MCP Marketplace