[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_116":117},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module '@jmrplens/gitlab-mcp-server' is not configured","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":26,"_34":-5,"_35":36,"_37":-5,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":48,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":-5,"_76":77,"_78":48,"_79":-5,"_80":81,"_82":83,"_84":85,"_86":87,"_88":89,"_90":91,"_92":93},"apiUrl","https://odel.app/api","creator","jmrplens","moduleId","gitlab-mcp-server","@jmrplens/gitlab-mcp-server","displayName","GitLab MCP Server","tagline","Manage GitLab projects, issues, merge requests, pipelines, repositories, and admin workflows.","iconKey","https://raw.githubusercontent.com/jmrplens/gitlab-mcp-server/main/site/src/assets/logo-light.svg","category","dev-tools","status","published","metaDescription","metaKeywords","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://gitlab-mcp-server.fly.dev/\",\"transport\":\"streamable-http\",\"authType\":\"headers\",\"requiredSecrets\":[\"PRIVATE_TOKEN\",\"GITLAB_URL\"]}","pricingModel","free","creatorUserId","system:external-import","createdAt",1781363450000,"updatedAt",1781499678000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.jmrplens%2Fgitlab-mcp-server","sourceVerified",true,"importedAt","upstreamStars",9,"upstreamUpdatedAt",1781489370000,"detectedTransport","detectedAuthType","probeStatus","lastProbedAt","githubRepoUrl","https://github.com/jmrplens/gitlab-mcp-server","githubRepoFullName","jmrplens/gitlab-mcp-server","releaseId","ext-jmrplens-gitlab-mcp-server","version","2.2.0","descriptionMarkdown","

\n $\"\"$ \n

\n\n# GitLab MCP Server\n\n

\n\n[![GitHub Release](https://img.shields.io/github/v/release/jmrplens/gitlab-mcp-server?style=flat&logo=github&label=Release)](https://github.com/jmrplens/gitlab-mcp-server/releases/latest)\n[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)\n[![Go Report Card](https://goreportcard.com/badge/github.com/jmrplens/gitlab-mcp-server)](https://goreportcard.com/report/github.com/jmrplens/gitlab-mcp-server)\n[![Go Reference](https://pkg.go.dev/badge/github.com/jmrplens/gitlab-mcp-server/v2.svg)](https://pkg.go.dev/github.com/jmrplens/gitlab-mcp-server/v2)\n[![Glama MCP Score](https://glama.ai/mcp/servers/jmrplens/gitlab-mcp-server/badges/score.svg)](https://glama.ai/mcp/servers/jmrplens/gitlab-mcp-server)\n[![GitLab Mirror](https://img.shields.io/badge/GitLab-mirror-FC6D26?logo=gitlab&logoColor=white)](https://gitlab.com/jmrp/gitlab-mcp-server)\n\n

\n\n

\n\n[![Quality Gate](https://sonarcloud.io/api/project_badges/measure?project=jmrplens_gitlab-mcp-server&metric=alert_status)](https://sonarcloud.io/summary/overall?id=jmrplens_gitlab-mcp-server)\n[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=jmrplens_gitlab-mcp-server&metric=coverage)](https://sonarcloud.io/summary/overall?id=jmrplens_gitlab-mcp-server)\n![Platform](https://img.shields.io/badge/Windows%20%7C%20Linux%20%7C%20macOS-amd64%20%26%20arm64-lightgrey?style=flat&logo=windows-terminal&logoColor=white)\n\n

\n\nA **Model Context Protocol (MCP) server** that exposes the entire GitLab API as MCP tools, resources, and prompts for AI assistants. Single static binary — zero dependencies.\n\n> **Security first**: Continuously monitored on [SonarCloud](https://sonarcloud.io/summary/overall?id=jmrplens_gitlab-mcp-server) with quality gates, coverage, and security scanning. Supports read-only mode, safe mode (dry-run preview), and self-hosted GitLab with TLS verification.\n>\n> **Repository mirror**: GitHub is the canonical repository. A read-only mirror of the code and releases is available on [GitLab.com](https://gitlab.com/jmrp/gitlab-mcp-server) for discoverability; please open code contributions on GitHub.\n\n## Token Footprint\n\n\n\nMeasured with `go run ./cmd/gen_readme/` against the current base catalog. Totals estimate startup context visible to an MCP client: visible tool schemas plus shared resources and prompts, using the same byte/4 token heuristic as `cmd/audit_tokens`.\n\n**Default configuration**: with `TOOL_SURFACE` unset or `TOOL_SURFACE=dynamic`, `CAPABILITY_SURFACE=full`, `META_TOOLS` unset, `META_PARAM_SCHEMA=opaque`, and `GITLAB_ENTERPRISE` unset or `false`, the server uses the **dynamic find/execute surface**. Use `TOOL_SURFACE=meta` only when you explicitly want domain meta-tools; use `TOOL_SURFACE=individual` only when your client can handle the full tool catalog.\n\n| Configuration (`TOOL_SURFACE` / `CAPABILITY_SURFACE`) | Visible tools | Reachable actions | `META_PARAM_SCHEMA` | Tool schema tokens | Shared tokens | Total tokens |\n| ----------------------------------------------------- | ------------: | ----------------: | ------------------- | -----------------: | ------------: | -----------: |\n| `dynamic` / `full` (default) | 2 | 874 | n/a | 2,204 | 18,284 | 20,488 |\n| `dynamic` / `minimal` | 2 | 874 | n/a | 2,204 | 740 | 2,944 |\n| `meta` / `full` | 34 | 874 | `opaque` | 87,475 | 18,284 | 105,759 |\n| `meta` / `minimal` | 34 | 874 | `opaque` | 87,475 | 740 | 88,215 |\n| `individual` / `full` | 870 | 870 | n/a | 476,555 | 18,284 | 494,839 |\n\nRows use the base Community Edition catalog (`GITLAB_ENTERPRISE=false`). `META_PARAM_SCHEMA=opaque` affects only visible meta-tool input schemas; dynamic mode gets exact action schemas from `gitlab_find_action`, and every surface advertises `gitlab://tools` plus `gitlab://tools/{id}` for on-demand action browsing and input schemas. Individual mode already exposes one schema per tool.\n\n\n\n## Highlights\n\n- **1030 MCP tools** on self-managed Enterprise/Premium, or **1036 on GitLab.com Enterprise/Premium** with experimental Orbit Knowledge Graph support — broad GitLab REST API v4 + GraphQL coverage across 176 packages under `internal/tools`: projects, branches, tags, releases, merge requests, issues, pipelines, jobs, groups, users, wikis, environments, deployments, packages, container registry, runners, feature flags, CI/CD variables, security attributes, security categories, templates, admin settings, access tokens, deploy keys, Orbit, and more\n- **Default dynamic toolset** — exposes only `gitlab_find_action` and `gitlab_execute_action` while keeping the same canonical GitLab action catalog. Optional domain meta-tools remain available with `TOOL_SURFACE=meta`: 33 base, 49 on self-managed Enterprise/Premium, or 50 on GitLab.com Enterprise/Premium\n- **AI model tool-use evaluation** — automated schema-only and Docker-backed runs against populated GitLab CE and licensed Enterprise instances measure tool/action selection, parameter shaping, recovery from GitLab errors, and destructive-action safety across Anthropic, Google, OpenAI, and Qwen. Published summaries appear in the managed evaluation block below; see [AI Model Evaluation Results](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/testing/model-results.md)\n- **11 sampling actions** — LLM-assisted code review, issue analysis, pipeline failure diagnosis, security review, release notes, milestone reports, and more via `gitlab_analyze` meta-tool (MCP sampling capability)\n- **4 elicitation tools** — interactive creation wizards (issue, MR, release, project) with step-by-step user prompts\n- **46 MCP resources** in default dynamic/full mode — read-only data: user, groups, group members, group projects, projects, issues, pipelines, members, labels, milestones, branches, MRs, releases, tags, commits, file blobs, wiki pages, MR notes, MR discussions, single-entity templates (issue, MR, branch, tag, release, label, milestone, commit, wiki page, deployment, environment, job, board, snippet, deploy key, feature flag, group label, group milestone), the surface-aware `gitlab://tools` manifest and `gitlab://tools/{id}` detail template, workspace roots, and 5 workflow best-practice guides\n- **37 MCP prompts** — AI-optimized: code review, pipeline status, risk assessment, release notes, standup, workload, user stats, team management, cross-project dashboards, analytics, milestones, Git workflow quality, audit\n- **6 MCP capabilities** — logging, completions, roots, progress, sampling, elicitation\n- **50 tool icons** — base64-encoded SVG icons (`Sizes: [\"any\"]`) on all tools, resources, and prompts for visual identification in MCP clients\n- **Pagination** on all list endpoints with metadata (total items, pages, next/prev)\n- **Transports**: stdio (default for desktop AI) and HTTP (Streamable HTTP for remote clients)\n- **Cross-platform**: Windows, Linux & macOS, amd64 & arm64\n- **Self-hosted GitLab** with self-signed TLS certificate support\n\n## Example Prompts\n\nOnce connected, just talk to your AI assistant in natural language:\n\n> \"List my GitLab projects\"\n> \"Show me open merge requests in my-app\"\n> \"Create a merge request from feature-login to main\"\n> \"Review merge request !15 — is it safe to merge?\"\n> \"List open issues assigned to me\"\n> \"What's the pipeline status for project 42?\"\n> \"Why did the last pipeline fail?\"\n> \"Generate release notes from v1.0 to v2.0\"\n\nThe server handles the translation from natural language to GitLab API calls. You do not need to know project IDs, API endpoints, or JSON syntax — the AI assistant figures that out for you. See [Usage Examples](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/examples/usage-examples.md) for more scenarios.\n\n## Quick Start\n\n### 1. Get the server\n\nDownload the latest binary for your platform from [GitHub Releases](https://github.com/jmrplens/gitlab-mcp-server/releases) and make it executable:\n\n```bash\nchmod +x gitlab-mcp-server-* # Linux/macOS only\n```\n\nOr pull the published container image:\n\n```bash\ndocker pull ghcr.io/jmrplens/gitlab-mcp-server:latest\n```\n\n### 2. Configure GitLab access\n\n**Recommended**: Run the built-in setup wizard — it configures your GitLab connection and MCP client in one step:\n\n```bash\n./gitlab-mcp-server --setup\n```\n\n> **Tip**: The wizard supports three user interfaces and selects the best one automatically (Web UI → TUI → CLI). Force a specific mode with `--setup-mode web|tui|cli`. The Web UI ships with inline help tooltips on every advanced option. On Windows, double-click the `.exe` to launch the wizard automatically.\n\nThe wizard configures **stdio MCP clients** (VS Code, Claude Desktop, Cursor, etc.). It is not used for the long-running HTTP server mode — see [HTTP Server Mode](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/http-server-mode.md) for that. If `~/.gitlab-mcp-server.env` already exists, the wizard pre-loads its values so you can re-run it to change just one or two fields without re-typing the rest. Leave the token field blank to keep the stored token.\n\nManual setup only needs a GitLab Personal Access Token with `api` scope:\n\n```env\nGITLAB_TOKEN=glpat-xxxxxxxxxxxxxxxxxxxx\n```\n\n`GITLAB_URL` defaults to `https://gitlab.com`; add it only when you connect to a self-managed GitLab instance.\n\n```env\nGITLAB_URL=https://gitlab.example.com\n```\n\n### 3. Connect your MCP client\n\nMost desktop clients use stdio: the client starts one local MCP server process and talks to it over stdin/stdout. Choose one of these runtime patterns.\n\n#### Native binary (stdio)\n\nVS Code and Cursor-style MCP configuration:\n\nAdd to `.vscode/mcp.json` in your workspace:\n\n```json\n{\n \"servers\": {\n \"gitlab\": {\n \"type\": \"stdio\",\n \"command\": \"/path/to/gitlab-mcp-server\",\n \"env\": {\n \"GITLAB_TOKEN\": \"glpat-xxxxxxxxxxxxxxxxxxxx\"\n }\n }\n }\n}\n```\n\nClaude Desktop uses the same server command under `mcpServers`:\n\n```json\n{\n \"mcpServers\": {\n \"gitlab\": {\n \"command\": \"/path/to/gitlab-mcp-server\",\n \"env\": {\n \"GITLAB_TOKEN\": \"glpat-xxxxxxxxxxxxxxxxxxxx\"\n }\n }\n }\n}\n```\n\nFor client-specific paths, secure token prompts, HTTP OAuth, and extra IDEs, see [IDE Configuration](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/ide-configuration.md).\n\n#### Docker launched by an IDE (stdio)\n\nIf an IDE starts Docker as the MCP server process, keep `docker run -i` and pass `--http=false` after the image name. Do not publish port 8080 in this mode.\n\n```json\n{\n \"servers\": {\n \"gitlab\": {\n \"type\": \"stdio\",\n \"command\": \"docker\",\n \"args\": [\n \"run\",\n \"-i\",\n \"--rm\",\n \"-e\",\n \"GITLAB_TOKEN\",\n \"-e\",\n \"GITLAB_URL\",\n \"-e\",\n \"GITLAB_SKIP_TLS_VERIFY\",\n \"ghcr.io/jmrplens/gitlab-mcp-server:latest\",\n \"--http=false\"\n ],\n \"env\": {\n \"GITLAB_TOKEN\": \"glpat-xxxxxxxxxxxxxxxxxxxx\",\n \"GITLAB_URL\": \"https://gitlab.com\",\n \"GITLAB_SKIP_TLS_VERIFY\": \"false\"\n }\n }\n }\n}\n```\n\n#### Docker or binary as an HTTP MCP server\n\nUse HTTP mode for shared, remote, or multi-user deployments. The Docker image\nstarts in HTTP mode by default, but the flags are shown explicitly here for\nclarity. These examples publish the container port on host loopback only;\n`--http-addr=0.0.0.0:8080` binds inside the container.\n\n```bash\n# Fixed GitLab instance for all clients\ndocker run -d --name gitlab-mcp-server -p 127.0.0.1:8080:8080 \\\n ghcr.io/jmrplens/gitlab-mcp-server:latest \\\n --http \\\n --http-addr=0.0.0.0:8080 \\\n --gitlab-url=https://gitlab.com\n\n# Multi-instance mode: clients send GITLAB-URL per request\ndocker run -d --name gitlab-mcp-server -p 127.0.0.1:8080:8080 \\\n ghcr.io/jmrplens/gitlab-mcp-server:latest \\\n --http \\\n --http-addr=0.0.0.0:8080\n```\n\nHTTP clients authenticate each request with `PRIVATE-TOKEN` or `Authorization: Bearer`:\n\n```jsonc\n{\n \"servers\": {\n \"gitlab\": {\n \"type\": \"http\",\n \"url\": \"http://localhost:8080/mcp\",\n \"headers\": {\n \"PRIVATE-TOKEN\": \"glpat-xxxxxxxxxxxxxxxxxxxx\"\n }\n }\n }\n}\n```\n\nIn multi-instance mode, clients must also send `GITLAB-URL`. See [HTTP Server Mode](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/http-server-mode.md) for OAuth, reverse proxy, rate limit, and server-pool details.\n\n### 4. Verify\n\nOpen your AI client and try:\n\n> _\"List my GitLab projects\"_\n\nSee the [Getting Started guide](https://jmrplens.github.io/gitlab-mcp-server/getting-started/) for detailed setup instructions.\n\n## Tool Modes\n\nThree registration modes, controlled by `TOOL_SURFACE`:\n\n| Mode | Tools | Description |\n| ----------------------------- | ---------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| **Dynamic Toolset** (default) | 2 visible tools | Low-token find/execute surface over the canonical action catalog. |\n| **Meta-Tools** | 33 base GitLab/interactive tools; `gitlab_server` is a separate maintenance helper | Domain-grouped dispatchers with `action` parameter. Enable with `TOOL_SURFACE=meta`; see the full 33/49/50 catalog in [Meta-Tools Reference](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/meta-tools.md). |\n| **Individual** | 870 CE / 1030 self-managed enterprise / 1036 GitLab.com Enterprise | Every GitLab operation as a separate MCP tool. |\n\nFor dynamic experiments where resources and prompts dominate initial context, set `CAPABILITY_SURFACE=minimal` (stdio) or `--capability-surface=minimal` (HTTP). Minimal keeps `gitlab://workspace/roots` plus the surface-aware `gitlab://tools` manifest so dynamic, meta, and individual deployments can still read accepted call shapes. The default remains `full`.\n\nDynamic mode is now the default low-token find/execute surface; see [Dynamic Toolset](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/dynamic-tools.md) for the field-aware ranking model, fuzzy fallback, response shapes, workflow diagrams, and migration guidance. Set `TOOL_SURFACE=meta` to use the consolidated domain meta-tool catalog.\n\nThe detailed meta-tool catalog now lives in [Meta-Tools Reference](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/meta-tools.md), including action counts, Enterprise/Premium markers, and examples.\n\n## Compatibility\n\n| MCP Capability | Support |\n| --------------- | ---------------------------------------------------- |\n| **Tools** | Up to 1036 individual / 33–50 meta |\n| **Resources** | 46 (static + templates) |\n| **Prompts** | 37 templates |\n| **Completions** | Project, user, group, branch, tag |\n| **Logging** | Structured (text/JSON) + MCP notifications |\n| **Progress** | Tool execution progress reporting |\n| **Sampling** | 11 LLM-powered analysis actions via `gitlab_analyze` |\n| **Elicitation** | 4 interactive creation wizards |\n| **Roots** | Workspace root tracking |\n\nTested with: VS Code + GitHub Copilot, Claude Desktop, Claude Code, Cursor, Windsurf, JetBrains IDEs, Zed, Kiro, Cline, Roo Code.\n\nSee the full [Compatibility Matrix](https://jmrplens.github.io/gitlab-mcp-server/compatibility/) for detailed client support.\n\n## AI Model Tool-Use Evaluation\n\nThe project includes an automated evaluator for model-facing MCP quality. It can\nrun schema-only checks against the tool catalog or execute validated model tool\ncalls through MCP against Docker GitLab CE or licensed Enterprise instances\npopulated with fixtures.\nThe evaluator measures whether each model chooses the correct meta-tool and\naction, sends valid parameters, recovers from actionable GitLab errors, and\nrespects destructive-action safeguards.\n\n\nCurrent published result: **Docker CE-on-Enterprise meta 20260527**.\n\n| Provider | Model | Compatibility | Tool accuracy | Recovery | Docker live status |\n| --------- | --------------------------- | ------------- | ------------: | -------------: | --------------------------- |\n| Anthropic | `claude-haiku-4-5-20251001` | OK | 100.0% | No repairs | 100.0% final across 274 ops |\n| Google | `gemini-flash-latest` | Review | 74.3% | 100.0% (36/36) | 100.0% final across 274 ops |\n| OpenAI | `gpt-5.4-nano` | Review | 99.3% | 100.0% (6/6) | 100.0% final across 274 ops |\n| Qwen | `qwen3.6-flash` | OK | 100.0% | 100.0% (5/5) | 100.0% final across 274 ops |\n\nThe published model-evaluation set covers 560 task attempts and 1096 expected MCP operations. Across the selected reports, models emitted 1109 tool calls over 1145 model requests, with 100.0% aggregate final success. See [AI Model Evaluation Results](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/testing/model-results.md) for the detailed current matrix.\n\n\n\nCurrent published result: **Docker CE dynamic 20260606**.\n\n| Provider | Model | Compatibility | Tool accuracy | Recovery | Docker live status |\n| --------- | --------------------------- | ------------- | ------------: | ------------: | --------------------------- |\n| Anthropic | `claude-haiku-4-5-20251001` | OK | 100.0% | 100.0% (6/6) | 100.0% final across 573 ops |\n| Google | `gemini-flash-latest` | Review | 100.0% | 80.0% (4/5) | 99.3% final across 573 ops |\n| OpenAI | `gpt-5.4-nano` | Review | 99.4% | 95.8% (23/24) | 97.4% final across 573 ops |\n| Qwen | `qwen3.6-flash` | Review | 100.0% | 90.9% (10/11) | 99.3% final across 573 ops |\n\nThe published model-evaluation set covers 620 task attempts and 2292 expected MCP operations. Across the selected reports, models emitted 2367 tool calls over 2369 model requests, with 99.0% aggregate final success. See [AI Model Evaluation Results](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/testing/model-results.md) for the detailed current matrix.\n\n\n\nCurrent published result: **Docker Enterprise meta 20260527**.\n\n| Provider | Model | Compatibility | Tool accuracy | Recovery | Docker live status |\n| --------- | --------------------------- | ------------- | ------------: | -----------: | -------------------------- |\n| Anthropic | `claude-haiku-4-5-20251001` | OK | 100.0% | 100.0% (1/1) | 100.0% final across 84 ops |\n| Google | `gemini-flash-latest` | Review | 78.2% | 100.0% (7/7) | 100.0% final across 84 ops |\n| OpenAI | `gpt-5.4-nano` | Review | 100.0% | 100.0% (4/4) | 100.0% final across 84 ops |\n| Qwen | `qwen3.6-flash` | OK | 100.0% | 100.0% (1/1) | 100.0% final across 84 ops |\n\nThe published model-evaluation set covers 92 task attempts and 336 expected MCP operations. Across the selected reports, models emitted 345 tool calls over 350 model requests, with 100.0% aggregate final success. See [AI Model Evaluation Results](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/testing/model-results.md) for the detailed current matrix.\n\n\n\nCurrent published result: **Docker Enterprise dynamic 20260605 (Enterprise)**.\n\n| Provider | Model | Compatibility | Tool accuracy | Recovery | Docker live status |\n| --------- | --------------------------- | ------------- | ------------: | -----------: | --------------------------- |\n| Anthropic | `claude-haiku-4-5-20251001` | OK | 100.0% | No repairs | 100.0% final across 202 ops |\n| Google | `gemini-flash-latest` | OK | 100.0% | No repairs | 100.0% final across 202 ops |\n| OpenAI | `gpt-5.4-nano` | OK | 100.0% | 100.0% (3/3) | 100.0% final across 202 ops |\n| Qwen | `qwen3.6-flash` | OK | 100.0% | No repairs | 100.0% final across 202 ops |\n\nThe published model-evaluation set covers 124 task attempts and 808 expected MCP operations. Across the selected reports, models emitted 817 tool calls over 817 model requests, with 100.0% aggregate final success. See [AI Model Evaluation Results](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/testing/model-results.md) for the detailed current matrix.\n\n\n## Documentation\n\nFull documentation is available at **[jmrplens.github.io/gitlab-mcp-server](https://jmrplens.github.io/gitlab-mcp-server/)**. Use this map when you need the source-of-truth reference for a specific area:\n\n| Document | Description |\n| ---------------------------------------------------- | -------------------------------------------------------------------------------------- |\n| [Getting Started](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/getting-started.md) | Download, setup wizard, per-client configuration |\n| [IDE Configuration](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/ide-configuration.md) | Per-client stdio, HTTP legacy, and HTTP OAuth examples |\n| [Configuration](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/configuration.md) | Environment variables, transport modes, TLS |\n| [Environment Variables](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/env-reference.md) | Exhaustive environment variable table with defaults and examples |\n| [CLI Reference](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/cli-reference.md) | All command-line flags, exit codes, and runtime examples |\n| [HTTP Server Mode](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/http-server-mode.md) | Shared HTTP deployments, authentication, server pool isolation |\n| [Tools Reference](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/tools/README.md) | All individual tools with input/output schemas, including GitLab.com-only Orbit |\n| [Meta-Tools](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/meta-tools.md) | 33/49/50 domain meta-tools with action dispatching |\n| [Dynamic Toolset](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/dynamic-tools.md) | 2-tool low-token mode with canonical action catalog, safety model, and examples |\n| [Resources](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/resources-reference.md) | All 46 resources with URI templates |\n| [Prompts](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/prompts-reference.md) | All 37 prompts with arguments and output format |\n| [Auto-Update](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/auto-update.md) | Self-update mechanism, modes, and release format |\n| [Testing](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/testing/README.md) | Unit, E2E, schema model evaluation, Docker model evaluation, and curated model results |\n| [Security](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/security.md) | Security model, token scopes, input validation |\n| [Architecture](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/architecture.md) | System architecture, component design, data flow |\n| [Development Guide](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/development/development.md) | Building, testing, CI/CD, contributing |\n| [Troubleshooting](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/troubleshooting.md) | Common startup, token, TLS, transport, and tool-discovery issues |\n\n## Tech Stack\n\n| Component | Technology |\n| ------------- | ------------------------------------------------ |\n| Language | Go 1.26+ |\n| MCP SDK | `github.com/modelcontextprotocol/go-sdk` v1.6.1 |\n| GitLab Client | `gitlab.com/gitlab-org/api/client-go/v2` v2.38.0 |\n| Transport | stdio (default), HTTP (Streamable HTTP) |\n\n## Building from Source\n\n```bash\ngit clone https://github.com/jmrplens/gitlab-mcp-server.git\ncd gitlab-mcp-server\nmake build\n```\n\nSee the [Development Guide](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/development/development.md) for cross-compilation and contributing guidelines.\n\n## Container Image\n\nThe published image is `ghcr.io/jmrplens/gitlab-mcp-server:latest`. Runtime examples live in [Quick Start](#quick-start) next to MCP client configuration, and Docker Compose/source-build details live in the [Development Guide](https://github.com/jmrplens/gitlab-mcp-server/blob/main/docs/development/development.md#docker).\n\n## FAQ\n\n

Does it work with self-hosted GitLab?

\n\nYes. Set `GITLAB_URL` to your instance URL. When `GITLAB_URL` is omitted, stdio mode uses `https://gitlab.com`. Self-signed TLS certificates are supported via `GITLAB_SKIP_TLS_VERIFY=true`.\n

\n\n

Is my data safe?

\n\nThe server runs locally on your machine (stdio mode) or on your own infrastructure (HTTP mode). No data is sent to third parties — all API calls go directly to your GitLab instance. See SECURITY.md for details.\n

\n\n

Can I use it in read-only mode?

\n\nYes. Set `GITLAB_READ_ONLY=true` to disable all mutating tools (create, update, delete). Only read operations will be available.\n\nAlternatively, set `GITLAB_SAFE_MODE=true` for a dry-run mode: mutating tools remain visible but return a structured JSON preview instead of executing. Useful for auditing, training, or reviewing what an AI assistant would do.\n

\n\n

What GitLab editions are supported?

\n\nBoth Community Edition (CE) and Enterprise Edition (EE). Set `GITLAB_ENTERPRISE=true` in stdio mode to enable additional tools for Premium/Ultimate features (DORA metrics, vulnerabilities, compliance, etc.). In HTTP mode, `--enterprise` can force the Enterprise/Premium catalog, otherwise CE/EE is detected per token+URL pool entry when GitLab reports edition.\n

\n\n

How does it handle rate limiting?

\n\nThe server includes retry logic with backoff for GitLab API rate limits. Errors are classified as transient (retryable) or permanent, with actionable hints in error messages.\n

\n\n

Which AI clients are supported?

\n\nAny MCP-compatible client: VS Code + GitHub Copilot, Claude Desktop, Cursor, Claude Code, Windsurf, JetBrains IDEs, Zed, Kiro, and others. The built-in setup wizard can auto-configure most clients.\n

\n\n## Contributing\n\nSee [CONTRIBUTING.md](https://github.com/jmrplens/gitlab-mcp-server/blob/main/CONTRIBUTING.md) for development guidelines, branch naming, commit conventions, and pull request process.\n\n## Security\n\nSee [SECURITY.md](https://github.com/jmrplens/gitlab-mcp-server/blob/main/SECURITY.md) for the security policy and vulnerability reporting.\n\n## Code of Conduct\n\nSee [CODE_OF_CONDUCT.md](https://github.com/jmrplens/gitlab-mcp-server/blob/main/CODE_OF_CONDUCT.md). This project follows the [Contributor Covenant v2.1](https://www.contributor-covenant.org/version/2/1/code_of_conduct/).\n\n## Unnecessary Statistics\n\nNumbers nobody asked for, but here they are anyway.\n\n\n\n### File counts\n\n| Category | Files | Lines |\n| ------------------------ | --------: | ----------: |\n| Source (`.go`, non-test) | 914 | 156,158 |\n| Unit tests (`_test.go`) | 497 | 264,324 |\n| End-to-end tests | 140 | 33,031 |\n| **Total** | **1,551** | **453,513** |\n\n### Functions\n\n| Category | Count |\n| ------------------------------- | -----: |\n| Source functions | 6,537 |\n| — exported (public) | 2,471 |\n| — unexported (private) | 4,066 |\n| Unit test functions (`TestXxx`) | 10,659 |\n| Subtests (`t.Run(...)`) | 2,588 |\n| End-to-end test functions | 285 |\n\n### Ratios worth noting\n\n| Observation | Value |\n| ---------------------------------- | -------------------------: |\n| Test lines vs source lines | 1.69× more tests than code |\n| Average source file length | ~170 lines |\n| Average test file length | ~531 lines |\n| Comment lines in source | 12,479 (~8.0% of source) |\n| Test functions per source function | 1.6× |\n\n### Code patterns\n\n| Pattern | Count |\n| ---------------------------------- | ----: |\n| `if err != nil` checks | 6,191 |\n| `defer` statements | 794 |\n| `struct` types defined | 2,345 |\n| `//nolint` suppressions | 88 |\n| `TODO` / `FIXME` / `HACK` comments | 1 |\n\n### Project\n\n| Metric | Value |\n| ------------------------------ | ----: |\n| Go packages | 220 |\n| Direct dependencies (`go.mod`) | 11 |\n| Indirect dependencies | 49 |\n| Git commits | 208 |\n| Unique contributors | 3 |\n\n### Hall of fame\n\n| Record | File |\n| ------------------- | -------------------------------------------------------- |\n| Longest source file | `internal/tools/dynamic/register.go` — 3,741 lines |\n| Longest test file | `internal/tools/projects/projects_test.go` — 7,155 lines |\n\n### Because why not\n\n| Fact | Value |\n| ------------------------------------ | ---------------------------------------------------------------------------------------------------- |\n| Source code printed at 55 lines/page | ~2,839 pages of A4 |\n| Source lines mentioning `\"gitlab\"` | 9,402 (impossible to avoid) |\n| Longest function name in source | `assertDynamicCompatibilityPolicyOwnedByActionCompat` (51 chars) |\n| Longest test function name | `TestRequiredMissingAndUnknownParamNames_SchemaValidation_ReturnsSortedMissingAndUnknown` (87 chars) |\n\n\n","changelogMarkdown","videoKey","requiredSecretsJson","[\"PRIVATE_TOKEN\",\"GITLAB_URL\"]","publishedAt","priceCents","trialDays",0,"categoryDisplayName","Developer Tools","upstream",{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107},"requiredSecrets",[96,97],"tags",[],"assets",[],"stats",{"_94":81,"_95":81},"ratingAvg","reviewCount","PRIVATE_TOKEN","GITLAB_URL","topics",[108,109,110,111,112,113,114,115],"license","MIT","language","Go","registryName","io.github.jmrplens/gitlab-mcp-server","homepage","https://jmrplens.github.io/gitlab-mcp-server/","ai-tools","gitlab","gitlab-api","go","llm","mcp","mcp-server","model-context-protocol","ENV",{"_118":119,"_120":121,"_122":123},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]