GitLab MCP Server

An open-source Model Context Protocol server written in Go that allows AI assistants to interact with GitLab instances. It exposes over 850 actions on Free/CE and 1,000+ on Ultimate, supporting stdio and HTTP transports. Features include dynamic tool discovery, read-only and safe modes, and coverage of the full REST and GraphQL API surface for tasks like reviewing merge requests, managing issues, and triaging pipelines.

Visit José Manuel Requena Plens

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

Community listingLocal stdioSource reviewed; not executedPublished by José Manuel Requena Plens

You need:Create a personal access token with the api scope (or read_api for the actions GitLab accepts from it; add GITLAB_MCP_READ_ONLY=true when nothing may be written).

Vendor documentation

What you can do with it

Review merge requests and analyze diffs
Triage CI/CD pipelines and summarize failures
Manage issues and create bug reports
Draft release notes from commit history

Source and maintenance

Community listingRegistry 3.4.0

mcp-registry: io.github.jmrplens/gitlab-mcp-server@3.4.0 Source repository Project website

Maintenance checked: Oct 31, 2026, 10:27 PM UTC

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

@jmrp.io/gitlab-mcp-server 3.4.0

npmnpx

@jmrp.io/gitlab-mcp-server package definition

{
  "version": "3.4.0",
  "transport": "stdio",
  "identifier": "@jmrp.io/gitlab-mcp-server",
  "runtimeHint": "npx",
  "registryType": "npm",
  "environmentVariables": [
    {
      "name": "GITLAB_URL",
      "default": "https://gitlab.com",
      "description": "GitLab instance URL (default: https://gitlab.com; set for self-managed instances)",
      "placeholder": "https://gitlab.com"
    },
    {
      "name": "GITLAB_TOKEN",
      "isRequired": true,
      "description": "GitLab Personal Access Token (glpat-...)"
    },
    {
      "name": "GITLAB_MCP_SKIP_TLS_VERIFY",
      "format": "boolean",
      "default": "false",
      "description": "Skip TLS certificate verification for self-signed certs (default: false)"
    },
    {
      "name": "GITLAB_MCP_TOOL_SURFACE",
      "choices": [
        "meta",
        "individual",
        "dynamic"
      ],
      "default": "dynamic",
      "description": "Tool catalog selector: dynamic, meta, or individual (default: dynamic)"
    },
    {
      "name": "GITLAB_MCP_CAPABILITY_SURFACE",
      "choices": [
        "full",
        "minimal"
      ],
      "default": "full",
      "description": "Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full"
    },
    {
      "name": "GITLAB_MCP_META_PARAM_SCHEMA",
      "choices": [
        "opaque",
        "compact",
        "full"
      ],
      "default": "opaque",
      "description": "Meta-tool input schema detail: opaque, compact, or full (default: opaque)"
    },
    {
      "name": "GITLAB_MCP_TIER",
      "choices": [
        "free",
        "ce",
        "premium",
        "ultimate"
      ],
      "description": "GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools"
    },
    {
      "name": "GITLAB_MCP_READ_ONLY",
      "format": "boolean",
      "default": "false",
      "description": "Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)"
    },
    {
      "name": "GITLAB_MCP_SAFE_MODE",
      "format": "boolean",
      "default": "false",
      "description": "Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)"
    },
    {
      "name": "GITLAB_MCP_EMBEDDED_RESOURCES",
      "format": "boolean",
      "default": "true",
      "description": "Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)"
    },
    {
      "name": "GITLAB_MCP_EXCLUDE_TOOLS",
      "description": "Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner)",
      "placeholder": "gitlab_admin,gitlab_runner"
    },
    {
      "name": "GITLAB_MCP_IGNORE_SCOPES",
      "format": "boolean",
      "default": "false",
      "description": "Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false)"
    },
    {
      "name": "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE",
      "default": "2147483648",
      "description": "Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB)"
    },
    {
      "name": "GITLAB_MCP_ALLOWED_UPLOAD_DIRS",
      "description": "Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
      "placeholder": "/path/to/files:/another/path/to/files"
    },
    {
      "name": "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS",
      "description": "Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
      "placeholder": "/path/to/downloads:/another/path/to/downloads"
    },
    {
      "name": "GITLAB_MCP_ALLOWED_IMPORT_DIRS",
      "description": "Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
      "placeholder": "/path/to/exports:/another/path/to/exports"
    },
    {
      "name": "GITLAB_MCP_RATE_LIMIT_RPS",
      "format": "number",
      "default": "0",
      "description": "Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0)"
    },
    {
      "name": "GITLAB_MCP_RATE_LIMIT_BURST",
      "format": "number",
      "default": "40",
      "description": "Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)"
    },
    {
      "name": "GITLAB_MCP_LOG_LEVEL",
      "choices": [
        "debug",
        "info",
        "warn",
        "error"
      ],
      "default": "info",
      "description": "Logging verbosity (default: info)"
    },
    {
      "name": "GITLAB_MCP_LANGUAGE",
      "choices": [
        "en",
        "es"
      ],
      "default": "en",
      "description": "Language of the elicitation questions, form field titles and progress messages a client shows the user: en or es (default: en). What the model reads stays English"
    }
  ]
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

No tool definitions available.

Connect from your client

Each snippet configures the same source-provided package; replace placeholders before use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Cursor

Merge this local stdio configuration, replace every placeholder environment value, and restart Cursor. Koskamo has not executed this package.

Cursor configuration

{
  "mcpServers": {
    "gitlab-mcp-server-jmrp-io-gitlab-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@jmrp.io/gitlab-mcp-server@3.4.0"
      ],
      "env": {
        "GITLAB_URL": "<YOUR_GITLAB_URL>",
        "GITLAB_TOKEN": "<YOUR_GITLAB_TOKEN>",
        "GITLAB_MCP_SKIP_TLS_VERIFY": "<YOUR_GITLAB_MCP_SKIP_TLS_VERIFY>",
        "GITLAB_MCP_TOOL_SURFACE": "<YOUR_GITLAB_MCP_TOOL_SURFACE>",
        "GITLAB_MCP_CAPABILITY_SURFACE": "<YOUR_GITLAB_MCP_CAPABILITY_SURFACE>",
        "GITLAB_MCP_META_PARAM_SCHEMA": "<YOUR_GITLAB_MCP_META_PARAM_SCHEMA>",
        "GITLAB_MCP_TIER": "<YOUR_GITLAB_MCP_TIER>",
        "GITLAB_MCP_READ_ONLY": "<YOUR_GITLAB_MCP_READ_ONLY>",
        "GITLAB_MCP_SAFE_MODE": "<YOUR_GITLAB_MCP_SAFE_MODE>",
        "GITLAB_MCP_EMBEDDED_RESOURCES": "<YOUR_GITLAB_MCP_EMBEDDED_RESOURCES>",
        "GITLAB_MCP_EXCLUDE_TOOLS": "<YOUR_GITLAB_MCP_EXCLUDE_TOOLS>",
        "GITLAB_MCP_IGNORE_SCOPES": "<YOUR_GITLAB_MCP_IGNORE_SCOPES>",
        "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE": "<YOUR_GITLAB_MCP_UPLOAD_MAX_FILE_SIZE>",
        "GITLAB_MCP_ALLOWED_UPLOAD_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_UPLOAD_DIRS>",
        "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS>",
        "GITLAB_MCP_ALLOWED_IMPORT_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_IMPORT_DIRS>",
        "GITLAB_MCP_RATE_LIMIT_RPS": "<YOUR_GITLAB_MCP_RATE_LIMIT_RPS>",
        "GITLAB_MCP_RATE_LIMIT_BURST": "<YOUR_GITLAB_MCP_RATE_LIMIT_BURST>",
        "GITLAB_MCP_LOG_LEVEL": "<YOUR_GITLAB_MCP_LOG_LEVEL>",
        "GITLAB_MCP_LANGUAGE": "<YOUR_GITLAB_MCP_LANGUAGE>"
      }
    }
  }
}

Cline

Merge this local stdio configuration, replace every placeholder environment value, and restart Cline. Koskamo has not executed this package.

Cline configuration

{
  "mcpServers": {
    "gitlab-mcp-server-jmrp-io-gitlab-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@jmrp.io/gitlab-mcp-server@3.4.0"
      ],
      "env": {
        "GITLAB_URL": "<YOUR_GITLAB_URL>",
        "GITLAB_TOKEN": "<YOUR_GITLAB_TOKEN>",
        "GITLAB_MCP_SKIP_TLS_VERIFY": "<YOUR_GITLAB_MCP_SKIP_TLS_VERIFY>",
        "GITLAB_MCP_TOOL_SURFACE": "<YOUR_GITLAB_MCP_TOOL_SURFACE>",
        "GITLAB_MCP_CAPABILITY_SURFACE": "<YOUR_GITLAB_MCP_CAPABILITY_SURFACE>",
        "GITLAB_MCP_META_PARAM_SCHEMA": "<YOUR_GITLAB_MCP_META_PARAM_SCHEMA>",
        "GITLAB_MCP_TIER": "<YOUR_GITLAB_MCP_TIER>",
        "GITLAB_MCP_READ_ONLY": "<YOUR_GITLAB_MCP_READ_ONLY>",
        "GITLAB_MCP_SAFE_MODE": "<YOUR_GITLAB_MCP_SAFE_MODE>",
        "GITLAB_MCP_EMBEDDED_RESOURCES": "<YOUR_GITLAB_MCP_EMBEDDED_RESOURCES>",
        "GITLAB_MCP_EXCLUDE_TOOLS": "<YOUR_GITLAB_MCP_EXCLUDE_TOOLS>",
        "GITLAB_MCP_IGNORE_SCOPES": "<YOUR_GITLAB_MCP_IGNORE_SCOPES>",
        "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE": "<YOUR_GITLAB_MCP_UPLOAD_MAX_FILE_SIZE>",
        "GITLAB_MCP_ALLOWED_UPLOAD_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_UPLOAD_DIRS>",
        "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS>",
        "GITLAB_MCP_ALLOWED_IMPORT_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_IMPORT_DIRS>",
        "GITLAB_MCP_RATE_LIMIT_RPS": "<YOUR_GITLAB_MCP_RATE_LIMIT_RPS>",
        "GITLAB_MCP_RATE_LIMIT_BURST": "<YOUR_GITLAB_MCP_RATE_LIMIT_BURST>",
        "GITLAB_MCP_LOG_LEVEL": "<YOUR_GITLAB_MCP_LOG_LEVEL>",
        "GITLAB_MCP_LANGUAGE": "<YOUR_GITLAB_MCP_LANGUAGE>"
      }
    }
  }
}

VS Code

Merge this local stdio configuration, replace every placeholder environment value, and restart VS Code. Koskamo has not executed this package.

VS Code configuration

{
  "servers": {
    "gitlab-mcp-server-jmrp-io-gitlab-mcp-server": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@jmrp.io/gitlab-mcp-server@3.4.0"
      ],
      "env": {
        "GITLAB_URL": "<YOUR_GITLAB_URL>",
        "GITLAB_TOKEN": "<YOUR_GITLAB_TOKEN>",
        "GITLAB_MCP_SKIP_TLS_VERIFY": "<YOUR_GITLAB_MCP_SKIP_TLS_VERIFY>",
        "GITLAB_MCP_TOOL_SURFACE": "<YOUR_GITLAB_MCP_TOOL_SURFACE>",
        "GITLAB_MCP_CAPABILITY_SURFACE": "<YOUR_GITLAB_MCP_CAPABILITY_SURFACE>",
        "GITLAB_MCP_META_PARAM_SCHEMA": "<YOUR_GITLAB_MCP_META_PARAM_SCHEMA>",
        "GITLAB_MCP_TIER": "<YOUR_GITLAB_MCP_TIER>",
        "GITLAB_MCP_READ_ONLY": "<YOUR_GITLAB_MCP_READ_ONLY>",
        "GITLAB_MCP_SAFE_MODE": "<YOUR_GITLAB_MCP_SAFE_MODE>",
        "GITLAB_MCP_EMBEDDED_RESOURCES": "<YOUR_GITLAB_MCP_EMBEDDED_RESOURCES>",
        "GITLAB_MCP_EXCLUDE_TOOLS": "<YOUR_GITLAB_MCP_EXCLUDE_TOOLS>",
        "GITLAB_MCP_IGNORE_SCOPES": "<YOUR_GITLAB_MCP_IGNORE_SCOPES>",
        "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE": "<YOUR_GITLAB_MCP_UPLOAD_MAX_FILE_SIZE>",
        "GITLAB_MCP_ALLOWED_UPLOAD_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_UPLOAD_DIRS>",
        "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS>",
        "GITLAB_MCP_ALLOWED_IMPORT_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_IMPORT_DIRS>",
        "GITLAB_MCP_RATE_LIMIT_RPS": "<YOUR_GITLAB_MCP_RATE_LIMIT_RPS>",
        "GITLAB_MCP_RATE_LIMIT_BURST": "<YOUR_GITLAB_MCP_RATE_LIMIT_BURST>",
        "GITLAB_MCP_LOG_LEVEL": "<YOUR_GITLAB_MCP_LOG_LEVEL>",
        "GITLAB_MCP_LANGUAGE": "<YOUR_GITLAB_MCP_LANGUAGE>"
      }
    }
  }
}

Claude Desktop

Merge this local stdio configuration, replace every placeholder environment value, and restart Claude Desktop. Koskamo has not executed this package.

Claude Desktop configuration

{
  "mcpServers": {
    "gitlab-mcp-server-jmrp-io-gitlab-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@jmrp.io/gitlab-mcp-server@3.4.0"
      ],
      "env": {
        "GITLAB_URL": "<YOUR_GITLAB_URL>",
        "GITLAB_TOKEN": "<YOUR_GITLAB_TOKEN>",
        "GITLAB_MCP_SKIP_TLS_VERIFY": "<YOUR_GITLAB_MCP_SKIP_TLS_VERIFY>",
        "GITLAB_MCP_TOOL_SURFACE": "<YOUR_GITLAB_MCP_TOOL_SURFACE>",
        "GITLAB_MCP_CAPABILITY_SURFACE": "<YOUR_GITLAB_MCP_CAPABILITY_SURFACE>",
        "GITLAB_MCP_META_PARAM_SCHEMA": "<YOUR_GITLAB_MCP_META_PARAM_SCHEMA>",
        "GITLAB_MCP_TIER": "<YOUR_GITLAB_MCP_TIER>",
        "GITLAB_MCP_READ_ONLY": "<YOUR_GITLAB_MCP_READ_ONLY>",
        "GITLAB_MCP_SAFE_MODE": "<YOUR_GITLAB_MCP_SAFE_MODE>",
        "GITLAB_MCP_EMBEDDED_RESOURCES": "<YOUR_GITLAB_MCP_EMBEDDED_RESOURCES>",
        "GITLAB_MCP_EXCLUDE_TOOLS": "<YOUR_GITLAB_MCP_EXCLUDE_TOOLS>",
        "GITLAB_MCP_IGNORE_SCOPES": "<YOUR_GITLAB_MCP_IGNORE_SCOPES>",
        "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE": "<YOUR_GITLAB_MCP_UPLOAD_MAX_FILE_SIZE>",
        "GITLAB_MCP_ALLOWED_UPLOAD_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_UPLOAD_DIRS>",
        "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS>",
        "GITLAB_MCP_ALLOWED_IMPORT_DIRS": "<YOUR_GITLAB_MCP_ALLOWED_IMPORT_DIRS>",
        "GITLAB_MCP_RATE_LIMIT_RPS": "<YOUR_GITLAB_MCP_RATE_LIMIT_RPS>",
        "GITLAB_MCP_RATE_LIMIT_BURST": "<YOUR_GITLAB_MCP_RATE_LIMIT_BURST>",
        "GITLAB_MCP_LOG_LEVEL": "<YOUR_GITLAB_MCP_LOG_LEVEL>",
        "GITLAB_MCP_LANGUAGE": "<YOUR_GITLAB_MCP_LANGUAGE>"
      }
    }
  }
}

Let your agent find its tools

Find servers like GitLab MCP Server from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows

See all 3,186