/ 100

19 days ago

glama

gitlab-api

MCP server for interacting with GitLab API, supporting dynamic tool selection and enterprise-grade security.

→ Knuckles-Team/gitlab-api · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: GITLAB_TOKEN, LLM_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configDEFAULT_AGENT_NAME

configGITLAB_SSL_VERIFY

configGITLAB_URL— "": "your_gitlab_url_here",

🔐 secretGITLAB_TOKEN— "": "your_gitlab_token_here"

configFASTMCP_LOG_LEVEL

configTERM

configNO_COLOR

configGRAPHQLTOOL

configMISCTOOL

configBRANCHESTOOL

configCOMMITSTOOL

configDEPLOY_TOKENSTOOL

configENVIRONMENTSTOOL

configGROUPSTOOL

configJOBSTOOL

configMEMBERSTOOL

configMERGE_REQUESTSTOOL

configMERGE_RULESTOOL

configPACKAGESTOOL

configPIPELINESTOOL

configPIPELINE_SCHEDULESTOOL

configPROJECTSTOOL

configPROTECTED_BRANCHESTOOL

configRELEASESTOOL

configRUNNERSTOOL

configTAGSTOOL

configLABELSTOOL

configMILESTONESTOOL

configSNIPPETSTOOL

configNOTESTOOL

configEPICSTOOL

configISSUESTOOL

configCUSTOM_APITOOL

configMODEL_ID— ${MODEL_ID:-gpt-4o}

configLLM_BASE_URL

🔐 secretLLM_API_KEY

configMCP_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/knuckles-team-gitlab-api-dlo6e5)](https://m8ven.ai/mcp/knuckles-team-gitlab-api-dlo6e5)

commit: bd3630496bd87474bf87798925fc1337471b3029

code hash: 57067b83d2b9d78f964c5f6579d18af5ddf76a4485a449c8e8b8733d4d1fe962

verified: 6/18/2026, 11:36:41 AM

view raw JSON →