GitLab MCP Server

Enables AI assistants to interact with GitLab by wrapping the REST API v4 into executable tools for repository and branch management. It supports operations like creating projects, managing branches, and retrieving user information through the Model Context Protocol.

→ masx200/gitlab-mcp-server · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 6 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

29 tools verified — handlers match their declared behaviour

1 read-only tool verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: GITLAB_TOKEN, MCP_CLIENT_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configGITLAB_HOST— 否 GitLab 实例地址 https://gitlab.com

🔐 secretGITLAB_TOKEN— 你的GitLab访问令牌

configMCP_AUTH_PORT

configMCP_CLIENT_ALGORITHM

configMCP_CLIENT_ID

configMCP_CLIENT_PRIVATE_KEY_PEM

🔐 secretMCP_CLIENT_SECRET

configMCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL

configMCP_PORT

configMCP_SERVER_URL

configPORT

configSKIP_INTEGRATION_TESTS

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/masx200-gitlab-mcp-server-ec90ni)](https://m8ven.ai/mcp/masx200-gitlab-mcp-server-ec90ni)

commit: dddf56d58ef864d0402206adc16c73bca75b132a

code hash: dc8d598b4124087f2c185161a121a88fb1665c3bc63ec063d250e2ef1b21d23e

verified: 4/11/2026, 2:45:22 PM

view raw JSON →