68
grade C
3 days ago
glama
GitLab MCP Server
Enables project management and repository operations on GitLab through the GitLab API, including file operations, branch management, issue creation, merge requests, and repository forking with support for both GitLab.com and self-hosted instances.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
10 flows detected: GITLAB_PERSONAL_ACCESS_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 1 credential: GITLAB_PERSONAL_ACCESS_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
GITLAB_API_URL— "": "https://gitlab.com/api/v4" // Optional, for self-hosted instances🔐 secret
GITLAB_PERSONAL_ACCESS_TOKEN— "": "<YOUR_TOKEN>",// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/maxkulish-gitlab-mcp-archive-1ghnue)commit: 374265f0ee9bf57adc62f96ce2a6c463ff0ff467
code hash: beacebca584f256d3c2693d471a8e75e95195aab3c9c467f9a5ed3425d9773f9
verified: 4/18/2026, 6:39:57 PM