GitLab MCP Server
An MCP server for GitLab and self-hosted instances: projects, merge requests, issues, pipelines, wiki and releases
- 2,074 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Writes to repositories, MRs and issues and can delete data in full mode
- Uses a GitLab access token
Install
- Works in
Manual install
npm install -g @zereight/mcp-gitlabOr brew install zereight/gitlab-mcp/zereight-mcp-gitlab after brew tap.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Writes to repositories, MRs and issues and can delete data in full mode
- Uses a GitLab access token
This is third-party code. Review the repository files before installing.
What it does
The server connects the agent to GitLab through its API and exposes hundreds of granular tools for projects, merge requests, issues, pipelines, wiki, tags, releases and milestones. MR review uses a two-step flow: list changed files first, then fetch diffs in batches. Tools can be narrowed by group, allow-list or regex, and the readonly and modify modes block writes or deletes. The repository also ships a skill with workflow guidance.
Who it is for. For teams on GitLab.com or a self-hosted GitLab who want to handle MRs, issues and CI through an agent.
Good fit when
- You need to review a merge request diff
- You need to find out why a pipeline failed
- You need to create and update issues on a corporate GitLab
Not a fit when
- Your code lives on GitHub or another platform
- Company policy forbids giving tokens to third-party tools
Example request
Review MR !42 in backend/api and leave comments on the changed filesMCP
- Transport
- stdio, sse, http
- Authentication
- API key
Environment variables
GITLAB_PERSONAL_ACCESS_TOKENrequired, secret- GitLab Personal Access Token unless OAuth is used.
GITLAB_API_URL- API address, for example https://gitlab.com/api/v4.
GITLAB_PERMISSION_MODE- readonly, modify or full (default).
GITLAB_USE_OAUTH- Enables local browser OAuth instead of a token.
Limitations
Requires a Personal Access Token or a GitLab OAuth app. The default mode is full, including deletes, so set GITLAB_PERMISSION_MODE=readonly or modify. GITLAB_API_URL must point to /api/v4, not the site root. GitLab.com access from Russia can be unreliable; a self-hosted instance has no such issue. Not an official GitLab project.
How to disable. Run claude mcp remove gitlab or delete the gitlab block from the MCP config. Revoke the token in GitLab settings.
FAQ
Does it work with self-hosted GitLab?
Yes, set GITLAB_API_URL to your instance address ending in /api/v4.
How do I block deletes?
GITLAB_PERMISSION_MODE=modify keeps create and update but removes every delete tool. readonly blocks writes entirely.
Discussion
No questions or reviews yet.
Related
MCP serversA remote MCP server that gives the agent docs and code of any public GitHub repository with nothing to install
GitVerse MCP: code review and PRs
GitVerse MCP Server
A GitVerse MCP server with 25 bitbucket-mcp-style tools: pull requests, inline code review with verdicts and running GitVerse Actions CI pipelines
GitFlic MCP built on gitflic-cli
gitflic-cli MCP-сервер
An MCP server with 76 typed tools over a GitFlic CLI: merge requests, issues, releases, package registry, with group filters and a read-only mode
GitFlic MCP: 66 API tools
gitflic-mcp
The only MCP server found for GitFlic, a Russian repository-hosting platform: projects, issues, merge requests, files, releases, webhooks and CI/CD
A local codebase index with ten MCP tools: dependency graph, git history, code health and architectural decisions without re-grepping on every step
A plugin with skills for building TypeScript MCP servers and MCP apps: the agent scaffolds, edits, debugs and verifies them
README in short
The README covers four auth options: PAT, local browser OAuth, an OAuth proxy for remote clients and per-request authorization. The server installs via Homebrew, npm or Nix and runs over stdio, SSE and Streamable HTTP, including from a Docker image. Separate guides cover Claude Code, VS Code, Copilot, Codex and Cursor; tool filters and environment variables are documented on the docs site. MIT licensed.