GitLab MCP Server

GitLab API access via 86 specialized tools for AI model context integration.

Data last scanned today · Reviewed today

68★ 61TypeScriptMIT

Overview

GitLab MCP Server functions as a direct, schema-validated bridge between your AI assistant and GitLab, supporting both self-hosted instances and gitlab.com. It moves beyond simple wrappers to provide 86 distinct tools mapped to the GitLab REST API, enabling detailed interaction with project structures and activity tracking.

Our verdict

With a security score of 68/100, this server is categorized as medium risk. While it offers a read-only configuration to restrict data exposure, it is community-maintained rather than developed by the official GitLab team. It is suitable for developers who prioritize deep feature coverage and accept the responsibility of using third-party code for sensitive repository tasks.

Supports a read-only configuration for safer operations.
Provides 86 distinct tools covering a wide API surface.
Small dependency footprint with only 6 direct dependencies.
Uses OAuth for authentication and access control.

Community-maintained project lacking official vendor endorsement.
Has not yet undergone an independent editorial security review.

Setup

Claude Desktop

{
  "mcpServers": {
    "mcp-gitlab-server": {
      "args": [
        "-y",
        "@yoda.digital/gitlab-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

Compatibility

Client	Local	Docker	Remote	Read-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›Does the server support self-hosted GitLab instances?

Yes, it works with both gitlab.com and self-hosted GitLab instances by configuring the GITLAB_API_URL environment variable.

›What authentication methods are available?

The server supports personal access tokens (PAT), OAuth Bearer tokens, or a read-only token mode for safe demonstrations.

›Can I prevent the AI from making changes to my GitLab instance?

Yes, you can enable read-only mode by setting the GITLAB_READ_ONLY_MODE environment variable to true.

›What are the requirements for running the server as a network-exposed HTTP service?

When running on a non-loopback bind, the server requires AUTH_MODE to be set to oauth and will refuse to start if set to pat.

›Does this server rely on screen-scraping?

No, it is a typed and schema-validated bridge that communicates directly with the GitLab REST API rather than wrapping the glab CLI or scraping web pages.

Badge

Maintain this server? Add the live badge to your README.