Back to Home
Alosies icon

gitlab-mcp-server

Verified Safe

by Alosies

Overview

A fully typed TypeScript Model Context Protocol (MCP) server for comprehensive GitLab integration, enabling AI agents to manage projects, issues, merge requests, pipelines, and jobs.

Installation

Run Command
npx -y @alosies/gitlab-mcp-server

Environment Variables

  • NPM_CONFIG_TOKEN
  • GITLAB_BASE_URL
  • GITLAB_DEFAULT_PROJECT
  • GITLAB_MCP_CONFIG
  • GITLAB_MCP_TIMEOUT
  • GITLAB_MCP_PER_PAGE
  • GITLAB_MCP_PROJECT_SCOPE
  • GITLAB_MCP_ENABLE_CACHING
  • GITLAB_MCP_ENABLE_METRICS
  • GITLAB_MCP_STRICT_SCOPING

Security Notes

The server uses `axios` for API calls, with `Bearer` token authentication. Tokens are explicitly retrieved from environment variables (e.g., `NPM_CONFIG_TOKEN`, `GITLAB_TOKEN`) or configuration files, and an error is thrown if no token is found, enforcing secure practices. API endpoints are constructed using `encodeURIComponent` to prevent path traversal and injection. There is no `eval` or obvious obfuscation. The `baseUrl` is configurable, which could be a risk if set maliciously, but this is typically controlled by the user's trusted configuration.

Similar Servers

Stats

Interest Score35
Security Score9
Cost ClassMedium
Avg Tokens1500
Stars5
Forks4
Last Update2025-11-27

Tags

GitLabMCPCI/CDDevOpsTypeScript