Back to Home
ryan-rbw icon

kepler-mcp-gitlab-server

Verified Safe

by ryan-rbw

Overview

Provides GitLab integration tools to AI assistants like Claude Desktop and ChatGPT, acting as a secure bridge for code and project management operations.

Installation

Run Command
docker run -d --name kepler-mcp-gitlab -p 8000:8000 -e KEPLER_MCP_GITLAB_URL=https://gitlab.your-company.com -e KEPLER_MCP_OAUTH_USER_AUTH_ENABLED=true -e KEPLER_MCP_OAUTH_CLIENT_ID=your_client_id -e KEPLER_MCP_OAUTH_CLIENT_SECRET=your_secret -e KEPLER_MCP_OAUTH_REDIRECT_URI=https://your-mcp-server.com/oauth/callback -e KEPLER_MCP_OAUTH_AUTHORIZATION_URL=https://gitlab.your-company.com/oauth/authorize -e KEPLER_MCP_OAUTH_TOKEN_URL=https://gitlab.your-company.com/oauth/token -e KEPLER_MCP_OAUTH_SCOPE="api read_user read_repository" kepler-mcp-gitlab

Environment Variables

  • KEPLER_MCP_GITLAB_URL
  • KEPLER_MCP_OAUTH_USER_AUTH_ENABLED
  • KEPLER_MCP_OAUTH_CLIENT_ID
  • KEPLER_MCP_OAUTH_CLIENT_SECRET
  • KEPLER_MCP_OAUTH_AUTHORIZATION_URL
  • KEPLER_MCP_OAUTH_TOKEN_URL
  • KEPLER_MCP_OAUTH_REDIRECT_URI
  • KEPLER_MCP_OAUTH_SCOPE

Security Notes

The server implements strong security practices including OAuth 2.0 with PKCE for user authentication, Fernet encryption for session tokens at rest, and explicit redaction of sensitive data in logs. It uses Pydantic's SecretStr for secret configuration fields. The server binds to '0.0.0.0' by default, which is noted as intentional for Docker container networking, but administrators must ensure it's behind a reverse proxy or firewall in production to mitigate direct exposure. There are no obvious malicious patterns, 'eval' usage (other than standard library imports, not arbitrary execution) or hardcoded secrets in the provided code.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassMedium
Avg Tokens700
Stars0
Forks0
Last Update2025-12-08

Tags

GitLabAI AssistantMCPOAuthCode ManagementIssue TrackingMerge RequestsRepository