Advanced GitLab MCP server
MCPB · GITLAB-MCP-9.1.1.MCPB · 2 COMPONENTS · SCANNED AUG 3
58 CQRS tools exposing 230 GitLab operations across 26 entity types
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security13
- Malware scan not yet available for this package.Unverified
- CVE data not yet available for this package.Unverified
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (146 of 147), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 41 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability28
- AI-judged instruction clarity (fair).Partial
- Context-footprint check failed: tool/resource definitions use about 21809 tokens (~376/item across 58 items; 58 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
mcpb · gitlab-mcp-9.1.1.mcpb
Download bundleEvery change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 0
- Dependency health: unverified → partial ▲ functional
- 1 Aug 26 −3
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 +29
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Dependency health: partial → unverified ▼ functional
- License: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Maintenance: unverified → pass ▲ functional
- Licence: Apache-2.0 functional
- 28 Jul 26 −32
- Install scripts: pass → unverified ▼ security
- Provenance: fail → unverified ▼ security
- Tool coverage: 100 → unverified ▼ functional
- License: pass → unverified ▼ functional
- Licence: Apache-2.0 functional
- 27 Jul 26 +33
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Security disclosure: unverified → fail ▼ functional
- License: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: fail functional
- First check of Schema quality: fair functional
- Licence: Apache-2.0 functional
- 26 Jul 26 7
First indexed and scored.
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed mcpb/https://github.com/structured-world/gitlab-mcp/releases/download/gitlab-mcp-v9.1.1/gitlab-mcp-9.1.1.mcpb
Provenance none
Ecosystem: mcpb · Outcome: none
Dependencies 146 packages
146 packages in the resolved dependency tree · 146 deprecated · 42 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
manage_files ~440
Create, update, or upload repository files. Actions: single (create/update one file with commit message), batch (atomic multi-file commit), upload (add attachment returning markdown link). Related: browse_files to read existing files.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: single, batch, upload |
| author_email | string | — | Commit author email Required for 'single', 'batch' action(s). |
| author_name | string | — | Commit author name Required for 'single', 'batch' action(s). |
| branch | string | yes | Target branch name Required for 'single', 'batch' action(s). |
| commit_message | string | yes | Commit message Required for 'single', 'batch' action(s). |
| content | string | yes | File content (text or base64 encoded) Required for 'single' action(s). |
| encoding | string | — | Content encoding (default: text) Required for 'single' action(s). |
| execute_filemode | boolean | — | Set executable permission Required for 'single' action(s). |
| file | string | — | Base64 encoded file content Required for 'upload' action(s). |
| file_path | string | yes | Path to the file Required for 'single' action(s). |
| filename | string | — | Name of the file Required for 'upload' action(s). |
| files | array | — | Files to commit (at least one required) Required for 'batch' action(s). |
| last_commit_id | string | — | Last known commit ID for conflict detection Required for 'single' action(s). |
| overwrite | boolean | — | If true, automatically detect which files exist and update them, create others (requires pre-check for each file via GET requests). If false or omitted, only create new files (fails if any file exist… |
| project_id | string | yes | Project ID or URL-encoded path |
| start_branch | string | — | Base branch to start from Required for 'single', 'batch' action(s). |
No output schema declared.
No examples provided.
manage_integration ~449
Configure or disable project integrations (50+ supported). Actions: update (enable/modify with integration-specific config), disable (deactivate integration). Note: gitlab-slack-application requires OAuth install from GitLab UI. Related: browse_integrations for discovery.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: update, disable |
| active | boolean | — | Enable or disable the integration without full configuration Required for 'update' action(s). |
| confidential_issues_events | boolean | — | Trigger integration on confidential issue events Required for 'update' action(s). |
| config | object | — | Integration-specific configuration parameters. Pass as key-value pairs. Examples: webhook_url, token, channel, etc. See GitLab API documentation for integration-specific fields. Required for 'update'… |
| deployment_events | boolean | — | Trigger integration on deployment events Required for 'update' action(s). |
| integration | string | yes | Integration type slug (e.g., slack, jira, discord). Note: gitlab-slack-application cannot be created via API - it requires OAuth installation from GitLab UI. |
| issues_events | boolean | — | Trigger integration on issue events Required for 'update' action(s). |
| job_events | boolean | — | Trigger integration on job events Required for 'update' action(s). |
| merge_requests_events | boolean | — | Trigger integration on merge request events Required for 'update' action(s). |
| note_events | boolean | — | Trigger integration on note events Required for 'update' action(s). |
| pipeline_events | boolean | — | Trigger integration on pipeline events Required for 'update' action(s). |
| project_id | string | yes | Project ID or URL-encoded path |
| push_events | boolean | — | Trigger integration on push events Required for 'update' action(s). |
| releases_events | boolean | — | Trigger integration on release events Required for 'update' action(s). |
| tag_push_events | boolean | — | Trigger integration on tag push events Required for 'update' action(s). |
| vulnerability_events | boolean | — | Trigger integration on vulnerability events Required for 'update' action(s). |
| wiki_page_events | boolean | — | Trigger integration on wiki page events Required for 'update' action(s). |
No output schema declared.
No examples provided.
manage_job_token_scope ~245
Manage a project CI/CD job token inbound allowlist. Actions: set_enabled (turn allowlist enforcement on/off), add_project / remove_project (grant or revoke a project), add_group / remove_group (grant or revoke a group). Required to allow cross-project CI_JOB_TOKEN access once the legacy open-access mode is removed. Related: browse_job_token_scope to inspect.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: set_enabled, add_project, remove_project, add_group, remove_group |
| enabled | boolean | yes | When true, only allowlisted projects/groups may access this project via CI_JOB_TOKEN. Required for 'set_enabled' action(s). |
| project_id | string | yes | Project whose job token scope is modified. Numeric ID or URL-encoded path (e.g. 'group/project' or '123'). |
| target_group_id | integer | — | Numeric ID of the group to add/remove from the inbound allowlist. Required for 'add_group', 'remove_group' action(s). |
| target_project_id | integer | — | Numeric ID of the project to add/remove from the inbound allowlist. Required for 'add_project', 'remove_project' action(s). |
No output schema declared.
No examples provided.
manage_label ~244
Create, update, or delete project/group labels. Actions: create (name + hex color required), update (modify properties), delete (remove permanently). Related: browse_labels for discovery.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, delete |
| color | string | — | The color of the label in 6-digit hex notation with leading '#' (e.g. #FFAABB) or CSS color name Required for 'create', 'update' action(s). |
| description | string | — | The description of the label Required for 'create', 'update' action(s). |
| label_id | string | — | The ID or title of the label Required for 'update', 'delete' action(s). |
| name | string | — | The name of the label Required for 'create', 'update' action(s). |
| namespace | string | yes | Namespace path (group or project) |
| new_name | string | — | The new name of the label Required for 'update' action(s). |
| priority | number | — | The priority of the label. Must be greater or equal than zero or null to remove the priority. Required for 'create', 'update' action(s). |
No output schema declared.
No examples provided.
manage_member ~377
Add, remove, or update access levels for project/group members. Actions: add_to_project, add_to_group (with access level + optional expiry), remove_from_project, remove_from_group, update_project, update_group (change access level). Related: browse_members for current membership.
| Name | Type | Req | Description |
|---|---|---|---|
| access_level | integer | yes | Access level: 0=No access, 5=Minimal, 10=Guest, 20=Reporter, 30=Developer, 40=Maintainer, 50=Owner Required for 'add_to_project', 'add_to_group', 'update_project', 'update_group' action(s). |
| action | string | yes | Action to perform: add_to_project, add_to_group, remove_from_project, remove_from_group, update_project, update_group |
| expires_at | string | — | Membership expiration date in ISO 8601 format (YYYY-MM-DD) Required for 'add_to_project', 'add_to_group', 'update_project', 'update_group' action(s). |
| group_id | string | — | Group ID or URL-encoded path Required for 'add_to_group', 'remove_from_group', 'update_group' action(s). |
| member_role_id | integer | — | ID of a custom member role (Ultimate only) Required for 'update_group' action(s). |
| project_id | string | yes | Project ID or URL-encoded path Required for 'add_to_project', 'remove_from_project', 'update_project' action(s). |
| skip_subresources | boolean | — | Skip removing from subgroups and projects Required for 'remove_from_project', 'remove_from_group' action(s). |
| unassign_issuables | boolean | — | Unassign member from issues and merge requests Required for 'remove_from_project', 'remove_from_group' action(s). |
| user_id | string | yes | User ID to remove |
No output schema declared.
No examples provided.
manage_merge_request ~661
Create, update, merge, or approve merge requests. Actions: create (new MR from source to target), update (title/description/assignees/reviewers/labels), merge (into target branch), approve/unapprove (review approval), get_approval_state (current approvals). Related: browse_merge_requests for discovery.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, merge, approve, unapprove, get_approval_state |
| add_labels | — | — | Labels to add Required for 'update' action(s). |
| allow_collaboration | boolean | — | Let maintainers push to source branch Required for 'create', 'update' action(s). |
| allow_maintainer_to_push | boolean | — | Deprecated - use allow_collaboration Required for 'create', 'update' action(s). |
| assignee_id | string | — | Single assignee user ID Required for 'create', 'update' action(s). |
| assignee_ids | array | — | Multiple assignee IDs Required for 'create', 'update' action(s). |
| description | string | — | MR description (Markdown) Required for 'create', 'update' action(s). |
| discussion_locked | boolean | — | Lock discussion thread Required for 'update' action(s). |
| labels | — | — | Labels to categorize MR Required for 'create', 'update' action(s). |
| merge_commit_message | string | — | Custom merge commit message Required for 'merge' action(s). |
| merge_request_iid | string | — | Internal MR ID unique to project Required for 'update', 'merge', 'approve', 'unapprove', 'get_approval_state' action(s). |
| merge_when_pipeline_succeeds | boolean | — | Merge when pipeline succeeds Required for 'merge' action(s). |
| milestone_id | string | — | Associate MR with milestone Required for 'create', 'update' action(s). |
| project_id | string | yes | Project ID or URL-encoded path |
| remove_labels | — | — | Labels to remove Required for 'update' action(s). |
| remove_source_branch | boolean | — | Auto-delete source branch after merge Required for 'create', 'update' action(s). |
| reviewer_ids | array | — | User IDs for code reviewers Required for 'create', 'update' action(s). |
| sha | string | — | SHA of head commit to approve specific version Required for 'merge', 'approve' action(s). |
| should_remove_source_branch | boolean | — | Remove source branch after merge Required for 'merge' action(s). |
| source_branch | string | yes | Branch containing changes to merge Required for 'create' action(s). |
| squash | boolean | — | Combine all commits into one when merging Required for 'create', 'update', 'merge' action(s). |
| squash_commit_message | string | — | Custom squash commit message Required for 'merge' action(s). |
| state_event | string | — | State event: close or reopen Required for 'update' action(s). |
| target_branch | string | — | Branch to merge into Required for 'create', 'update' action(s). |
| target_project_id | string | — | Target project for cross-project MRs Required for 'create' action(s). |
| title | string | — | MR title/summary Required for 'create', 'update' action(s). |
No output schema declared.
No examples provided.
manage_milestone ~258
Create, update, or delete project/group milestones. Actions: create (title + optional dates/description), update (modify properties or close/activate), delete (remove permanently), promote (elevate project milestone to group). Related: browse_milestones for progress tracking.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, delete, promote |
| description | string | — | The new description of the milestone Required for 'create', 'update' action(s). |
| due_date | string | — | The due date of the milestone (YYYY-MM-DD) Required for 'create', 'update' action(s). |
| milestone_id | string | — | The ID of a project or group milestone. Required for 'update', 'delete', 'promote' action(s). |
| namespace | string | yes | Namespace path (group or project) |
| start_date | string | — | The start date of the milestone (YYYY-MM-DD) Required for 'create', 'update' action(s). |
| state_event | string | — | State event to apply: 'close' or 'activate' Required for 'update' action(s). |
| title | string | — | The new title of the milestone Required for 'create', 'update' action(s). |
No output schema declared.
No examples provided.
manage_mr_discussion ~600
Post comments, start threads, and suggest code changes on merge requests. Actions: comment (simple note), thread (line-level discussion), reply (to existing thread), update (edit note text), resolve (toggle thread resolution), suggest (code suggestion block), apply_suggestion/apply_suggestions (accept code suggestions). Related: browse_mr_discussions to read threads.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: comment, thread, reply, update, apply_suggestion, apply_suggestions, resolve, suggest |
| body | string | yes | New content/text for the note Required for 'comment', 'thread', 'reply', 'update' action(s). |
| comment | string | — | Optional explanation comment before the suggestion Required for 'suggest' action(s). |
| commit_id | string | — | SHA of commit to start discussion on Required for 'thread' action(s). |
| commit_message | string | — | Custom commit message for the apply commit Required for 'apply_suggestion', 'apply_suggestions' action(s). |
| confidential | boolean | — | Confidential note flag Required for 'comment' action(s). |
| created_at | string | — | Date time string (ISO 8601) Required for 'comment', 'reply' action(s). |
| discussion_id | string | — | ID of the discussion thread to resolve/unresolve Required for 'reply', 'resolve' action(s). |
| lines_above | integer | — | Lines to include above (default: 0) Required for 'suggest' action(s). |
| lines_below | integer | — | Lines to include below (default: 0) Required for 'suggest' action(s). |
| merge_request_iid | string | — | Internal MR ID unique to project Required for 'thread', 'reply', 'update', 'apply_suggestion', 'apply_suggestions', 'resolve', 'suggest' action(s). |
| note_id | string | — | ID of the note to update Required for 'update' action(s). |
| noteable_id | string | yes | ID of the noteable object Required for 'comment' action(s). |
| noteable_type | string | yes | Type of noteable: issue or merge_request Required for 'comment' action(s). |
| position | object | — | Position in diff for the suggestion (requires base_sha, head_sha, start_sha, new_path, new_line) Required for 'thread', 'suggest' action(s). |
| project_id | string | yes | Project ID or URL-encoded path |
| resolved | boolean | — | true to resolve, false to unresolve Required for 'resolve' action(s). |
| suggestion | string | — | The suggested code (raw code, no markdown formatting needed) Required for 'suggest' action(s). |
| suggestion_id | number | — | ID of the suggestion to apply Required for 'apply_suggestion' action(s). |
| suggestion_ids | array | — | Array of suggestion IDs to apply Required for 'apply_suggestions' action(s). |
No output schema declared.
No examples provided.
manage_namespace ~482
Create, update, or delete GitLab groups/namespaces. Actions: create (new group with visibility/settings), update (modify group settings), delete (remove permanently), restore (recover a soft-deleted group before purge; requires GitLab 18.0+). Related: browse_namespaces for discovery.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, delete, restore |
| allowed_email_domains_list | string | — | Premium+: comma-separated email domains allowed for group membership. Required for 'update' action(s). |
| avatar | string | — | Group avatar URL. Required for 'create' action(s). |
| default_branch_protection | number | — | Branch protection level: 0=none, 1=partial, 2=full. Required for 'create', 'update' action(s). |
| description | string | — | New group description. Required for 'create', 'update' action(s). |
| group_id | string | — | Group ID or URL-encoded path of the group to restore. Required for 'update', 'delete', 'restore' action(s). |
| ip_restriction_ranges | string | — | Premium+: comma-separated CIDR ranges that may access the group. Required for 'update' action(s). |
| lfs_enabled | boolean | — | Enable Git LFS. Required for 'create', 'update' action(s). |
| membership_lock | boolean | — | Premium+: prevent members from being added directly to projects in this group. Required for 'create', 'update' action(s). |
| name | string | — | Group display name. Required for 'create', 'update' action(s). |
| parent_id | number | — | Parent group ID for subgroup. Required for 'create' action(s). |
| path | string | — | Group path for URLs (URL-safe). Required for 'create', 'update' action(s). |
| request_access_enabled | boolean | — | Allow access requests. Required for 'create', 'update' action(s). |
| unique_project_download_limit | number | — | Ultimate: max unique project downloads per user before action is taken. Required for 'update' action(s). |
| visibility | string | — | Group visibility level. Required for 'create', 'update' action(s). |
| wiki_access_level | string | — | Premium+: group wiki access level. Required for 'create', 'update' action(s). |
No output schema declared.
No examples provided.
manage_pipeline ~328
Trigger, retry, or cancel CI/CD pipelines and individual jobs. Pipeline actions: create (run pipeline on ref with variables or typed inputs), retry (re-run failed jobs), cancel (stop running pipeline). Job actions: play_job (trigger a manual/delayed job with variables), retry_job (re-run a single job), cancel_job (stop a running job). Related: browse_pipelines actions 'job'/'logs' for job details.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, retry, cancel, play_job, retry_job, cancel_job |
| force | boolean | — | Force cancellation of the job Required for 'cancel_job' action(s). |
| inputs | object | — | Typed pipeline inputs defined in .gitlab-ci.yml spec (GitLab 15.5+). Keys must match input names in pipeline spec. Required for 'create' action(s). |
| job_id | string | — | The ID of the job Required for 'play_job', 'retry_job', 'cancel_job' action(s). |
| job_variables_attributes | array | — | Variables to pass to the job Required for 'play_job' action(s). |
| pipeline_id | string | — | The ID of the pipeline Required for 'retry', 'cancel' action(s). |
| project_id | string | yes | Project ID or URL-encoded path |
| ref | string | yes | The branch or tag to run the pipeline on Required for 'create' action(s). |
| variables | array | — | Legacy variables to pass to the pipeline (key-value pairs with optional type) Required for 'create' action(s). |
No output schema declared.
No examples provided.
manage_project ~775
Create, update, or manage GitLab projects. Actions: create (new project with settings), fork (copy existing project), update (modify settings), delete (remove permanently), restore (recover a soft-deleted project before purge), archive/unarchive (toggle read-only), transfer (move to different namespace). Related: browse_projects for discovery.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, fork, update, delete, archive, unarchive, transfer, restore |
| default_branch | string | — | Set default branch name. Required for 'update' action(s). |
| description | string | — | New project description. Required for 'create', 'update' action(s). |
| fork_name | string | — | New name for forked project (maps to API 'name' parameter). Required for 'fork' action(s). |
| fork_path | string | — | New path for forked project (maps to API 'path' parameter). Required for 'fork' action(s). |
| initialize_with_readme | boolean | — | Create initial README.md file. Required for 'create' action(s). |
| issues_enabled | boolean | — | Enable issue tracking. Required for 'create', 'fork', 'update' action(s). |
| issues_template | string | — | Premium+: default description template for new issues. Required for 'update' action(s). |
| jobs_enabled | boolean | — | Enable CI/CD jobs. Required for 'create', 'fork', 'update' action(s). |
| lfs_enabled | boolean | — | Enable Git LFS. Required for 'create', 'fork', 'update' action(s). |
| merge_pipelines_enabled | boolean | — | Premium+: enable merged results pipelines. Required for 'update' action(s). |
| merge_requests_enabled | boolean | — | Enable merge requests. Required for 'create', 'fork', 'update' action(s). |
| merge_requests_template | string | — | Premium+: default description template for new merge requests. Required for 'update' action(s). |
| merge_trains_enabled | boolean | — | Premium+: enable merge trains (requires merge_pipelines_enabled). Required for 'update' action(s). |
| name | string | — | New project name. Required for 'create', 'update' action(s). |
| namespace | string | — | Target namespace path. Omit for current user namespace. Required for 'create', 'fork', 'transfer' action(s). |
| namespace_path | string | — | Target namespace path for fork. Required for 'fork' action(s). |
| only_allow_merge_if_all_discussions_are_resolved | boolean | — | Require resolved discussions for merge. Required for 'create', 'fork', 'update' action(s). |
| only_allow_merge_if_all_status_checks_passed | boolean | — | Ultimate: block merge until all external status checks pass. Required for 'update' action(s). |
| only_allow_merge_if_pipeline_succeeds | boolean | — | Require passing pipelines for merge. Required for 'create', 'fork', 'update' action(s). |
| project_id | string | — | Project ID or URL-encoded path of the project to restore. Required for 'fork', 'update', 'delete', 'archive', 'unarchive', 'transfer', 'restore' action(s). |
| request_access_enabled | boolean | — | Allow access requests. Required for 'create', 'fork', 'update' action(s). |
| requirements_access_level | string | — | Ultimate: requirements management access level. Required for 'update' action(s). |
| snippets_enabled | boolean | — | Enable code snippets. Required for 'create', 'fork', 'update' action(s). |
| visibility | string | — | Project visibility level. Required for 'create', 'update' action(s). |
| wiki_enabled | boolean | — | Enable project wiki. Required for 'create', 'fork', 'update' action(s). |
No output schema declared.
No examples provided.
manage_ref ~609
Create, delete, and protect branches and tags. Actions: create_branch (from ref), delete_branch, protect_branch (set allowed roles), unprotect_branch, update_branch_protection, create_tag (annotated or lightweight), delete_tag, protect_tag, unprotect_tag. Related: browse_refs for inspection.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create_branch, delete_branch, protect_branch, unprotect_branch, update_branch_protection, create_tag, delete_tag, protect_tag, unprotect_tag |
| allow_force_push | boolean | — | Allow force push to protected branch (default: false) Required for 'protect_branch', 'update_branch_protection' action(s). |
| allowed_to_create | array | — | Granular create access (Premium feature) Required for 'protect_tag' action(s). |
| allowed_to_merge | array | — | Granular merge access (Premium feature) Required for 'protect_branch', 'update_branch_protection' action(s). |
| allowed_to_push | array | — | Granular push access (Premium feature) Required for 'protect_branch', 'update_branch_protection' action(s). |
| allowed_to_unprotect | array | — | Granular unprotect access (Premium feature) Required for 'protect_branch', 'update_branch_protection' action(s). |
| branch | string | yes | Name for the new branch Required for 'create_branch', 'delete_branch' action(s). |
| code_owner_approval_required | boolean | — | Require code owner approval (Premium feature) Required for 'protect_branch', 'update_branch_protection' action(s). |
| create_access_level | integer | — | Who can create matching tags (default: 40=Maintainers) Required for 'protect_tag' action(s). |
| merge_access_level | integer | — | Who can merge (default: 40=Maintainers) Required for 'protect_branch' action(s). |
| message | string | — | Annotation message (creates annotated tag if provided) Required for 'create_tag' action(s). |
| name | string | — | Branch name or wildcard pattern (e.g., 'main', 'release-*') Required for 'protect_branch', 'unprotect_branch', 'update_branch_protection', 'protect_tag', 'unprotect_tag' action(s). |
| project_id | string | yes | Project ID or URL-encoded path (e.g., 'my-group/my-project') |
| push_access_level | integer | — | Who can push (default: 40=Maintainers) Required for 'protect_branch' action(s). |
| ref | string | yes | Source branch name, tag, or commit SHA to create from Required for 'create_branch', 'create_tag' action(s). |
| tag_name | string | — | Name for the new tag (e.g., 'v1.0.0') Required for 'create_tag', 'delete_tag' action(s). |
| unprotect_access_level | integer | — | Who can unprotect (default: 40=Maintainers) Required for 'protect_branch' action(s). |
No output schema declared.
No examples provided.
manage_registry ~260
Delete GitLab Container Registry repositories and tags. Actions: delete_repository (remove a whole repository), delete_tag (remove one tag), delete_tags_bulk (regex cleanup with keep_n/older_than retention - destructive). Related: browse_registry to inspect before deleting.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: delete_repository, delete_tag, delete_tags_bulk |
| keep_n | integer | — | Keep the N most recently created matching tags Required for 'delete_tags_bulk' action(s). |
| name_regex_delete | string | — | Regex for tag names to delete (e.g., ".*" for all, "^v.+" for version tags) Required for 'delete_tags_bulk' action(s). |
| name_regex_keep | string | — | Regex for tag names to always keep (takes precedence over name_regex_delete) Required for 'delete_tags_bulk' action(s). |
| older_than | string | — | Only delete tags created longer ago than this duration (e.g., "7d", "12h") Required for 'delete_tags_bulk' action(s). |
| repository_id | integer | yes | Numeric ID of the container repository (from browse_registry list_repositories) |
| tag_name | string | — | Container image tag name to delete Required for 'delete_tag' action(s). |
No output schema declared.
No examples provided.
manage_release ~446
Create, update, or delete project releases with asset management. Actions: create (release from tag with notes/assets), update (modify metadata), delete (remove release, tag preserved), create_link (add asset URL), delete_link (remove asset). Related: browse_releases for discovery.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, delete, create_link, delete_link |
| assets | object | — | Release assets configuration Required for 'create' action(s). |
| description | string | — | Release description (supports Markdown) Required for 'create', 'update' action(s). |
| direct_asset_path | string | — | Path for direct asset download (e.g., '/binaries/linux-amd64') Required for 'create_link' action(s). |
| link_id | string | — | The ID of the asset link to delete Required for 'delete_link' action(s). |
| link_type | string | — | Type of asset link (default: other) Required for 'create_link' action(s). |
| milestones | array | — | Array of milestone titles to associate with the release Required for 'create', 'update' action(s). |
| name | string | — | Display name for the asset link (must be unique per release) Required for 'create', 'update', 'create_link' action(s). |
| project_id | string | yes | Project ID or URL-encoded path (e.g., 'my-group/my-project') |
| ref | string | — | Branch/commit SHA to create tag from (if tag does not exist) Required for 'create' action(s). |
| released_at | string | — | Release date/time in ISO 8601 format (e.g., '2024-01-15T12:00:00Z') Required for 'create', 'update' action(s). |
| tag_message | string | — | Annotation message for the tag (creates annotated tag) Required for 'create' action(s). |
| tag_name | string | yes | The Git tag associated with the release (e.g., 'v1.0.0') |
| url | string | — | URL of the asset (must be unique per release) Required for 'create_link' action(s). |
No output schema declared.
No examples provided.
manage_runner ~472
Register and control CI runners. Actions: create_authentication_token (register a runner, GitLab 16+, returns a one-time token), update (settings), pause/resume (toggle job pickup), delete, reset_authentication_token (rotate the token). Related: browse_runners to discover runners.
| Name | Type | Req | Description |
|---|---|---|---|
| access_level | string | — | Access level: NOT_PROTECTED or REF_PROTECTED (protected refs only) Required for 'create_authentication_token', 'update' action(s). |
| action | string | yes | Action to perform: create_authentication_token, update, pause, resume, delete, reset_authentication_token |
| description | string | — | Runner description Required for 'create_authentication_token', 'update' action(s). |
| group_id | string | — | Group full path for a group runner (e.g., 'my-group') Required for 'create_authentication_token' action(s). |
| locked | boolean | — | Lock the runner to its current projects Required for 'create_authentication_token', 'update' action(s). |
| maintenance_note | string | — | Free-form maintenance note (Markdown) Required for 'create_authentication_token', 'update' action(s). |
| maximum_timeout | integer | — | Maximum job timeout in seconds Required for 'create_authentication_token', 'update' action(s). |
| paused | boolean | — | Whether the runner is paused (ignores new jobs) Required for 'create_authentication_token', 'update' action(s). |
| project_id | string | — | Project full path for a project runner (e.g., 'my-group/my-project') Required for 'create_authentication_token' action(s). |
| run_untagged | boolean | — | Allow running untagged jobs Required for 'create_authentication_token', 'update' action(s). |
| runner_id | integer | — | Numeric ID of the runner (from browse_runners); expanded to a global ID internally Required for 'update', 'pause', 'resume', 'delete', 'reset_authentication_token' action(s). |
| runner_type | string | yes | Runner scope. INSTANCE_TYPE needs admin; GROUP_TYPE/PROJECT_TYPE need the namespace Required for 'create_authentication_token' action(s). |
| tag_list | array | — | Tags that determine which jobs run Required for 'create_authentication_token', 'update' action(s). |
No output schema declared.
No examples provided.
manage_snippet ~274
Create, update, or delete code snippets with multi-file support. Actions: create (new snippet with files and visibility), update (modify content/metadata, file operations), delete (remove permanently). Related: browse_snippets for discovery.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, delete |
| description | string | — | Optional description explaining the snippet purpose. Supports markdown Required for 'create', 'update' action(s). |
| files | array | — | Array of file operations. Each file must specify 'action': create/update/delete/move. Move requires previous_path Required for 'create', 'update' action(s). |
| id | string | — | The ID of the snippet to delete. This operation cannot be undone Required for 'update', 'delete' action(s). |
| projectId | string | — | Project ID or URL-encoded path to create a project snippet. Leave empty for personal snippet |
| title | string | — | The title of the snippet. Displayed in snippet list and as page title. Max 255 chars Required for 'create', 'update' action(s). |
| visibility | string | — | Visibility: 'private' (author only), 'internal' (authenticated users), 'public' (everyone). Defaults to 'private' Required for 'create', 'update' action(s). |
No output schema declared.
No examples provided.
manage_todos ~93
Manage your GitLab todo queue. Actions: mark_done (complete a single todo), mark_all_done (clear entire queue), restore (undo completion). Related: browse_todos to view your todo list.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: mark_done, mark_all_done, restore |
| id | integer | yes | Todo ID to mark as done Required for 'mark_done', 'restore' action(s). |
No output schema declared.
No examples provided.
manage_variable ~427
Create, update, or delete CI/CD variables with environment scoping. Actions: create (key + value, set scope/protection/masking), update (modify value or settings), delete (remove permanently). Related: browse_variables for discovery.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, delete |
| description | string | — | Optional description explaining the purpose of this variable (GitLab 16.2+). Required for 'create', 'update' action(s). |
| environment_scope | string | — | The environment scope. Use "*" for all environments (default), or specify like "production", "staging". Required for 'create', 'update' action(s). |
| filter | object | — | Filter parameters to identify the specific variable Required for 'update', 'delete' action(s). |
| key | string | yes | The key of the CI/CD variable. Maximum 255 characters, only alphanumeric and underscore characters allowed. |
| masked | boolean | — | Whether this variable should be masked in job logs. MASKING REQUIREMENTS: Value must be at least 8 characters, single line with no spaces, only A-Z a-z 0-9 + / = . ~ - _ @ : characters. Required for… |
| namespace | string | yes | Namespace path (group or project) |
| protected | boolean | — | Whether this variable is protected. Protected variables are only available to protected branches/tags. Required for 'create', 'update' action(s). |
| raw | boolean | — | Whether variable expansion is disabled. When true, variables like $OTHER_VAR in the value will NOT be expanded. Required for 'create', 'update' action(s). |
| value | string | — | The value of the CI/CD variable. For file type variables, this is the file content. Required for 'create', 'update' action(s). |
| variable_type | string | — | The type of variable: "env_var" for environment variables (default) or "file" for file variables. Required for 'create', 'update' action(s). |
No output schema declared.
No examples provided.
manage_vulnerability ~136
Drive the vulnerability state machine (Ultimate). Actions: dismiss (with optional dismissal_reason + comment), confirm (genuine finding), resolve (fixed), revert (back to detected). Related: browse_vulnerabilities to discover vulnerability IDs.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: dismiss, confirm, resolve, revert |
| comment | string | — | Free-text justification for the dismissal. Required for 'dismiss' action(s). |
| dismissal_reason | string | — | Structured dismissal reason. Required for 'dismiss' action(s). |
| vulnerability_id | integer | yes | Numeric vulnerability ID (from a list action); expanded to a global ID internally. |
No output schema declared.
No examples provided.
manage_webhook ~742
Create, update, delete, or test webhooks for event-driven automation. Actions: create (URL + event types + optional secret), update (modify settings), delete (remove), test (trigger delivery for specific event). Related: browse_webhooks for inspection.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, delete, test |
| confidential_issues_events | boolean | — | Enable confidential issue events Required for 'create', 'update' action(s). |
| confidential_note_events | boolean | — | Enable confidential note events Required for 'create', 'update' action(s). |
| deployment_events | boolean | — | Enable deployment events Required for 'create', 'update' action(s). |
| description | string | — | Webhook description (GitLab 16.11+) Required for 'create', 'update' action(s). |
| emoji_events | boolean | — | Enable emoji events Required for 'create', 'update' action(s). |
| enable_ssl_verification | boolean | — | Enable SSL certificate verification Required for 'create', 'update' action(s). |
| feature_flag_events | boolean | — | Enable feature flag events Required for 'create', 'update' action(s). |
| groupId | string | — | Group ID or path (required if scope=group) |
| hookId | string | — | Webhook ID (required) Required for 'update', 'delete', 'test' action(s). |
| issues_events | boolean | — | Enable issue events Required for 'create', 'update' action(s). |
| job_events | boolean | — | Enable job/build events Required for 'create', 'update' action(s). |
| member_events | boolean | — | Enable member events Required for 'create', 'update' action(s). |
| merge_requests_events | boolean | — | Enable merge request events Required for 'create', 'update' action(s). |
| name | string | — | Human-readable webhook name (GitLab 16.11+) Required for 'create', 'update' action(s). |
| note_events | boolean | — | Enable note/comment events Required for 'create', 'update' action(s). |
| pipeline_events | boolean | — | Enable pipeline events Required for 'create', 'update' action(s). |
| projectId | string | — | Project ID or path (required if scope=project) |
| project_events | boolean | — | Enable project events (group webhooks only) Required for 'create', 'update' action(s). |
| push_events | boolean | — | Enable push events Required for 'create', 'update' action(s). |
| push_events_branch_filter | string | — | Branch filter for push events (wildcard supported) Required for 'create', 'update' action(s). |
| releases_events | boolean | — | Enable release events Required for 'create', 'update' action(s). |
| resource_access_token_events | boolean | — | Enable resource access token events Required for 'create', 'update' action(s). |
| scope | string | yes | Scope of webhook (project or group) |
| subgroup_events | boolean | — | Enable subgroup events (group webhooks only) Required for 'create', 'update' action(s). |
| tag_push_events | boolean | — | Enable tag push events Required for 'create', 'update' action(s). |
| token | string | — | Secret token for webhook validation Required for 'create', 'update' action(s). |
| trigger | string | — | Event type to test (required) Required for 'test' action(s). |
| url | string | — | Webhook URL (required) Required for 'create', 'update' action(s). |
| wiki_page_events | boolean | — | Enable wiki page events Required for 'create', 'update' action(s). |
No output schema declared.
No examples provided.
manage_wiki ~186
Create, update, or delete wiki pages. Actions: create (new page with title/content/format), update (modify content or title), delete (remove permanently). Related: browse_wiki to read pages.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, delete |
| content | string | — | New content of the wiki page Required for 'create', 'update' action(s). |
| format | string | — | Content format (markdown, rdoc, asciidoc, org). Defaults to markdown. Required for 'create', 'update' action(s). |
| namespace | string | yes | Namespace path (group or project) |
| slug | string | — | URL-encoded slug of the wiki page Required for 'update', 'delete' action(s). |
| title | string | — | New title of the wiki page Required for 'create', 'update' action(s). |
No output schema declared.
No examples provided.
manage_work_item ~1,101
Create, update, delete, or link work items (issues, epics, tasks). Actions: create (epics need GROUP namespace, issues/tasks need PROJECT), update (widgets: dates, time tracking, weight, iterations, health, progress, hierarchy), delete (permanent), delete_timelog (remove a time tracking entry by its global ID), add_link/remove_link (BLOCKS/BLOCKED_BY/RELATED). Related: browse_work_items for discovery.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform: create, update, delete, delete_timelog, add_link, remove_link |
| addLabelIds | array | — | Array of label IDs to ADD to existing labels. Can be used with removeLabelIds. Cannot be used with labelIds. Required for 'update' action(s). |
| assigneeIds | array | — | Array of assignee user IDs Required for 'create', 'update' action(s). |
| childrenIds | array | — | Array of child work item IDs to add Required for 'create', 'update' action(s). |
| color | string | — | Custom hex color for epics (Ultimate tier) Required for 'create', 'update' action(s). |
| description | string | — | Description of the work item Required for 'create', 'update' action(s). |
| dueDate | string | — | Due date in YYYY-MM-DD format (null to clear) Required for 'create', 'update' action(s). |
| healthStatus | string | — | Health status indicator, null to clear (Ultimate tier) Required for 'create', 'update' action(s). |
| id | string | — | Work item ID - use numeric ID from list results (e.g., '5953') Required for 'update', 'delete', 'add_link', 'remove_link' action(s). |
| isFixed | boolean | — | Fixed dates - not inherited from children (Premium tier) Required for 'create', 'update' action(s). |
| iterationId | string | — | Iteration/sprint ID, null to unassign (Premium tier) Required for 'create', 'update' action(s). |
| labelIds | array | — | Array of label IDs to SET (replaces all existing labels). Cannot be used with addLabelIds or removeLabelIds. Required for 'create', 'update' action(s). |
| linkType | string | — | Relationship type to create. Use with targetId to link work items during update. Applied via separate mutation after the main update. Required for 'update', 'add_link' action(s). |
| milestoneId | string | — | Milestone ID Required for 'create', 'update' action(s). |
| namespace | string | yes | CRITICAL: Namespace path (group OR project). For Epics use GROUP path (e.g. "my-group"). For Issues/Tasks use PROJECT path (e.g. "my-group/my-project"). Required for 'create' action(s). |
| parentId | string | — | Parent work item ID to set hierarchy relationship Required for 'create', 'update' action(s). |
| progressCurrentValue | integer | — | Current progress value 0-100 for OKR key results (Premium tier) Required for 'create', 'update' action(s). |
| removeLabelIds | array | — | Array of label IDs to REMOVE from existing labels. Can be used with addLabelIds. Cannot be used with labelIds. Required for 'update' action(s). |
| startDate | string | — | Start date in YYYY-MM-DD format (null to clear) Required for 'create', 'update' action(s). |
| state | string | — | State event for the work item (CLOSE, REOPEN) Required for 'update' action(s). |
| targetId | string | — | Target work item ID to link to. Use with linkType to create a relationship during update. Required for 'update', 'add_link', 'remove_link' action(s). |
| timeEstimate | string | — | Time estimate (e.g. "1h 30m", "2d"). Applied via update after create. Check _warning in response if application failed. Required for 'create', 'update' action(s). |
| timeSpent | string | — | Time spent to log as timelog entry (e.g. "2h", "1h 30m") Required for 'update' action(s). |
| timeSpentAt | string | — | When time was spent in ISO 8601 format (defaults to now) Required for 'update' action(s). |
| timeSpentSummary | string | — | Summary/description of work done for the timelog entry Required for 'update' action(s). |
| timelogId | string | — | Global ID of the timelog entry (gid://gitlab/Timelog/N) — obtain from work item's TIME_TRACKING widget via browse_work_items get action Required for 'delete_timelog' action(s). |
| title | string | — | Title of the work item Required for 'create', 'update' action(s). |
| verificationStatus | string | — | Set verification status for requirement work items: PASSED or FAILED (Ultimate tier). Creates a test report internally. Required for 'update' action(s). |
| weight | integer | — | Story points / weight value, null to clear (Premium tier) Required for 'create', 'update' action(s). |
| workItemType | string | yes | Type of work item Required for 'create' action(s). |
No output schema declared.
No examples provided.