gitlab mcp
This server exposes a GitLab MCP toolkit (274 toolsets + execute_graphql + discover_tools) for reading and writing GitLab project data through MCP clients.\n\n- Merge requests: list/get MRs, diffs (2-step review via list_merge_request_changed_files → get_merge_request_file_diff), versions, approvals, notes, threads, draft notes, emoji reactions, create/update/merge.\n- Issues: list/get/create/update/delete issues, description patching with dry-run, issue links, notes, discussions, and emoji reactions.\n- Repositories & code: search projects, read file contents, list repository trees, commits, commit diffs, file blame, branches, protected branches, and file/blob operations.\n- Projects & groups: get/list projects, project members, namespaces, labels, group projects.\n- Users & server state: whoami, user lookups, health_check, and discover_tools to activate more toolset categories (pipelines, wiki, releases, tags, snippets, workitems, webhooks, vulnerabilities, etc.) at runtime.\n- Safety & efficiency: read-only/modify/full permission modes, tool/toolset filtering, JMESPath result filtering, and rate/session limits for remote multi-user deployments.\n- Access modes: PAT, OAuth2 (local + MCP proxy), remote per-request authorization, and stdio/SSE/Streamable HTTP transports.
Allows interaction with GitLab repositories including creating/updating files, pushing multiple files, searching repositories, creating repositories, getting file contents, creating issues, creating merge requests, forking repositories, creating branches, getting merge request details and diffs, updating merge requests, and creating notes/comments.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@gitlab mcplist open merge requests for project 123"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
GitLab MCP Server
English | 한국어 | 简体中文 | Português (Brasil)
📖 Documentation → Setup guides, environment variables, and the full tool reference live on the hosted docs site.
Install @zereight/mcp-gitlab with the recommended local personal-access-token setup. These commands use the same arguments as the Claude Code and Codex guides.
Install the zereight-mcp-gitlab binary first with npm install -g @zereight/mcp-gitlab, or Homebrew brew tap zereight/gitlab-mcp https://github.com/zereight/gitlab-mcp and brew install zereight/gitlab-mcp/zereight-mcp-gitlab.
Read the token without echo, then export it. The shell history keeps the variable name.
read -rs GITLAB_PERSONAL_ACCESS_TOKEN && export GITLAB_PERSONAL_ACCESS_TOKENClient | Install |
Claude Code |
|
Codex |
|
Cursor | |
VS Code | |
JSON clients |

@zereight/mcp-gitlab
Agent-workflow-optimized GitLab MCP — manage projects, merge requests, issues, pipelines, wiki, releases, tags, milestones, and more through stdio, SSE, and Streamable HTTP.
Supports PAT, OAuth, read-only mode, dynamic API URLs, and remote authorization for VS Code, Claude, Cursor, Copilot, and other MCP clients.
Why use this GitLab MCP?
276 tools: 274 in toolsets +
execute_graphql+discover_tools— start with a small toolset; activate more at runtime without CQRS-style groupingMR 2-step review —
list_merge_request_changed_files→ batchedget_merge_request_file_diffAgent Skill built in — workflow guidance in
skills/gitlab-mcp/Flexible auth — Personal Access Token, local OAuth2 browser flow, MCP OAuth proxy, and per-request remote authorization
Multiple transports — stdio for local clients, SSE for legacy clients, and Streamable HTTP for modern remote deployments
Client-friendly setup — examples for Claude Code, Codex, Antigravity, OpenCode, Copilot, Cline, Roo Code, Cursor, Kilo Code, and Amp Code
Self-hosted ready — works with custom GitLab instances, proxy settings, and dynamic API URL routing
JMESPath result filtering — optional
jmespathon tool calls (seetools/list) shrinks JSON results without changing GitLab API requests; when response masking is enabled, JMESPath runs on masked data.
How we compare
@zereight/mcp-gitlab | GitLab MCP A (community CQRS-style) | GitLab official MCP server | |
Best for | AI agent workflows | Enterprise multi-instance / grouped tools | Built into GitLab, no separate install |
Tool model | 276 tools: 274 in toolsets + | ~50–60 grouped | Toolsets chosen with an HTTP header |
MR review | 2-step batched diff | Varies |
|
Node.js | >=18.17 | Often >=24 | Node.js 20+ for stdio via |
License | MIT | Varies | Part of GitLab |
Full comparison with GitLab MCP A →
GitLab also ships an official MCP server.
Free, Premium, and Ultimate. Moved from Premium to Free in GitLab 19.2. Generally available in GitLab 19.5.
On GitLab.com, a top-level group Owner allows access to the MCP server. On GitLab Self-Managed and GitLab Dedicated, an administrator controls the instance setting. Default rules are on the official page.
Remote clients use HTTP
https://<gitlab.example.com>/api/v4/mcpwith OAuth 2.0 dynamic client registration.stdio goes through
mcp-remoteand needs Node.js 20 or later.Toolsets use the
X-Gitlab-Enabled-Mcp-Server-Toolsetsheader. An optionalX-Gitlab-Mcp-Server-Tool-Name-Prefixheader keeps the first 32 characters of a tool-name prefix.
Quick start: choose either Personal Access Token or OAuth2 setup below, install @zereight/mcp-gitlab, and use zereight-mcp-gitlab in your MCP client configuration.
Client Setup Guides
JSON-Based MCP Clients Setup Guide - for Factory AI Droid, OpenClaw, and OpenCode style clients
Related MCP server: gitlab-mcp
Usage
Setup Overview
Authentication Methods
The server supports four authentication methods:
For local/desktop use (most common):
Personal Access Token (
GITLAB_PERSONAL_ACCESS_TOKENorGITLAB_PERSONAL_ACCESS_TOKEN_FILE) — simplest setupOAuth2 — Local Browser (
GITLAB_USE_OAUTH) — recommended for better security
For server/remote deployments:
OAuth2 — MCP Proxy (
GITLAB_MCP_OAUTH) — for remote MCP clients such as Claude.aiRemote Authorization (
REMOTE_AUTHORIZATION) — multi-user deployments where each caller provides their own token
Quick setup paths
Claude Code: see Claude Code Setup Guide
VS Code: see VS Code Setup Guide
GitHub Copilot: see GitHub Copilot Setup Guide
Codex: see Codex Setup Guide
Cursor: see Cursor Setup Guide
Factory AI Droid / OpenClaw / OpenCode style clients: see JSON-Based MCP Clients Setup Guide
OAuth browser flow details: see OAuth2 Authentication Setup Guide
OAuth without a localhost callback (SSO, remote shell, background clients): run
zereight-mcp-gitlab auth(GitLab 17.9+ device flow; 17.2–17.8 needoauth2_device_grant_flow), then start the server withGITLAB_USE_OAUTH=true. See standalone device-flow command.
For the simplest local setup, start with a Personal Access Token. For browser-based local auth, use OAuth2. For remote or multi-user deployments, continue to the MCP OAuth and Remote Authorization sections later in this README.
Install the server once:
brew tap zereight/gitlab-mcp https://github.com/zereight/gitlab-mcp
brew install zereight/gitlab-mcp/zereight-mcp-gitlabOr with npm:
npm install -g @zereight/mcp-gitlabOr with Nix, by adding this flake to your own:
# flake.nix
inputs.gitlab-mcp.url = "github:zereight/gitlab-mcp";
# wherever you configure your MCP client:
command = lib.getExe inputs.gitlab-mcp.packages.${system}.default;The store path is pinned by your lock file; update it with nix flake update gitlab-mcp.
The examples use zereight-mcp-gitlab, a less collision-prone alias for the legacy mcp-gitlab binary. If your MCP client cannot find it, use the absolute path from which zereight-mcp-gitlab.
No global install? Pin npx to the previous stable release (the version these docs recommend), for example npx -y @zereight/mcp-gitlab@2.2.6. If you always want the newest release, use npx -y @zereight/mcp-gitlab@latest instead. The server prints a notice to stderr on startup when a newer version is available (disable with GITLAB_DISABLE_VERSION_CHECK=true).
Using CLI Arguments (for clients with env var issues)
Some MCP clients (like GitHub Copilot CLI) have issues with environment variables. Use CLI arguments instead:
{
"mcpServers": {
"gitlab": {
"command": "zereight-mcp-gitlab",
"args": ["--token=YOUR_GITLAB_TOKEN", "--api-url=https://gitlab.com/api/v4"],
"tools": ["*"]
}
}
}Available CLI arguments:
--token- GitLab Personal Access Token (replacesGITLAB_PERSONAL_ACCESS_TOKEN)--api-url- GitLab API URL (replacesGITLAB_API_URL)--read-only=true- Deprecated (removed in next major (v3.0.0)); use--permission-mode=readonlyinstead (replacesGITLAB_READ_ONLY_MODE)--permission-mode- Permission level:readonly,modify(no delete or teardown tools), orfull(replacesGITLAB_PERMISSION_MODE, defaultfull)--toolsets=all- Enable named toolsets except the explicit-onlyapitoolset (replacesGITLAB_TOOLSETS; unset uses the leancoredefault).gitlab_api_requestneeds--toolsets=api--tools=list_issues- Add individual tools (replacesGITLAB_TOOLS)--use-wiki=true- Deprecated (removed in next major (v3.0.0)); use--toolsets=core,wikiinstead (replacesUSE_GITLAB_WIKI)--use-milestone=true- Deprecated (removed in next major (v3.0.0)); use--toolsets=core,milestonesinstead (replacesUSE_MILESTONE)--use-pipeline=true- Deprecated (removed in next major (v3.0.0)); use--toolsets=core,pipelinesand appendvalidate_ci_lint,validate_project_ci_lintto the existing--toolslist (or set--tools=validate_ci_lint,validate_project_ci_lintwhen that list is unset) (replacesUSE_PIPELINE)--disable-version-check=true- Disable the startup new-version notice (replacesGITLAB_DISABLE_VERSION_CHECK)--masking-enabled=true- Enable text-response masking (replacesGITLAB_MASKING_ENABLED)--masking-config- Path to a masking configuration file (replacesGITLAB_MASKING_CONFIG)--masking-policy-file- Path to a protected managed-policy file (replacesGITLAB_MASKING_POLICY_FILE)--masking-workspace-dir- Directory used to resolve masking files (replacesGITLAB_MASKING_WORKSPACE_DIR)--download-dir- Directorydownload_attachmentsaves files under (replacesGITLAB_DOWNLOAD_DIR; default.gitlab-mcp-downloads)--compact-results=true- Truncate oversized MCP tool replies and attach a CLI command for the full payload (replacesGITLAB_MCP_COMPACT_RESULTS; default off)--compact-result-chars- Character threshold for compacting (replacesGITLAB_MCP_COMPACT_RESULT_CHARS; default4000)--compact-tools- Comma-separated tool names to compact when oversized, without turning global compact on (replacesGITLAB_MCP_COMPACT_TOOLS)--tool-profile-full(default) orslim.slimdrops draft notes, emoji reactions, labels, CI catalog tools, andcreate_groupfrom the initial list. Ignored whenGITLAB_TOOLSETSis set (replacesGITLAB_TOOL_PROFILE)
If you already set GITLAB_TOOLSETS or --toolsets, append wiki, milestones, or pipelines to that list instead of replacing it. If you already set GITLAB_TOOLS or --tools, append validate_ci_lint and validate_project_ci_lint to that list instead of replacing it. An explicit list replaces the default core toolset; it does not merge.
CLI arguments take precedence over environment variables.
zereight-mcp-gitlab auth is a subcommand (not an MCP server flag). It runs GitLab device flow and exits. See CLI Arguments.
The same binary is also a gh-style GitLab CLI (tool <name> or curated forms such as mr list). No MCP registration is needed — set a PAT, or run auth and set GITLAB_USE_OAUTH=true: see CLI without MCP. Use it for the full payload in a terminal. MCP replies stay in the chat unless you set GITLAB_MCP_COMPACT_RESULTS=true (or --compact-results), which replaces oversized tool replies with a preview and a CLI command. Human CLI is never compacted. Same permission mode, toolsets, denied-tools regex, and tool-policy filters. Destructive tools and GITLAB_TOOL_POLICY_APPROVE tools need --yes. See Human CLI.
Fine-grained tool filtering: use
GITLAB_PERMISSION_MODE=modifyto allow create/update while blocking every delete tool and the destructive teardown tools (cancel_pipeline,cancel_pipeline_job,stop_environment,stop_stale_environments,unprotect_branch,unprotect_tag) — including destructive mutations (deletion and teardown verbs) throughexecute_graphqlandpush_filesdelete/moveactions — orGITLAB_PERMISSION_MODE=readonlyfor read-only access. You can also enable toolset groups withGITLAB_TOOLSETS=<group,…>, allow-list individual tools withGITLAB_TOOLS=<tool,…>(e.g. read-only groups plus a few specific write tools), and deny-list by pattern withGITLAB_DENIED_TOOLS_REGEX. The legacyUSE_GITLAB_WIKI/USE_MILESTONE/USE_PIPELINEflags are deprecated (removed in next major (v3.0.0)). UseGITLAB_TOOLSETS=core,wiki,core,milestones, orcore,pipelines(USE_PIPELINEalso needsvalidate_ci_lint,validate_project_ci_lintappended to an existingGITLAB_TOOLSlist instead of replacing it). If you already setGITLAB_TOOLSETS, append the toolset to your existing list instead of replacing it. IfGITLAB_TOOLSis unset, setGITLAB_TOOLS=validate_ci_lint,validate_project_ci_lint. If it is already set, appendvalidate_ci_lint,validate_project_ci_lintinstead of replacing that list. See Tools Reference and Environment Variables.
gitlab_api_request (toolset api) bypasses GITLAB_ALLOWED_GROUPS and other group restrictions, project allowlists, tool-level restrictions (GITLAB_TOOLS, GITLAB_DENIED_TOOLS_REGEX on other tools), and individual tool safety checks. The full token permission scope is exposed. Prompt injection can drive this tool. Operators who rely on these restrictions must NOT enable it.
Enable it only by listing api in GITLAB_TOOLSETS (GITLAB_TOOLSETS=all, discover_tools, GITLAB_TOOLS, legacy USE_* flags, and GITLAB_TOOL_PROFILE do not). GITLAB_ALLOWED_PROJECT_IDS is checked only for /projects/:id paths. Endpoints such as /search, /users, /groups/:id, and /runners are not constrained. GITLAB_PROJECT_ID and OAuth group allowlists are not enforced.
sse
Pass the variable name only. The Docker client copies the exported GITLAB_PERSONAL_ACCESS_TOKEN into the container.
docker run -i --rm \
-e HOST=0.0.0.0 \
-e GITLAB_PERSONAL_ACCESS_TOKEN \
-e GITLAB_API_URL="https://gitlab.com/api/v4" \
-e GITLAB_PERMISSION_MODE=readonly \
-e GITLAB_TOOLSETS=core,wiki,milestones,pipelines \
-e SSE=true \
-e SSE_AUTH_TOKEN=your_mcp_sse_token \
-p 3333:3002 \
zereight050/gitlab-mcp{
"mcpServers": {
"gitlab": {
"type": "sse",
"url": "http://localhost:3333/sse",
"headers": {
"Authorization": "Bearer your_mcp_sse_token"
}
}
}
}streamable-http
docker run -i --rm \
-e HOST=0.0.0.0 \
-e REMOTE_AUTHORIZATION=true \
-e GITLAB_API_URL="https://gitlab.com/api/v4" \
-e GITLAB_PERMISSION_MODE=readonly \
-e GITLAB_TOOLSETS=core,wiki,milestones,pipelines \
-e STREAMABLE_HTTP=true \
-p 3333:3002 \
zereight050/gitlab-mcp{
"mcpServers": {
"gitlab": {
"type": "streamable-http",
"url": "http://localhost:3333/mcp",
"headers": {
"Authorization": "Bearer glpat-..."
}
}
}
}Using MCP OAuth Proxy (GITLAB_MCP_OAUTH)
For server/remote deployments only. This mode requires the MCP server to be deployed with a publicly accessible HTTPS URL. For local/desktop use, see
GITLAB_USE_OAUTHabove.
For remote MCP clients that support the MCP OAuth specification (e.g. Claude.ai).
The server acts as a full OAuth 2.0 authorization server — unauthenticated requests
receive a 401 + WWW-Authenticate response, which triggers the OAuth browser flow
automatically on the client side.
Remote MCP clients such as OpenCode, MCPJam, and Claude.ai can send their own
callback URL during authorization. If you cannot register every client callback
URL in GitLab, enable GITLAB_OAUTH_CALLBACK_PROXY=true. With callback proxy
mode, GitLab only needs one registered redirect URI: {MCP_SERVER_URL}/callback.
GITLAB_OAUTH_REDIRECT_URI is for local OAuth (GITLAB_USE_OAUTH) only. It does
not override remote MCP OAuth client callback URLs and should not be used to fix
remote Unregistered redirect_uri errors.
This variable exists because the local OAuth flow starts a browser on the same
machine as the MCP server and listens for the callback on a local HTTP server,
for example http://127.0.0.1:8888/callback.
Remote MCP OAuth is different. In GITLAB_MCP_OAUTH=true mode, the MCP client
provides its own callback URL during /authorize. GITLAB_OAUTH_REDIRECT_URI
does not replace that client-provided URL.
Mode | Enable with | Callback variable | GitLab redirect URI |
Local OAuth |
|
|
|
Remote MCP OAuth |
|
|
|
Use GITLAB_OAUTH_REDIRECT_URI only when the MCP server itself owns the local
browser callback. Use GITLAB_OAUTH_CALLBACK_PROXY=true when a remote MCP client
owns the callback URL.
How it works: You deploy this MCP server somewhere with a public HTTPS URL. MCP
clients connect to {MCP_SERVER_URL}/mcp. The server handles the OAuth 2.0 flow,
exchanging credentials with GitLab on behalf of the client.
Prerequisites:
A publicly accessible HTTPS server URL (
MCP_SERVER_URL) — use ngrok for local testingA pre-registered GitLab OAuth application with
api(orread_api) scopes — Go toAdmin area→Applications, set Redirect URI to{MCP_SERVER_URL}/callback
Environment Variable | Required | Description |
| ✅ | Set to |
| ✅ | GitLab API base URL |
| ✅ | GitLab OAuth Application ID |
| ✅ | Public HTTPS URL of this MCP server |
| ✅ | Must be |
| optional | Set to |
| optional | Client callback URLs that callback proxy mode will redirect to (default: Claude, ChatGPT, Cursor and loopback callbacks; |
| optional | Comma-separated scopes (default: |
| optional | Comma-separated group full paths — only members (and subgroup members) may use the server (replaces deprecated |
When STREAMABLE_HTTP=true, server-side GitLab credentials (GITLAB_PERSONAL_ACCESS_TOKEN, GITLAB_JOB_TOKEN, GITLAB_AUTH_COOKIE_PATH, or GITLAB_USE_OAUTH) require REMOTE_AUTHORIZATION=true, GITLAB_MCP_OAUTH=true, or STREAMABLE_HTTP_AUTH_TOKEN.
Troubleshooting
Unregistered redirect_uriCheck the
redirect_uriin the browser URL. If it points to a client callback such ashttp://127.0.0.1:xxxxx/.../callback, enable:GITLAB_OAUTH_CALLBACK_PROXY=trueDo not fix remote MCP OAuth by changing
GITLAB_OAUTH_REDIRECT_URI. That variable is for local OAuth (GITLAB_USE_OAUTH) only.
docker run -i --rm \
-e HOST=0.0.0.0 \
-e GITLAB_MCP_OAUTH=true \
-e GITLAB_OAUTH_CALLBACK_PROXY=true \
-e STREAMABLE_HTTP=true \
-e MCP_SERVER_URL=https://your-server.example.com \
-e GITLAB_API_URL="https://gitlab.com/api/v4" \
-e GITLAB_OAUTH_APP_ID=your_app_id \
-p 3000:3002 \
zereight050/gitlab-mcpMCP client configuration:
{
"mcpServers": {
"gitlab": {
"type": "http",
"url": "https://your-server.example.com/mcp"
}
}
}Using Remote Authorization (REMOTE_AUTHORIZATION)
For server/remote deployments only. Each HTTP caller provides their own GitLab token directly in request headers — no OAuth flow involved.
For multi-user or multi-tenant deployments where each caller provides their own GitLab token in the HTTP request header. No OAuth flow — the MCP server forwards the token to GitLab on behalf of the caller.
Header priority: Private-Token > JOB-TOKEN > Authorization: Bearer
Environment Variable | Required | Description |
| ✅ | Set to |
| ✅ | Must be |
| optional | Allow per-request GitLab URL via |
| optional | Comma-separated allowed |
| optional | Allow unauthenticated |
| optional | Allowed public |
| optional | Trust |
GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY=true is intended for MCP gateways
or admin UIs that need to inspect tool metadata before a user provides a GitLab
token. Leave it disabled unless the tool list is safe to expose in your deployment.
When MCP_SERVER_URL is not set, remote download URLs fall back to the local
server address. Set MCP_TRUST_PROXY=true only if the server is reachable through a
trusted reverse proxy and direct client access to the MCP server is blocked.
This enables Express trust proxy for Streamable HTTP and SSE, derives public
download URLs from Forwarded / X-Forwarded-Proto / X-Forwarded-Host /
X-Forwarded-Prefix, and keeps OAuth endpoint rate limiting working when
proxies send X-Forwarded-For with a client port (for example 1.2.3.4:5678).
Existing OAuth+proxy deployments must set this explicitly after the flag was
introduced.
Example request headers:
Private-Token: glpat-xxxxxxxxxxxxxxxxxxxxor using a Bearer token:
Authorization: Bearer glpat-xxxxxxxxxxxxxxxxxxxx⚠️
REMOTE_AUTHORIZATIONis not compatible with SSE transport.STREAMABLE_HTTP=trueis required.
Environment Variables
Use the dedicated reference for the full environment variable list:
Most users only need one of these starting sets:
Local PAT:
GITLAB_PERSONAL_ACCESS_TOKEN,GITLAB_API_URLLocal OAuth:
GITLAB_USE_OAUTH=true,GITLAB_OAUTH_CLIENT_ID,GITLAB_OAUTH_REDIRECT_URI,GITLAB_API_URLRemote multi-user HTTP:
STREAMABLE_HTTP=true,REMOTE_AUTHORIZATION=true(orGITLAB_MCP_OAUTH=true),MCP_TRUST_PROXY=true(behind a reverse proxy),MAX_REQUESTS_PER_MINUTE=300,MCP_SERVER_URLorMCP_ALLOWED_HOSTS,HOST,PORTMultiple side-by-side deployments: set a distinct
MCP_SERVER_NAMEper instance (e.g.gitlab-selfhosted-readonly) so clients, logs, and telemetry can tell them apartMulti-pod HPA (stateless): above +
OAUTH_STATELESS_MODE=true,OAUTH_STATELESS_SECRET(same across all pods). See Stateless Mode.
Commonly referenced variables:
GITLAB_API_URLGITLAB_PERSONAL_ACCESS_TOKENGITLAB_USE_OAUTHREMOTE_AUTHORIZATIONMCP_TRUST_PROXYMAX_REQUESTS_PER_MINUTEMAX_SESSIONSMCP_ALLOWED_HOSTSMCP_ALLOWED_ORIGINSGITLAB_MCP_OAUTHGITLAB_OAUTH_CALLBACK_PROXYGITLAB_OAUTH_ALLOWED_REDIRECT_URISOAUTH_REGISTER_RATE_LIMIT_PER_HOUROAUTH_STATELESS_MODEOAUTH_STATELESS_SECRET
The reference document also covers:
auth and OAuth variables
MCP OAuth proxy variables
project and tool filtering variables
dynamic tool discovery via
discover_tools(on-demand toolset activation)transport and session variables
proxy and TLS variables
For callback proxy mode details, see GitLab MCP OAuth Callback Proxy.
SSE session limits
GET /sse is subject to the same remote-transport controls as Streamable HTTP:
Capacity: at most
MAX_SESSIONSconcurrent SSE sessions (default 1000); further connections get503.Creation rate limit: new connections are limited to
MAX_REQUESTS_PER_MINUTEper client IP (default 60); excess connections get429.Idle timeout: a session that receives no
POST /messagesrequest forSESSION_TIMEOUT_SECONDS(default 1 hour) is closed, so an idle client must reconnect instead of holding a capacity slot. Unlike Streamable HTTP, holding the SSE stream open does not count as activity./healthreturns503withstatus: "degraded"while the instance is at capacity.
Tune these with MAX_SESSIONS, MAX_REQUESTS_PER_MINUTE, and SESSION_TIMEOUT_SECONDS.
Remote Authorization Setup (Multi-User Support)
When using REMOTE_AUTHORIZATION=true, the MCP server can support multiple users, each with their own GitLab token passed via HTTP headers. This is useful for:
Shared MCP server instances where each user needs their own GitLab access
IDE integrations that can inject user-specific tokens into MCP requests
Setup Example:
# Start server with remote authorization
docker run -d \
-e HOST=0.0.0.0 \
-e STREAMABLE_HTTP=true \
-e REMOTE_AUTHORIZATION=true \
-e GITLAB_API_URL="https://gitlab.com/api/v4" \
-e GITLAB_PERMISSION_MODE=readonly \
-e SESSION_TIMEOUT_SECONDS=3600 \
-p 3333:3002 \
zereight050/gitlab-mcpClient Configuration:
Your IDE or MCP client must send one of these headers with each request:
Authorization: Bearer glpat-xxxxxxxxxxxxxxxxxxxxor
Private-Token: glpat-xxxxxxxxxxxxxxxxxxxxThe token is stored per session (identified by mcp-session-id header) and reused for subsequent requests in the same session.
Remote Authorization Client Configuration Example with Cursor
{
"mcpServers": {
"GitLab": {
"url": "http(s)://<your_mcp_gitlab_server>/mcp",
"headers": {
"Authorization": "Bearer glpat-..."
}
}
}
}Important Notes:
Remote authorization only works with Streamable HTTP transport
Each session is isolated - tokens from one session cannot access another session's data Tokens are automatically cleaned up when sessions close
Session timeout: Auth tokens expire after
SESSION_TIMEOUT_SECONDS(default 1 hour) of inactivity. After timeout, the client must send auth headers again. The transport session remains active.Each request resets the timeout timer for that session
Rate limiting:
/mcprequests are limited toMAX_REQUESTS_PER_MINUTEper client IP, and per MCP session when using OAuth or remote authorization (default 60). See environment-variables.md.Capacity limit: Server accepts up to
MAX_SESSIONSconcurrent sessions (default 1000)
MCP OAuth Setup (Claude.ai Native OAuth)
When using GITLAB_MCP_OAUTH=true, the server acts as an OAuth proxy to your GitLab
instance. Claude.ai (and any MCP-spec-compliant client) handles the entire browser
authentication flow automatically — no manual Personal Access Token management needed.
Prerequisites:
A pre-registered GitLab OAuth application is required. GitLab restricts dynamically
registered (unverified) applications to the mcp scope, which is insufficient for API
calls (need api or read_api).
Go to your GitLab instance → Admin Area > Applications (instance-wide) or User Settings > Applications (personal)
Create a new application with:
Confidential: unchecked
Scopes:
api,read_api,read_user(or whichever scopes you intend to request viaGITLAB_OAUTH_SCOPES)
Save and copy the Application ID — this is your
GITLAB_OAUTH_APP_ID
How it works:
User adds your MCP server URL in Claude.ai
Claude.ai discovers OAuth endpoints via
/.well-known/oauth-authorization-serverClaude.ai registers itself via Dynamic Client Registration (
POST /register) — handled locally by the MCP server (each client gets a virtual client ID)Claude.ai redirects the user's browser to GitLab's login page using the pre-registered OAuth application
User authenticates; GitLab redirects back to
https://claude.ai/api/mcp/auth_callbackClaude.ai sends
Authorization: Bearer <token>on every MCP requestServer validates the token with GitLab and stores it per session
Server setup:
docker run -d \
-e STREAMABLE_HTTP=true \
-e GITLAB_MCP_OAUTH=true \
-e GITLAB_OAUTH_APP_ID="your-gitlab-oauth-app-client-id" \
-e GITLAB_API_URL="https://gitlab.example.com/api/v4" \
-e MCP_SERVER_URL="https://your-mcp-server.example.com" \
-p 3002:3002 \
zereight050/gitlab-mcpFor local development (HTTP allowed):
MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL=true \
STREAMABLE_HTTP=true \
GITLAB_MCP_OAUTH=true \
GITLAB_OAUTH_APP_ID=your-gitlab-oauth-app-client-id \
MCP_SERVER_URL=http://localhost:3002 \
GITLAB_API_URL=https://gitlab.com/api/v4 \
node build/index.jsClaude.ai configuration:
{
"mcpServers": {
"GitLab": {
"url": "https://your-mcp-server.example.com/mcp"
}
}
}No headers field is needed — Claude.ai obtains the token via OAuth automatically.
Environment variables:
Variable | Required | Description |
| Yes | Set to |
| Yes | Client ID of the pre-registered GitLab OAuth application |
| Yes | Public HTTPS URL of your MCP server; also allowed for |
| Yes | Your GitLab instance API URL (e.g. |
| Yes | Must be |
| No | Comma-separated GitLab scopes to request (e.g. |
| No | Per-IP rolling limit for Dynamic Client Registration ( |
| No | Set |
Important Notes:
MCP OAuth only works with Streamable HTTP transport (
SSE=trueis incompatible)Each user session stores its own OAuth token — sessions are fully isolated
Session timeout, rate limiting, and capacity limits apply identically to the
REMOTE_AUTHORIZATIONmode (SESSION_TIMEOUT_SECONDS,MAX_REQUESTS_PER_MINUTE,MAX_SESSIONS)DCR rate limiting:
POST /registeris limited toOAUTH_REGISTER_RATE_LIMIT_PER_HOURper client IP (default 20/hour). Separate from/mcplimits and GitLab API quotas. See environment-variables.md.Header auth fallback: when
Private-TokenorJOB-TOKENrequest headers are present, OAuth validation is skipped and the raw token is used directly for that session. This allows PATs and CI job tokens to be used alongside the OAuth flow on the same server instance.Authorization: Beareris always treated as an OAuth token — usePrivate-Tokenfor PAT-based header auth.
Agent Skill Files
Pre-built skill files are available in skills/gitlab-mcp/ for AI agents that support skill/instruction loading (Claude Code, GitHub Copilot, Cursor, etc.).
SKILL.md — Core guide (~800 tokens) with toolset overview, key workflows, and parameter hints
reference/ — Detailed workflow docs for code review, merge requests, issues, pipelines, and vulnerability triage
Install with the skills CLI:
npx skills add zereight/gitlab-mcp --skill gitlab-mcp-skillRegister the skill directory in your AI client to get optimal tool usage guidance without relying solely on the full ListTools response.
Tools 🛠️
merge_merge_request- Merge a merge requestapprove_merge_request- Approve a merge requestunapprove_merge_request- Unapprove a merge requestget_merge_request_approval_state- Get merge request approval details including approversget_merge_request_conflicts- Get the conflicts of a merge requestlist_merge_request_pipelines- List pipelines for a merge request with paginationexecute_graphql- Execute a GitLab GraphQL querycreate_or_update_file- Create or update a file in a GitLab projectsearch_repositories- Search for GitLab projectscreate_repository- Create a new GitLab projectcreate_group- Create new group or subgroupget_file_contents- Get contents of a file or directory from a GitLab projectpush_files- Push multiple files in a single commitcreate_issue- Create a new issuecreate_merge_request- Create a new merge requestfork_repository- Fork a project to your account or specified namespacecreate_branch- Create a new branchget_branch- Get branch details (commit, protection status)list_branches- List branches in project with search filterdelete_branch- Delete branch from projectlist_protected_branches- List protected branches in a project, supports search filterget_protected_branch- Get details of a single protected branch (access levels, force push settings)protect_branch- Protect a repository branch (set push/merge/unprotect access levels)unprotect_branch- Remove protection from a previously protected branchupdate_default_branch- Change the default branch of a projectget_merge_request- Get details of a merge request (merge_request_iid or source_branch required). Set include_summaries=true for deployment/commit/approval summariesget_merge_request_diffs- Get the changes/diffs of a merge request (merge_request_iid or source_branch required)list_merge_request_changed_files- List changed file paths in a merge request without diff content (merge_request_iid or source_branch required)list_merge_request_diffs- List merge request diffs with pagination (merge_request_iid or source_branch required)get_merge_request_file_diff- Get diffs for specific files from a merge request (merge_request_iid or source_branch required)list_merge_request_versions- List all versions of a merge requestget_merge_request_version- Get a specific version of a merge requestget_branch_diffs- Get diffs between two branches or commitsupdate_merge_request- Update a merge request (merge_request_iid or source_branch required)create_note- Create a new note (comment) to an issue or merge requestcreate_merge_request_thread- Create a new thread on a merge requestresolve_merge_request_thread- Resolve a thread on a merge requestmr_discussions- List discussion items for a merge requestget_merge_request_discussion- Get a single discussion item for a merge requestdelete_merge_request_discussion_note- Delete a discussion note on a merge requestupdate_merge_request_discussion_note- Update a discussion note on a merge requestcreate_merge_request_discussion_note- Add a new discussion note to an existing merge request threadcreate_merge_request_note- Add a new note to a merge requestdelete_merge_request_note- Delete an existing merge request noteget_merge_request_note- Get a specific note for a merge requestget_merge_request_notes- List notes for a merge requestupdate_merge_request_note- Modify an existing merge request noteget_draft_note- Get a single draft note from a merge requestlist_draft_notes- List draft notes for a merge requestcreate_draft_note- Create a draft note for a merge requestupdate_draft_note- Update an existing draft notedelete_draft_note- Delete a draft notepublish_draft_note- Publish a single draft notebulk_publish_draft_notes- Publish all draft notes for a merge request. Optionally sets reviewer_state and posts a summary note (GitLab 19.2+). Can set reviewer_state even with no drafts.list_merge_request_emoji_reactions- List all emoji reactions on a merge requestlist_merge_request_note_emoji_reactions- List all emoji reactions on a merge request note. Pass discussion_id for discussion thread replies.create_merge_request_emoji_reaction- Add an emoji reaction to a merge request (e.g. thumbsup, rocket, eyes)delete_merge_request_emoji_reaction- Remove an emoji reaction from a merge requestcreate_merge_request_note_emoji_reaction- Add an emoji reaction to a merge request note. Pass discussion_id for discussion thread replies.delete_merge_request_note_emoji_reaction- Remove an emoji reaction from a merge request note. Pass discussion_id for discussion thread replies.update_issue_note- Modify an existing issue thread notecreate_issue_note- Add a note to an issue, optionally replying to a discussion threadlist_issue_emoji_reactions- List all emoji reactions on an issuelist_issue_note_emoji_reactions- List all emoji reactions on an issue note. Pass discussion_id for discussion thread replies.create_issue_emoji_reaction- Add an emoji reaction to an issue (e.g. thumbsup, rocket, eyes)delete_issue_emoji_reaction- Remove an emoji reaction from an issuecreate_issue_note_emoji_reaction- Add an emoji reaction to an issue note. Pass discussion_id for discussion thread replies.delete_issue_note_emoji_reaction- Remove an emoji reaction from an issue note. Pass discussion_id for discussion thread replies.list_issues- List issues (default: created by current user; use scope='all' for all)my_issues- List issues assigned to the authenticated userget_issue- Get details of a specific issue. Returns the issue with a slim nested milestone by default; set full_response=true for the complete milestone objectupdate_issue- Update an issue. Returns a slim confirmation by default; set full_response=true for the complete updated issue objectupdate_issue_description_patch- Apply a patch (search/replace or unified diff) to an issue description. Reduces token usage by allowing small changes without sending the full description. Supports dry_run to preview changes and create_note to summarize updates.delete_issue- Delete an issuelist_todos- List GitLab to-do items for the current usermark_todo_done- Mark a GitLab to-do item as donemark_all_todos_done- Mark all pending GitLab to-do items as done for the current userlist_issue_links- List all issue links for a specific issuelist_issue_discussions- List discussions for an issueget_issue_link- Get a specific issue linkcreate_issue_link- Create an issue link between two issuesdelete_issue_link- Delete an issue linklist_namespaces- List all namespaces (users and groups) available to the current user. Filter by kind='group' for groups only.get_namespace- Get details of a namespace (user or group) by ID or path. Groups are namespaces with kind='group'.verify_namespace- Verify if a namespace path exists. Use parent_id to scope the check to a specific parent namespace — required for nested namespaces where the same path may exist under different parents.get_project- Get details of a specific projectlist_projects- List projects accessible by the current userupdate_project- Update project settings such as description, visibility, default branch, and feature access levelslist_project_members- List members of a GitLab projectlist_group_members- List members of a GitLab group with optional name or username searchlist_labels- List labels for a projectget_label- Get a single label from a projectcreate_label- Create a new label in a projectupdate_label- Update an existing label in a projectdelete_label- Delete a label from a projectlist_group_projects- List projects in a grouplist_wiki_pages- List wiki pages in a projectget_wiki_page- Get details of a specific wiki pagecreate_wiki_page- Create a wiki page in a projectupdate_wiki_page- Update a wiki page in a projectdelete_wiki_page- Delete a wiki page from a projectlist_group_wiki_pages- List wiki pages in a groupget_group_wiki_page- Get details of a specific group wiki pagecreate_group_wiki_page- Create a wiki page in a groupupdate_group_wiki_page- Update a wiki page in a groupdelete_group_wiki_page- Delete a wiki page from a groupget_repository_tree- List files and directories in a repositorylist_pipelines- List pipelines with filtering optionsget_pipeline- Get details of a specific pipelineget_pipeline_variables- Get variables configured for a pipelineget_pipeline_test_report- Get pipeline test reportget_pipeline_test_report_summary- Get pipeline test report summarydelete_pipeline- Delete a pipeline. Requires the project Owner role, cannot be undone, and does not automatically delete child pipelines.update_pipeline_metadata- Update pipeline metadatalist_deployments- List deployments with filtering optionsget_deployment- Get deployment details, including approval_summary, approvals, and pending_approval_count when GitLab provides themcreate_deployment- Create a deploymentupdate_deployment- Update a deployment statusdelete_deployment- Delete a deploymentlist_deployment_merge_requests- List merge requests shipped with a deploymentapprove_deployment- Approve or reject a protected-environment deploymentlist_environments- List environments in a projectget_environment- Get details of a specific environmentupdate_environment- Update an environmentdelete_environment- Delete a stopped environmentstop_environment- Stop an environmentstop_stale_environments- Stop eligible stale environments; protected environments are excluded and environments are stopped, not deleteddelete_review_app_environments- Schedule deletion of stopped review-app environments one week later; dry_run defaults to true and actual scheduling requires dry_run=falselist_pipeline_triggers- List project pipeline trigger tokensget_pipeline_trigger- Get a project pipeline triggercreate_pipeline_trigger- Create a project pipeline triggerupdate_pipeline_trigger- Update a project pipeline triggerdelete_pipeline_trigger- Delete a project pipeline triggertrigger_pipeline- Trigger a pipeline with a pipeline trigger tokenlist_pipeline_jobs- List all jobs in a specific pipelinelist_pipeline_trigger_jobs- List trigger jobs (bridges) in a pipelineget_pipeline_job- Get details of a GitLab pipeline job numberget_pipeline_job_output- Get the output/trace of a pipeline job with optional paginationvalidate_ci_lint- Validate provided GitLab CI/CD YAML content for a projectvalidate_project_ci_lint- Validate an existing .gitlab-ci.yml configuration for a projectlist_ci_catalog_resources- List GitLab CI/CD Catalog resources/components visible to the userget_ci_catalog_resource- Get details for a GitLab CI/CD Catalog resource, including versions and componentscreate_pipeline- Create a new pipeline for a branch or tagretry_pipeline- Retry a failed or canceled pipelinecancel_pipeline- Cancel a running pipelinelist_pipeline_schedules- List pipeline schedules in a project, optionally filtered to active or inactiveget_pipeline_schedule- Get details of a specific pipeline schedule, including its variables and last pipelinelist_pipeline_schedule_pipelines- List the pipelines that a pipeline schedule has triggeredcreate_pipeline_schedule- Create a new pipeline schedule for a branch or tagupdate_pipeline_schedule- Update an existing pipeline scheduledelete_pipeline_schedule- Delete a pipeline scheduleplay_pipeline_schedule- Run a pipeline schedule immediatelytake_ownership_pipeline_schedule- Take ownership of a pipeline scheduleget_pipeline_schedule_variable- Get a single variable of a pipeline schedulecreate_pipeline_schedule_variable- Create a variable for a pipeline scheduleupdate_pipeline_schedule_variable- Update a variable of a pipeline scheduledelete_pipeline_schedule_variable- Delete a variable from a pipeline scheduleplay_pipeline_job- Run a manual pipeline jobplay_pipeline_jobs- Play multiple manual pipeline jobs sequentiallyretry_pipeline_job- Retry a failed or canceled pipeline jobcancel_pipeline_job- Cancel a running pipeline joberase_pipeline_job- Erase a pipeline job log and artifactswait_for_pipeline- Wait for a pipeline to reach a terminal statuswait_for_job- Wait for a job to reach a terminal statuslist_job_artifacts- List artifact files in a job's archivedownload_job_artifacts- Download job artifact archive (zip) and save to a local pathget_job_artifact_file- Get content of a single file from a job's artifactslist_merge_requests- List merge requests (without project_id: user's MRs; with project_id: project MRs)list_group_merge_requests- List merge requests across all projects of a group and its subgroupslist_milestones- List milestones with filtering optionsget_milestone- Get details of a specific milestonecreate_milestone- Create a new milestoneedit_milestone- Edit an existing milestonedelete_milestone- Delete a milestoneget_milestone_issue- Get issues associated with a specific milestoneget_milestone_merge_requests- Get merge requests associated with a specific milestonepromote_milestone- Promote a milestone to the next stageget_milestone_burndown_events- Get burndown events for a specific milestonelist_group_milestones- List group milestones with filtering optionsget_group_milestone- Get details of a specific group milestonecreate_group_milestone- Create a new group milestoneedit_group_milestone- Edit an existing group milestonedelete_group_milestone- Delete a group milestoneget_group_milestone_issue- Get issues associated with a specific group milestoneget_group_milestone_merge_requests- Get merge requests associated with a specific group milestoneget_group_milestone_burndown_events- Get burndown events for a specific group milestoneget_users- Get GitLab user details by usernamesget_user- Get user details by IDwhoami- Get current authenticated user detailslist_commits- List repository commits with filtering optionsget_commit- Get details of a specific commitget_commit_diff- Get changes/diffs of a specific commitget_file_blame- Get git blame for a file at a given ref. Each entry maps a contiguous range of source lines to the commit that last changed them (id, author, authored_date, message). Use range_start/range_end to limit blame to specific lines.list_commit_statuses- List statuses for a commitcreate_commit_status- Create or update the status of a commitlist_group_iterations- List group iterations with filtering optionsupload_markdown- Upload a file for use in markdown contentdownload_attachment- Download an uploaded file from a project (images returned as base64; other files, or images with local_path, are saved as new files under the download directory)health_check- Verify server status and authentication. Always reports the MCP server version (mcp_server_version). When authenticated, also reports the GitLab instance version from GET /api/v4/version (version, revision, enterprise). Version lookup failures do not fail the health check — those fields are omitted.list_events- List events for the authenticated user (before/after: YYYY-MM-DD)get_project_events- List events for a project (before/after: YYYY-MM-DD)list_releases- List all releases for a projectget_release- Get a release by tag namecreate_release- Create a new releaseupdate_release- Update an existing releasedelete_release- Delete a release (does not delete the tag)create_release_evidence- Create release evidence (Premium/Ultimate)download_release_asset- Download a release asset file by direct asset pathlist_tags- List repository tags for a projectget_tag- Get a repository tag by namecreate_tag- Create a new repository tagdelete_tag- Delete a repository tagget_tag_signature- Get the X.509 signature of a signed tag (404 if unsigned)list_protected_tags- List protected tags in a projectget_protected_tag- Get details of a single protected tag or wildcard (create access levels)protect_tag- Protect a repository tag or wildcard (set who can create it)unprotect_tag- Remove protection from a previously protected tag or wildcardget_work_item- Get a work item with full details including status, hierarchy, type, and widgetslist_work_items- List work items with filters (type, state, search, assignees, labels)create_work_item- Create a work item (issue, task, incident, epic, etc.) with full field supportupdate_work_item- Update a work item (title, description, labels, assignees, state, parent, custom fields, etc.)convert_work_item_type- Convert a work item to a different typelist_work_item_statuses- List available statuses for a work item type (Premium/Ultimate)list_custom_field_definitions- List custom field definitions for a work item typemove_work_item- Move a work item to a different projectlist_work_item_notes- List notes and discussions on a work itemcreate_work_item_note- Add a note to a work item (supports Markdown, internal notes, threads)list_work_item_emoji_reactions- List all emoji reactions on a work itemlist_work_item_note_emoji_reactions- List all emoji reactions on a work item note (comment, thread, or thread reply)create_work_item_emoji_reaction- Add an emoji reaction to a work item (e.g. thumbsup, rocket, eyes)delete_work_item_emoji_reaction- Remove an emoji reaction from a work itemcreate_work_item_note_emoji_reaction- Add an emoji reaction to a work item note (comment, thread, or thread reply)delete_work_item_note_emoji_reaction- Remove an emoji reaction from a work item note (comment, thread, or thread reply)get_timeline_events- List timeline events for an incidentcreate_timeline_event- Create a timeline event on an incidentlist_webhooks- List webhooks for a project or groupcreate_webhook- Create a webhook on a project or groupupdate_webhook- Update an existing project or group webhookdelete_webhook- Delete a project or group webhooklist_webhook_events- List recent webhook events (past 7 days)get_webhook_event- Get full details of a specific webhook eventsearch_code- Search for code across all projects (requires advanced search or Zoekt)search_project_code- Search for code within a specific project (requires advanced search or Zoekt)search_group_code- Search for code within a specific group (requires advanced search or Zoekt)list_project_variables- List CI/CD variables for a projectget_project_variable- Get a single CI/CD variable from a projectcreate_project_variable- Create a CI/CD variable for a projectupdate_project_variable- Update an existing CI/CD variable in a projectdelete_project_variable- Delete a CI/CD variable from a projectlist_group_variables- List CI/CD variables for a groupget_group_variable- Get a single CI/CD variable from a groupcreate_group_variable- Create a CI/CD variable for a groupupdate_group_variable- Update an existing CI/CD variable in a groupdelete_group_variable- Delete a CI/CD variable from a groupget_dependency_proxy_settings- Get dependency proxy settings for a groupupdate_dependency_proxy_settings- Update dependency proxy settings for a group (enable/disable, credentials for authenticated Docker Hub pulls)list_dependency_proxy_blobs- List cached dependency proxy blobs for a grouppurge_dependency_proxy_cache- Schedule purge of all cached dependency proxy blobs for a grouplist_project_vulnerabilities- List vulnerabilities for a project with optional state, severity, and report type filters (GraphQL-backed, cursor pagination)get_vulnerability- Get full details of a specific vulnerabilitydismiss_vulnerability- Dismiss a vulnerability with a reason (acceptable_risk, false_positive, used_in_tests, mitigating_control, not_applicable) and optional commentconfirm_vulnerability- Confirm a vulnerability as a real finding requiring remediationorbit_query- Execute a GitLab Orbit graph query over the indexed SDLC knowledge graphorbit_get_schema- Fetch the current GitLab Orbit graph schema (node and edge types)orbit_get_status- Check GitLab Orbit indexing status for the enabled scopeorbit_list_tools- List the MCP tool definitions exposed by GitLab Orbitlist_snippets- List snippets — project snippets when project_id is given, otherwise personal snippetsget_snippet- Get a snippet's metadata. Set include_content=true to also fetch the raw file content.create_snippet- Create a snippet — project-scoped when project_id is given, otherwise a personal snippet. Requires title plus either file_name + content (single file) or files[] (multi-file); the two shapes cannot be mixed.update_snippet- Update an existing snippet (provide at least one field to change). For multi-file edits — renames, deletions, additions — pass files[] with action (create/update/delete/move) and previous_path. The file_name + content shortcut still works for single-file content replacement.delete_snippet- Delete a snippetlist_project_runners- List runners available to a project (type, status, paused, tag_list). Omits registration and authentication tokens.get_runner- Get a runner's tag_list, run_untagged, locked, and access_level. When a project allowlist is active, the runner must be available to an allowed project. Omits registration and authentication tokens.rebase_merge_request- Rebase the source branch of a merge request onto its target branchgitlab_api_request- Send one GitLab REST call under /api/v4. Enabled only when GITLAB_TOOLSETS lists api. Readonly allows GET; modify rejects DELETE.discover_tools- Discover and activate additional tool categories for this session. Available categories: core, merge_requests, issues, repositories, branches, projects, labels, ci, groups, pipelines, milestones, wiki, releases, tags, snippets, users, workitems, webhooks, search, variables, dependency_proxy, vulnerabilities, orbit. Already-active categories are listed in the response.
Wiki page titles vs. slugs
GitLab derives a wiki page's slug (its URL, /-/wikis/<slug>) from the page title. Passing title to update_wiki_page / update_group_wiki_page therefore renames the page and changes its URL — for nested pages it can also move the page to a different path — which breaks existing links.
To change only the displayed title while keeping the URL stable, do not pass title. Instead, store the display title in the page content's YAML front matter and update the content:
---
title: My Custom Display Title
---
Page body…GitLab keeps the slug/URL untouched and shows the front-matter title in the UI. Read it back with get_wiki_page using render_html: true, which populates the front_matter field — the plain title field always reflects the slug-derived value.
Testing 🧪
The project includes comprehensive test coverage including remote authorization:
# Run all tests (API validation + remote auth)
npm test
# Run only remote authorization tests
npm run test:remote-auth
# Run all tests including readonly MCP tests
npm run test:all
# Run only API validation
npm run test:integrationAll remote authorization tests use a mock GitLab server and do not require actual GitLab credentials.
Available Tools
39 toolscreate_issueA
Create a new issue. Use this to open a new issue; use update_issue for an existing issue and create_issue_note to add discussion without changing issue fields. The operation creates remote project data, requires issue creation permission, and returns the new issue or a validation, permission, or duplicate-related error.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | Issue title | |
| labels | No | Array of label names | |
| weight | No | Weight of the issue (numeric, typically hours of work) | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| issue_type | No | The type of issue. One of issue, incident, test_case or task. | issue |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| description | No | Issue description | |
| assignee_ids | No | Array of user IDs to assign | |
| milestone_id | No | Milestone ID to assign |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only provide openWorldHint, so the description carries most of the behavioral disclosure burden. It clearly states the operation creates remote project data, requires issue creation permission, and returns the new issue or validation/permission/duplicate errors. This gives an agent meaningful expectations about side effects and failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded, with the primary action first and the usage alternatives following. The only minor redundancy is 'Create a new issue' followed by 'Use this to open a new issue,' but overall it is tightly written and information-dense.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having 9 parameters and no output schema, the description covers the core behavioral contract: creation, permission requirement, expected return value, and likely error categories. Optional parameters are fully covered by the schema, so nothing essential is missing for agent decision-making.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so parameters are already well-documented in the input schema. The description adds no parameter-specific semantics beyond the high-level mention of the result and error cases, which is consistent with the baseline 3 for full schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource ('Create a new issue') and immediately differentiates itself from sibling tools: update_issue for existing issues and create_issue_note for discussion-only additions. An agent can confidently select this tool without inspecting sibling schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit guidance is provided: use this tool to open a new issue, update_issue for an existing issue, and create_issue_note for adding discussion without changing issue fields. This directly answers when-to-use and when-not-to-use, with named alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_issue_noteA
Add a note to an issue, optionally replying to a discussion thread. Use this to add a note to an existing issue, optionally as a reply to a discussion; use update_issue for issue fields and create_note only when the generic endpoint is required. The operation creates remote discussion content, requires note permission, and returns the note or a missing-issue/thread/permission error.
| Name | Required | Description | Default |
|---|---|---|---|
| body | Yes | The content of the note or reply | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| issue_iid | Yes | The IID of an issue | |
| created_at | No | Date the note was created at (ISO 8601 format) | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| discussion_id | No | The ID of a thread. If provided, replies to that thread; otherwise creates a top-level note |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only include openWorldHint, which is a minimal hint about side effects. The description carries the burden and discloses that the operation 'creates remote discussion content', requires note permission, and returns the note or a missing-issue/thread/permission error. This goes beyond the sparse annotation and gives the agent a clear behavioral model, including side effects, authorization, and error cases.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, but the second sentence partially repeats the first ('add a note to an existing issue, optionally as a reply to a discussion') before adding the guidance. It is still concise and front-loaded with the primary action, though the redundancy prevents a perfect score.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (6 parameters, no output schema, minimal annotations), the description covers the core purpose, usage guidance, permission requirement, and error outcomes. It doesn't explain the jmespath or created_at parameters, but the schema already defines them, and the description is otherwise sufficient for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents all 6 parameters with descriptions (100% coverage). The description adds no parameter-specific detail beyond what the schema provides; the only related phrase, 'optionally replying to a discussion thread', merely restates what discussion_id already says in the schema. With full schema coverage, a baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Add a note to an issue, optionally replying to a discussion thread', which is a specific verb+resource action. It explicitly differentiates from siblings by naming update_issue for issue fields and create_note for the generic endpoint, so an agent can immediately distinguish this tool from related ones without inspecting schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides explicit when-to-use guidance: 'Use this to add a note to an existing issue, optionally as a reply to a discussion; use update_issue for issue fields and create_note only when the generic endpoint is required.' This also covers when not to use it and names the alternatives, leaving no ambiguity.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_merge_requestA
Create a new merge request. Use this to open a new merge request from an existing source branch to a target branch; use update_merge_request after it exists. The operation creates remote review state, requires project access, and returns the new merge request or a validation, permission, branch, or duplicate-related error.
| Name | Required | Description | Default |
|---|---|---|---|
| draft | No | Create as draft merge request | |
| title | Yes | Merge request title | |
| labels | No | Labels for the MR | |
| squash | No | If true, squash all commits into a single commit on merge. | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| description | No | Merge request description | |
| assignee_ids | No | The ID of the users to assign the MR to | |
| reviewer_ids | No | The ID of the users to assign as reviewers of the MR | |
| source_branch | Yes | Branch containing changes | |
| target_branch | Yes | Branch to merge into | |
| target_project_id | No | Numeric ID of the target project. | |
| allow_collaboration | No | Allow commits from upstream members | |
| remove_source_branch | No | Flag indicating if a merge request should remove the source branch when merging. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only include openWorldHint, so the description carries the behavioral burden. It discloses that the operation 'creates remote review state' (side effect), 'requires project access' (permission prerequisite), and describes return behavior including error categories. These are meaningful, non-obvious behavioral traits not in the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with no fluff. The purpose is front-loaded, followed by usage guidance, then behavioral context. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 14-parameter creation tool with no output schema, the description adequately covers purpose, lifecycle sequencing, side effects, permission requirements, and error outcomes. It provides enough for an agent to invoke the tool and interpret the response correctly without needing the schema for high-level semantics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description only reuses terms like 'source branch' and 'target branch' that are already explained in the schema; it adds no additional parameter-level meaning, but does not need to given full schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States the specific action ('Create a new merge request'), the resource ('merge request'), and the context (from existing source branch to target branch). Explicitly differentiates from the sibling `update_merge_request` by stating the lifecycle order, so an agent can clearly distinguish when to create vs. update.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit guidance: 'Use this to open a new merge request from an existing source branch to a target branch; use `update_merge_request` after it exists.' This gives a clear when-to-use condition and names the alternative, making tool selection unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_merge_request_threadA
Create a new thread on a merge request. Use this to start a review thread on a merge request; use create_merge_request_note for an unthreaded note and create_merge_request_discussion_note to reply to an existing thread. The operation creates remote review content, requires note permission, and returns the discussion or a position/permission/validation error.
| Name | Required | Description | Default |
|---|---|---|---|
| body | Yes | The content of the thread | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| position | No | Position when creating a diff note | |
| created_at | No | Date the thread was created at (ISO 8601 format) | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| merge_request_iid | Yes | The IID of a merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide only openWorldHint=true, so the description carries most of the behavioral burden. It states that the operation 'creates remote review content,' requires note permission, and returns a discussion or error. This adds useful transparency about side effects and failure modes, beyond what openWorldHint implies.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, each earning its place: the first states the core action, the second distinguishes siblings, and the third covers behavior and errors. No filler or redundancy; the structure front-loads the purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complex nested schema and openWorldHint annotation, the description covers purpose, alternatives, permissions, and expected return/error behavior. It does not explain how to construct a position object, but the schema covers that in depth, so the description is complete enough for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% with rich descriptions on position, line_range, and required fields. The description itself adds no parameter-level meaning beyond the schema, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'Create a new thread on a merge request.' It explicitly differentiates from siblings by naming create_merge_request_note for unthreaded notes and create_merge_request_discussion_note for replies, so an agent can immediately tell them apart.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use guidance: 'Use this to start a review thread' and names the exact alternatives for other cases. It also mentions the permission requirement ('requires note permission'), which is essential context for deciding whether this is the right tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
discover_toolsARead-only
Discover and activate additional tool categories for this session. Available categories: core, merge_requests, issues, repositories, branches, projects, labels, ci, groups, pipelines, milestones, wiki, releases, tags, snippets, users, workitems, webhooks, search, variables, dependency_proxy, vulnerabilities, orbit. Already-active categories are listed in the response. Explicit-only toolsets are omitted; list them in GITLAB_TOOLSETS. Use this when a needed opt-in category is not currently exposed; omit category to inspect available categories, then call it with a category to activate that group for the current session. It changes only the session's tool registry, returns the active-tool summary, and does not change GitLab data.
| Name | Required | Description | Default |
|---|---|---|---|
| category | No | Toolset category to activate (e.g. 'pipelines', 'wiki'). Omit to list available categories. | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, but the description adds meaningful context: it changes only the session's tool registry, returns an active-tool summary, and does not modify GitLab data. This resolves the apparent tension between 'activate' and readOnlyHint, and discloses the explicit-only-toolset limitation. It stops short of detailing return shape beyond a summary, so a 4 rather than 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The category enumeration is long but earns its place as a discoverable value list, and the operational instructions are front-loaded before the behavioral notes. Slightly dense, but no sentence is wasted on restating the title.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description partially compensates by stating it returns the active-tool summary and lists already-active categories in the response. For a session-registry tool with only two optional params and full schema coverage, this is nearly complete, missing only finer detail on the return payload.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, and the description genuinely adds meaning for `category`: it names example values and explains the omit-to-list / supply-to-activate semantics. `jmespath` is left to the schema, which is acceptable but leaves a small gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource ('Discover and activate additional tool categories for this session') and enumerates the exact categories available, making it immediately distinguishable from the GitLab data-operation siblings. An agent knows precisely what this tool is for without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit trigger conditions ('Use this when a needed opt-in category is not currently exposed') and a concrete workflow ('omit `category` to inspect available categories, then call it with a category to activate that group'). It also flags the alternative for omitted toolsets (GITLAB_TOOLSETS), leaving little to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_branchARead-only
Get branch details (commit, protection status). To find resources, use the matching list or search tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| branch_name | Yes | Name of the branch |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so safety is covered, but the description adds genuinely useful behavior: read-only, and that missing resources, denied access, and rate limits surface as errors. It also clarifies accepted identifier formats. It does not describe pagination or payload shape, but that is minor here.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with purpose, then routing, then behavioral notes; tight and free of filler. The identifier-format note at the end is slightly out of place but still earns its space.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a three-parameter read with no output schema, the description names the returned fields, error conditions, and identifier formats, which is close to complete. The stray group_id mention is the only loose end.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so all three parameters are already documented; the description only reinforces the project_id format ('numeric ID or URL-encoded path'). It also references `group_id`, which is not a parameter of this tool, adding slight confusion rather than new meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get branch details') and even enumerates the payload ('commit, protection status'), which an agent can distinguish from list_branches. The contrast with the list/search family is implied by the routing sentence.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly routes the agent to the matching list or search tool to find resources, implying get_branch is for when the branch name is already known. It gives clear context but no explicit statement of when this tool is the wrong choice beyond that.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_commitARead-only
Get details of a specific commit. To find resources, use the matching list or search tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| sha | Yes | The commit hash or name of a repository branch or tag | |
| stats | No | Include commit stats | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, and the description reinforces read-only while adding genuinely new context: missing resources, denied access, and rate limits surface as errors. That error-surface disclosure is useful behavioral detail beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short, front-loaded sentences; the core purpose leads and the routing and error notes follow. The closing project_id/group_id sentence carries a stray group_id mention that doesn't apply here.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description carries the burden of explaining what 'details' contains, yet it never sketches the returned commit fields despite having stats and jmespath parameters that shape the payload. Safety and routing context is complete; return-value context is thin.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so each of the four parameters is already documented. The added note that project_id takes a numeric ID or URL-encoded path largely restates the schema entry, and it even references 'group_id', which is not a parameter of this tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: 'Get details of a specific commit.' An agent can distinguish it from get_commit_diff and list_commits by the singular resource and detail framing, though it never names those siblings explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'To find resources, use the matching list or search tool' gives clear routing guidance toward list_commits/search_repositories. It stops short of naming the exact sibling or stating when this tool is the wrong choice.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_commit_diffARead-only
Get changes/diffs of a specific commit. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| sha | Yes | The commit hash or name of a repository branch or tag | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| full_diff | No | Whether to return the full diff or only first page (default: false) | |
| project_id | Yes | Project ID or complete URL-encoded path to project |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With readOnlyHint/openWorldHint annotations already covering the safety profile, the description still adds value by disclosing error behavior for missing resources, denied access, and rate limits, plus ID/path format conventions. It stops short of describing return shape or whether diff is paginated beyond the schema hint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences with zero filler, front-loading the core purpose before behavioral and parameter notes. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only retrieval tool with full schema coverage and no output schema, the description covers purpose, error semantics, and ID conventions adequately. Minor gap: no note on diff size/pagination behavior despite the full_diff parameter implying the diff can be large.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four params (sha, jmespath, full_diff, project_id) are already documented in the schema. The description only adds the project_id/group_id numeric-or-URL-encoded-path convention, which is a marginal addition over the schema's own wording.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear verb+resource ('Get changes/diffs of a specific commit'), and it is distinguishable from siblings like get_commit (metadata) and get_merge_request_diffs (MR scope). It does not explicitly name or contrast with those siblings, keeping it short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage context is only implied by the purpose statement. No explicit when-to-use vs get_commit or get_merge_request_diffs guidance, and no exclusions are stated, so it sits at the minimum-viable level.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_file_blameARead-only
Get git blame for a file at a given ref. Each entry maps a contiguous range of source lines to the commit that last changed them (id, author, authored_date, message). Use range_start/range_end to limit blame to specific lines.
| Name | Required | Description | Default |
|---|---|---|---|
| ref | Yes | The name of branch, tag or commit (required by GitLab blame API) | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| file_path | Yes | The full path of the file to blame, relative to repo root | |
| range_end | No | Last line of the blame range (inclusive, 1-based). Both range[start] and range[end] must be set together. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| range_start | No | First line of the blame range (inclusive, 1-based). Both range[start] and range[end] must be set together. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the description does not need to repeat safety semantics. It adds behavior beyond the annotations by explaining the entry structure: contiguous source-line ranges map to the commit with id, author, authored_date, and message. It does not cover pagination or edge cases, but the read-only hint plus output-shape context is meaningful.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two well-structured sentences. The first front-loads the action and resource; the second communicates the return shape and the optional range limitation. Every phrase contributes information, and there is no filler or duplication of schema text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there is no output schema, the description supplies the essential return semantics by naming the fields a caller can expect in each entry. The schema covers all parameters, and the read-only annotation covers the safety profile. Missing details such as pagination or behavior on nonexistent refs are minor for a straightforward blame call.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema itself documents all six parameters including range_start, range_end, ref, and file_path. The description adds only a light hint that range_start/range_end limit the blame to specific lines, which is useful but does not materially go beyond the schema. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Get git blame for a file at a given ref.' This clearly separates it from read-content tools like get_file_contents and commit-history tools like get_commit-repository. It also states the central output concept (line ranges mapped to commits), removing ambiguity about what GitLab blame returns.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a clear operational context: run blame at a specific ref dat and optionally constrain the result to a range of lines with range_start/range_end. It does not explicitly name sibling alternatives or say when not to use this tool, but 'git blame' is a distinct enough operation that the usage context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_file_contentsARead-only
Get contents of a file or directory from a GitLab project. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| ref | No | Branch/tag/commit to get contents from | |
| path | No | Alias of file_path | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| file_path | No | Path to the file or directory. Takes precedence over 'path' when both are provided | |
| project_id | No | Project ID or URL-encoded path (optional; falls back to env) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so the safety profile is covered by structured data. The description adds genuinely useful behavior beyond that: missing resources, denied access, and rate limits surface as errors rather than partial results. It does not address return shape or large-file handling, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the core purpose front-loaded and zero filler. Minor deduction: it references `group_id`, which does not exist in the input schema, so that clause spends words on something misleading rather than useful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description does some of the return-value work by disclosing error conditions. It stops short of explaining what a directory result looks like versus a file result, or whether content is truncated for large files, which an agent would benefit from knowing for a five-parameter retrieval tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so all five parameters are already documented, including the project_id ID-or-URL-encoded-path convention that the description restates. The description adds no information about ref, the path/file_path alias precedence, or the jmespath filter, so it does not exceed the schema baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Names a specific verb (Get), resource (contents of a file or directory), and scope (a GitLab project), which cleanly separates it from siblings like get_repository_tree, get_file_blame, or get_commit_diff. An agent can identify the right tool without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The tool's read-only nature is stated, which implies a read/retrieve use case, but there is no explicit when-to-use guidance and no named alternative (e.g., use get_repository_tree to enumerate a directory, get_file_blame for line ownership). Usage is implied rather than directed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_issueARead-only
Get details of a specific issue. Returns the issue with a slim nested milestone by default; set full_response=true for the complete milestone object. Use this for issue management: inspect one issue's fields; use list_issues or my_issues to discover issues first. It is read-only, requires issue read permission, and returns the issue or an error when the identifier is invalid, the issue is missing, or access is denied.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| issue_iid | Yes | The internal ID of the project issue | |
| project_id | Yes | Project ID or URL-encoded path | |
| full_response | No | If true, include the complete milestone object, including its description, on the returned issue. Default returns the issue with a slim milestone (id, iid, title, state, web_url) to reduce token usage. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, but the description adds real value beyond them: issue read permission requirement and explicit failure modes (invalid identifier, missing issue, access denied). The 'read-only' restatement is redundant, but the permission and error context lift it above baseline.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with the core action and return shape, then usage routing, then permissions/errors. Every sentence earns its place with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, yet the description covers what is returned (issue with slim/full milestone), the flag that changes it, permission prerequisites, and error conditions. Nothing an agent needs to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description usefully clarifies the full_response default behavior (slim milestone vs. complete object) at the top level rather than only in the schema. It adds slight reinforcement rather than new syntax detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get details of a specific issue') and explicitly names the sibling tools to use for discovery (list_issues, my_issues), letting an agent distinguish it from them without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit when-to-use ('inspect one issue's fields') and when-to-use-alternatives ('use list_issues or my_issues to discover issues first'). The routing between single-item fetch and list tools is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_merge_requestARead-only
Get details of a merge request (merge_request_iid or source_branch required). Set include_summaries=true for deployment/commit/approval summaries. To find resources, use the matching list or search tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| source_branch | No | Source branch name | |
| include_summaries | No | If true, include deployment_summary, commit_addition_summary and approval_summary (extra API calls, larger response). Default false to reduce token usage. | |
| merge_request_iid | No | The IID of a merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so safety is covered; the description still adds value by stating the failure modes (missing resources, denied access, rate limits return errors). The include_summaries flag's cost (extra API calls, larger response) is disclosed in the schema, not here, so the description doesn't carry that part.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four dense sentences, front-loaded with the required-parameter rule and the summaries flag, with no filler. Minor waste: it mentions `group_id`, which is not a parameter of this tool, which could momentarily confuse the caller.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read tool with no output schema, the description covers the required-input rule, the summary-expansion option, discovery alternatives, and error behavior. It does not indicate response shape or pagination, but nothing essential to invoking it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds semantics the schema does not encode: the either/or requirement between merge_request_iid and source_branch (schema only marks project_id required), and the accepted ID-or-URL-encoded-path form for project_id.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening sentence states a specific verb and resource ("Get details of a merge request"), which implicitly separates it from siblings like get_merge_request_diffs, get_merge_request_note, and get_merge_request_approval_state. It is clear, though it never explicitly names a sibling to distinguish the MR entity payload from those adjacent read tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a concrete precondition ("merge_request_iid or source_branch required") and a clear opt-in condition for include_summaries ("for deployment/commit/approval summaries"). It also routes discovery cases to list/search tools. No explicit when-not-to-use statement, so not a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_merge_request_approval_stateARead-only
Get merge request approval details including approvers. Use this to inspect approval rules and approvers before deciding whether a merge request can be merged; use approve_merge_request to change approval state. It is read-only and returns the approval-state response, while missing requests, unsupported GitLab versions, and permission failures are reported as errors.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| merge_request_iid | Yes | The IID of the merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide readOnlyHint=true, and the description reinforces this by saying 'It is read-only.' It adds useful behavioral detail by listing error conditions: missing requests, unsupported GitLab versions, and permission failures are reported as errors. It does not describe the full shape of the approval-state response, but the error disclosure is meaningful beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. It front-loads the core purpose, then provides usage guidance, safety confirmation, and error behavior in a compact, well-ordered way. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only retrieval tool with rich annotations and complete schema coverage, the description covers purpose, usage, safety, and error conditions. The only minor gap is that it does not describe the specific fields contained in the 'approval-state response,' which would be more important if no output schema existed. Still, the essential context for correct selection and invocation is present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all three parameters. The description adds no additional parameter-specific meaning, such as how project_id is resolved or how jmespath interacts with the result. Baseline 3 is appropriate because the schema carries the parameter documentation burden.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb-resource relationship: 'Get merge request approval details including approvers.' It also names the inspection purpose ('inspect approval rules and approvers before deciding whether a merge request can be merged'), which distinguishes it from sibling tools like approve_merge_request and unapprove_merge_request.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells the agent when to use this tool ('before deciding whether a merge request can be merged') and points to the alternative for changing state ('use `approve_merge_request` to change approval state'). This is direct, actionable guidance with no ambiguity.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_merge_request_diffsARead-only
Get the changes/diffs of a merge request (merge_request_iid or source_branch required). To find resources, use the matching list or search tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| view | No | Diff view type | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| source_branch | No | Source branch name | |
| merge_request_iid | No | The IID of a merge request | |
| excluded_file_patterns | No | Array of regex patterns to exclude files from the diff results. Each pattern is a JavaScript-compatible regular expression that matches file paths to ignore. Examples: ["^vendor/", "^test/mocks/", "\.spec\.ts$", "package-lock\.json"] |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so the safety profile is covered. The description adds meaningful behavior beyond that: the identifier requirement, and that missing resources, denied access, and rate limits surface as errors, which helps an agent anticipate failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, all front-loaded with the core action first and constraints after; no filler. Slightly dense parentheticals but nothing wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 6-parameter read tool with no output schema, the description covers the access pattern and error behavior but says nothing about the shape of the returned diff (e.g., per-file change objects, truncation, large-diff handling) nor how it relates to the sibling diff tools. Adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3 and the schema already documents every parameter including the view enum and jmespath. The description mostly repeats structured content ('project_id/group_id take a numeric ID or URL-encoded path'), and even references group_id, which is not in the schema, adding little net value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get the changes/diffs of a merge request') and clarifies the required identifier choice, which is clear enough to act on. However, it does not distinguish itself from close siblings like list_merge_request_diffs or get_merge_request_file_diff, so an agent must still infer which diff tool applies.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives one useful routing hint ('To find resources, use the matching list or search tool') and notes that merge_request_iid or source_branch is required. It stops short of stating when to prefer this over list_merge_request_diffs or get_merge_request_file_diff, leaving the key selection decision to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_merge_request_discussionARead-only
Get a single discussion item for a merge request. Use this to fetch one known merge request discussion by discussion identifier; use mr_discussions for a collection and get_merge_request_note for a flat note. It is read-only and returns the discussion item or an error for an invalid identifier, missing discussion, or insufficient permission.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| discussion_id | Yes | The ID of a thread | |
| merge_request_iid | Yes | The IID of a merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already covers safety, and the description reinforces it with 'It is read-only.' It also adds behavioral context beyond annotations by describing the outcome: returns the discussion item or an error for invalid identifier, missing discussion, or insufficient permission.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the core purpose, then adds targeted usage and behavior information. Every sentence earns its place with no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-discussion read tool with three required identifiers and a fully documented schema, the description covers selection, alternatives, return behavior, and error conditions. Nothing essential for correct invocation is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all four parameters. The description adds little beyond restating that a discussion is fetched by identifier, so it provides no meaningful extra parameter meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Get a single discussion item for a merge request.' It also explicitly distinguishes itself from siblings by naming `mr_discussions` for collections and `get_merge_request_note` for flat notes, so an agent can clearly tell this tool apart.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use guidance: fetch one known discussion by discussion identifier. It names the exact alternatives for collection and flat note use cases, leaving no ambiguity about which sibling tool to choose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_merge_request_file_diffARead-only
Get diffs for specific files from a merge request (merge_request_iid or source_branch required). Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| unidiff | No | Present diff in the unified diff format. Default is false. | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| file_paths | Yes | List of file paths to retrieve diffs for (e.g. ['src/api/users.ts', 'src/repo/user.go']). Call list_merge_request_changed_files first to get the full list of changed paths. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| source_branch | No | Source branch name | |
| merge_request_iid | No | The IID of a merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only (readOnlyHint=true) and open-world scope, but the description adds genuinely new behavioral context: missing resources, denied access, and rate limits surface as errors. It does not describe pagination or response shape, but the error behavior is useful value beyond the structured hints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences with the core action and the key requirement front-loaded, and no filler. The only wasted element is the dangling `group_id` reference, which is irrelevant to this tool's parameters.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 6-parameter read tool with no output schema, the description covers the required selector, ID formatting, error behavior, and the read-only nature. The schema already points to list_merge_request_changed_files for discovering paths, so the remaining gap (return format) is minor.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents every parameter, establishing a baseline of 3. The description mostly repeats schema content (URL-encoded path handling) and even references a `group_id` parameter that does not exist in this schema, which weakens rather than strengthens parameter guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource (get diffs for specific files from a merge request), which is clearly narrower than the sibling get_merge_request_diffs/list_merge_request_diffs. It stops short of explicitly naming those siblings or explaining the scope contrast, so differentiation must be inferred from the word 'specific files'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a concrete prerequisite — merge_request_iid or source_branch is required — which tells the agent when this call is applicable. It does not name the alternative tools (get_merge_request_diffs, list_merge_request_diffs) or state when to prefer them, so exclusions are absent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_merge_request_noteARead-only
Get a specific note for a merge request. Use this to fetch one known merge request note by note identifier; use get_merge_request_notes for a collection and mr_discussions for threaded context. It is read-only and returns the note object or an error for an invalid identifier, missing note, or insufficient permission.
| Name | Required | Description | Default |
|---|---|---|---|
| note_id | Yes | The ID of a thread note | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| merge_request_iid | Yes | The IID of a merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, and the description reinforces this by saying 'It is read-only.' It adds useful behavior beyond the annotation: it returns the note object or an error for invalid identifier, missing note, or insufficient permission. This helps set expectations without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The primary action is front-loaded, and the usage guidance and behavioral expectations are packed efficiently into the second sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-object read tool with no output schema, the description is complete: it states the resource, the lookup key, the read-only nature, the return value, likely error conditions, and relevant alternatives. No additional context is needed for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameters are already documented in the input schema. The description adds little beyond identifying note_id as the identifier to use, but it does not provide additional semantics or format details beyond what the schema already contains.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'Get a specific note for a merge request.' It clearly differentiates this tool from get_merge_request_notes and mr_discussions by scope (single known note vs collection vs threaded context).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use this tool ('fetch one known merge request note by note identifier') and directly names the alternatives ('use get_merge_request_notes for a collection and mr_discussions for threaded context'). This gives an agent clear routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_merge_request_notesARead-only
List notes for a merge request. Use this to list flat notes on a merge request; use mr_discussions when thread structure and resolution state are required. It is read-only and returns note records, while invalid identifiers, missing resources, and pagination or permission errors are reported by GitLab.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination | |
| sort | No | The sort order of the notes | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| order_by | No | The field to sort the notes by | |
| per_page | No | Number of items per page | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| merge_request_iid | Yes | The IID of a merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, and the description reinforces this with 'It is read-only.' It adds useful behavioral context beyond annotations by specifying that the tool returns note records and that GitLab reports invalid identifiers, missing resources, pagination, and permission errors. This helps set error-handling expectations, though it does not detail response shapes or pagination behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with no filler. The core action is front-loaded, the sibling distinction follows immediately, and the behavioral/error note is concise. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is complete for tool selection and invocation: it states behavior, scope, the key sibling alternative, and error reporting. With no output schema, saying it 'returns note records' is a minimal but sufficient return-value hint. It could mention that results are flat and how pagination manifests, but this is a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameters are already documented in the schema. The description adds no parameter-specific meaning (e.g., how `sort` or `order_by` interact, or what `jmespath` filters). Baseline 3 is appropriate because the schema carries the full parameter-semantics burden.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource ('List notes for a merge request') and immediately differentiates from the sibling tool `mr_discussions` by characterizing itself as returning flat notes. This makes the tool's scope unmistakable and distinct from discussion-thread operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use this tool vs. an alternative: 'use mr_discussions when thread structure and resolution state are required.' This gives the agent a clear decision rule and excludes the overlapping sibling, leaving no ambiguity about selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_projectARead-only
Get details of a specific project. To find resources, use the matching list or search tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or URL-encoded path |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so the description's "Read-only" is partly redundant. It nonetheless adds genuine behavioral context the annotations don't carry: missing resources, denied access, and rate limits all surface as errors. Minor wart: it references `group_id`, which is not a parameter of this tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with purpose before routing and error behavior. Nothing is padded, though the group_id clause is dead weight that dilutes an otherwise tight definition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter read tool with no output schema, the definition covers purpose, routing, error modes, and ID format expectations. It does not describe the returned project shape or what jmespath does to the result, but the schema carries the parameter detail.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the project_id description already says "Project ID or URL-encoded path," so the description's restatement adds no new meaning. It ignores the `jmespath` parameter entirely and mentions a nonexistent `group_id`, which can only confuse rather than inform.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ("Get details of a specific project"), which is clearly distinct from siblings like list_projects or get_issue. It does not explicitly name list_projects as the counterpart, but the resource scope is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
"To find resources, use the matching list or search tool" routes the agent away from this tool when discovery is the goal, which is real usage guidance. However, the alternative is described generically rather than by name (list_projects/search_repositories), and no when-not conditions beyond discovery are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_repository_treeARead-only
List files and directories in a repository. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| ref | No | The name of a repository branch or tag. Defaults to the default branch. | |
| path | No | The path inside the repository | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of results to show per page | |
| recursive | No | Boolean value to get a recursive tree | |
| page_token | No | Token for keyset pagination. Use the next_page_token value returned in the previous response to retrieve the next page. | |
| pagination | No | Pagination method. Use 'keyset' for keyset-based pagination (required for repositories with many files). Non-keyset calls keep the legacy array response for backward compatibility; that legacy response shape is deprecated and may be removed in a future major release. Keyset calls return a structured response with items and next_page_token when more pages are available. | |
| project_id | Yes | The ID or URL-encoded path of the project |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, but the description adds genuine behavioral context: missing resources, denied access, and rate limits all surface as errors. That failure-mode disclosure is value the annotations do not provide, though nothing is said about result size or truncation behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the core action front-loaded and zero filler. However, the trailing '`project_id`/`group_id`' note mentions group_id, which is not a parameter of this schema, adding a small bit of noise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an 8-parameter read tool with no output schema and full schema coverage, the description covers the operation, safety profile, and failure modes adequately. Return-shape and pagination semantics are handled by the schema, so little is genuinely missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all eight parameters including pagination, jmespath, and recursive are already documented in the schema. The description's note about project_id accepting a numeric ID or URL-encoded path merely restates the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource (list files and directories) clearly, so an agent knows exactly what it retrieves. It does not explicitly contrast itself with near siblings like get_file_contents or get_branch, so it falls just short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description never states when to use this tool versus alternatives such as get_file_contents (single file) or search_repositories. Usage is only implied by the word 'List', with no conditions or exclusions spelled out.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
health_checkARead-only
Verify server status and authentication. Always reports the MCP server version (mcp_server_version). When authenticated, also reports the GitLab instance version from GET /api/v4/version (version, revision, enterprise). Version lookup failures do not fail the health check — those fields are omitted. Use this to verify server connectivity and authentication before making GitLab requests; use whoami when the authenticated user's identity is the goal. A 403 from GET /user with an insufficient_scope error means the token is accepted but User API scope is missing (read_user or fine-grained User:Read); the check stays ok, sets user_api_warning, and omits version metadata. Rate-limit and authentication-ban 403 responses stay unauthenticated. It does not mutate GitLab state and returns server/authentication status plus GitLab version details when available. Connection failures with no HTTP response return status error, authenticated false, and an error object (kind tls, dns, timeout, or network, plus code and message) instead of a protocol error.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint/openWorldHint, but the description goes far beyond: it discloses that version lookup failures are non-fatal and omit fields, that a 403 insufficient_scope sets user_api_warning and stays ok, that rate-limit/ban 403s stay unauthenticated, and that transport failures return status error plus a typed error object (tls/dns/timeout/network). This is unusually rich failure-mode disclosure for a read-only probe.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Purpose and the sibling alternative are front-loaded, and the dense error-code catalog is high-value rather than filler. It is nonetheless long for a health probe and the final sentence partially restates the opening ('returns server/authentication status'), leaving mild trimming headroom.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description takes on the burden of describing returns and does so thoroughly — version fields, conditional omission, warning flags, and per-kind error objects. An agent has everything needed to interpret any outcome correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single `jmespath` parameter has full schema description coverage and is a generic post-filter, so the schema carries the semantics. The description adds no parameter-specific syntax or examples, which is the baseline 3 when schema coverage is 100%.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening sentence states a specific verb and resource ('Verify server status and authentication') and immediately names the alternative sibling (`whoami`) with the condition that selects it. An agent can distinguish it from the identity-oriented sibling without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit when-to-use ('verify server connectivity and authentication before making GitLab requests') plus an explicit when-not/alternative ('use `whoami` when the authenticated user's identity is the goal'). Nothing about tool selection is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_branchesARead-only
List branches in project with search filter. For one known resource, use the matching get tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| search | No | Search term to filter branches by name | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (max: 100, default: 20) | |
| project_id | Yes | Project ID or complete URL-encoded path to project |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, but the description adds real behavioral context: missing resources, denied access, and rate limits all surface as errors. It also notes the ID-or-URL-encoded-path acceptance, which is operationally useful. Minor noise: it references `group_id`, which is not a parameter in this schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the core action and scope in the first clause, then layers routing and error behavior in short sentences. It is compact and free of filler, though the trailing ID/path sentence is somewhat redundant with the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description appropriately carries the burden of disclosing error semantics and ID formats, and pagination is covered by the schema. Nothing critical is missing for a filtered list call, though it could say more about result ordering or page-size behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so page, search, jmespath, per_page and project_id are all already documented in the schema, establishing a baseline of 3. The description's ID/path note largely restates the schema's project_id description and introduces a `group_id` that does not exist as a parameter, so it adds little net value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List branches in project') plus the scoping modifier ('with search filter'). It also distinguishes itself from the single-resource sibling by routing 'for one known resource' to the matching get tool, so an agent can separate it from get_branch without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit alternative and the condition that selects it ('for one known resource, use the matching get tool'), which is exactly the branch vs. branch-list routing decision. It stops short of stating when-not to use search or how results differ from other list tools, so it is clear context rather than full when/when-not coverage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_commitsARead-only
List repository commits with filtering options. For one known resource, use the matching get tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| all | No | Retrieve every commit from the repository | |
| page | No | Page number for pagination (default: 1) | |
| path | No | The file path | |
| order | No | List commits in order | |
| since | No | Only commits after or on this date are returned in ISO 8601 format YYYY-MM-DDTHH:MM:SSZ | |
| until | No | Only commits before or on this date are returned in ISO 8601 format YYYY-MM-DDTHH:MM:SSZ | |
| author | No | Search commits by commit author | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (max: 100, default: 20) | |
| ref_name | No | The name of a repository branch, tag or revision range, or if not given the default branch | |
| trailers | No | Parse and include Git trailers for every commit | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| with_stats | No | Stats about each commit are added to the response | |
| first_parent | No | Follow only the first parent commit upon seeing a merge commit |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnlyHint=true, openWorldHint=true), so the description's "Read-only" earns no credit. It does add value beyond structured data by disclosing failure behavior: missing resources, denied access, and rate limits all surface as errors. Pagination limits are left to the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four short sentences, front-loaded with the core purpose before the routing hint and error notes. The final project_id/group_id sentence is largely redundant with the schema and carries the erroneous group_id mention, keeping it out of 5 territory.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 14-parameter, no-output-schema list tool, the description covers purpose, a sibling alternative, error modes, and ID formatting — enough for correct invocation, with per_page/page limits handled by the schema. The dangling group_id reference is the only real gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all 14 parameters and the baseline is 3. The description restates the project_id format (already in the schema) and actually introduces a `group_id` parameter that does not exist in the input schema, which is a minor misleading signal rather than added meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource ("List repository commits") and notes the filtering scope, so an agent can distinguish it from the many get_* and list_* siblings. It falls short of a 5 only because "with filtering options" is generic and the sibling it contrasts with (get_commit) is referred to obliquely as "the matching get tool".
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives one routing rule — use the matching get tool for a single known resource — which is genuinely useful, but it never names get_commit and gives no guidance on which filters (path, ref_name, since/until, all) to combine or when to prefer list_branches/get_repository_tree for related lookups. Usage context is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_issue_discussionsARead-only
List discussions for an issue. Use this to inspect threaded discussions for an issue; use list_issues for issue records and get_issue for one issue's fields. It is read-only and returns discussion items, while invalid identifiers, missing issues, and permission failures are reported as errors.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (max: 100, default: 20) | |
| issue_iid | Yes | The internal ID of the project issue | |
| project_id | Yes | Project ID or URL-encoded path |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description states it is read-only (matching readOnlyHint=true) and adds error behavior: invalid identifiers, missing issues, and permission failures are reported as errors. It also says it returns discussion items. While annotations already cover the read-only safety profile, the error reporting adds value beyond annotations. It doesn't contradict annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The core purpose is front-loaded, and the sibling differentiation and error behavior are compactly included. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers purpose, usage, and error behavior, and the schema covers parameters and pagination. It does not describe the exact structure of returned discussion items, but for a list tool with no output schema, this is a minor gap. The tool is adequately specified for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all five parameters are already fully documented in the schema. The description adds no extra parameter-level detail, but given the complete schema, the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (list discussions) and the target (an issue), and explicitly differentiates it from `list_issues` and `get_issue`, so an agent can immediately tell what this tool does and how it differs from close siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit usage guidance: use this to inspect threaded discussions, use `list_issues` for issue records, and `get_issue` for single issue fields. This provides both when-to-use and when-not-to-use with named alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_issuesARead-only
List issues (default: created by current user; use scope='all' for all). Use this for issue management: list GitLab issues, optionally scoped with project_id. Use get_issue when the issue iid is already known and my_issues for issues assigned to the current user. It is read-only and paginated, requires issue read permission, and returns issue records or GitLab errors for invalid identifiers, missing resources, or rate limits.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| scope | No | Return issues from a specific scope | |
| state | No | Return issues with a specific state | |
| labels | No | Array of label names | |
| search | No | Search for specific terms | |
| due_date | No | Return issues that have the due date | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (max: 100, default: 20) | |
| author_id | No | Return issues created by the given user ID. Mutually exclusive with author_username. | |
| milestone | No | Milestone title | |
| issue_type | No | Filter to a given type of issue. One of issue, incident, test_case or task | |
| project_id | No | Project ID or URL-encoded path (optional - if not provided, lists issues across all accessible projects) | |
| assignee_id | No | Return issues assigned to the given user ID (user id, none, or any). Mutually exclusive with assignee_username. | |
| confidential | No | Filter confidential or public issues | |
| iteration_id | No | Return issues assigned to the given iteration ID. None returns issues that do not belong to an iteration. Any returns issues that belong to an iteration. | |
| created_after | No | Return issues created after the given time | |
| updated_after | No | Return issues updated after the given time | |
| created_before | No | Return issues created before the given time | |
| updated_before | No | Return issues updated before the given time | |
| author_username | No | Return issues created by the given username. Mutually exclusive with author_id. | |
| assignee_username | No | Return issues assigned to the given username. Mutually exclusive with assignee_id. | |
| with_labels_details | No | Return more details for each label |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Even though annotations already mark readOnlyHint=true, the description adds meaningful behavioral context: it is paginated, requires issue read permission, and returns issue records or GitLab errors for invalid identifiers, missing resources, or rate limits. This goes beyond the annotation and helps the agent anticipate failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences with no wasted words. It front-loads the core purpose, immediately covers the default behavior, then adds alternative routing and safety/error context in a tight structure.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 22-parameter tool with no output schema, the description covers the essential context: what it lists, how scope works, when to use siblings, pagination, permissions, and expected return/error behavior. The rich schema fills in the remaining parameter details, so nothing critical is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and every parameter already has a meaningful description. The tool description adds only light semantic value by mentioning the default scope and optional project_id filtering, but it does not need to explain the many other parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb and resource: 'List issues' and 'list GitLab issues, optionally scoped with project_id'. It also gives the default scope and explicitly distinguishes itself from get_issue and my_issues, so an agent can confidently select it over sibling tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage guidance is explicit: it says to use get_issue when the issue iid is already known and my_issues for issues assigned to the current user. It also clarifies the default behavior (created by current user) and how to broaden it with scope='all'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_labelsARead-only
List labels for a project. For one known resource, use the matching get tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| search | No | Keyword to filter labels by | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (max: 100, default: 20) | |
| project_id | Yes | Project ID or URL-encoded path | |
| with_counts | No | Whether to include issue and merge request counts | |
| include_ancestor_groups | No | Include ancestor groups |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, but the description adds genuinely new behavioral context: missing resources, denied access, and rate limits all return errors. That error-profile disclosure goes beyond the structured annotations and is useful for an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with the core purpose front-loaded, followed by the alternative and error semantics. Tight overall, with only the redundant ID-format sentence detracting slightly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only list tool with full schema coverage and no output schema, the description covers purpose, the list-vs-single-resource choice, and error behavior. Pagination and filtering details are left to the schema, which documents them, so nothing critical is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all seven parameters. The description's note that project_id/group_id take a numeric ID or URL-encoded path merely repeats the schema's own wording, and it even mentions group_id, which is not a parameter here.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List labels for a project'), which is unambiguous. It does not differentiate from an actual sibling because no label-listing sibling exists, and the referenced 'matching get tool' is generic rather than named, so it falls short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides a clear alternative direction: for a single known resource, use the matching get tool rather than this list tool. However, it does not name a concrete sibling (no get_label appears in the sibling list), so the routing is clear in spirit but not fully actionable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_merge_request_changed_filesARead-only
List changed file paths in a merge request without diff content (merge_request_iid or source_branch required). Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| source_branch | No | Source branch name | |
| merge_request_iid | No | The IID of a merge request | |
| excluded_file_patterns | No | Array of regex patterns to exclude files. Examples: ["^vendor/", "\.pb\.go$"] |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotation already declares readOnlyHint=true, so the redundant 'Read-only' adds little, but the description goes further by disclosing error behavior (missing resources, denied access, rate limits return errors), which the annotations do not cover. No return format detail, but meaningful behavioral context beyond the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with the core action and scope, then constraints and behavioral notes. No filler; each clause carries distinct information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter list tool with no output schema, the description covers purpose, the diff-free return shape, selector requirements, and error conditions. Pagination or exact return envelope is unstated, a minor gap given the tool's simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, setting a baseline of 3, but the description adds a real constraint the schema does not enforce: that either merge_request_iid or source_branch is required despite only project_id being marked required. It also restates the numeric-ID/URL-encoded-path format for project_id.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource (list changed file paths in a merge request) and immediately distinguishes scope by noting 'without diff content', which separates it from the diff-oriented siblings like get_merge_request_diffs and get_merge_request_file_diff. An agent can identify the right tool without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Clarifies the selector requirement (merge_request_iid or source_branch) and the diff-free nature that routes it away from diff siblings. It lacks an explicit 'use X instead when...' exclusion, so it is clear context rather than fully prescriptive routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_merge_request_diffsARead-only
List merge request diffs with pagination (merge_request_iid or source_branch required). For one known resource, use the matching get tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| unidiff | No | Present diffs in the unified diff format. Default is false. Introduced in GitLab 16.5. | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (max: 100, default: 20) | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| source_branch | No | Source branch name | |
| merge_request_iid | No | The IID of a merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so the safety profile is covered. The description adds useful non-obvious context: missing resources, denied access, and rate limits return errors, plus the project_id/group_id ID-or-path format. Lacks pagination mechanics, but adds real value beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three compact sentences, each earning its place: scope/routing, error behavior, and parameter format. Front-loaded with the required identification constraint.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a paginated list tool with no output schema, the definition covers routing, error behavior, and param format adequately. It could better describe the return shape or pagination expectations, but nothing critical for correct invocation is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so all seven parameters are documented in the schema. The description adds the ID-or-URL-encoded-path accepted format for project_id, which is helpful, but pagination params (page, per_page) are left to the schema. Baseline 3 applies when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List merge request diffs') and distinguishes itself from the singular sibling by naming 'the matching get tool' for one known resource. An agent can pick list vs get without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides a clear when-to-use rule: use this for listing, use the matching get tool for one known resource. It stops short of naming the exact alternative (get_merge_request_diffs) but the routing rule is explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_merge_requestsARead-only
List merge requests (without project_id: user's MRs; with project_id: project MRs). For one known resource, use the matching get tool. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| wip | No | Filter merge requests against their wip status | |
| page | No | Page number for pagination (default: 1) | |
| sort | No | Return merge requests sorted in ascending or descending order | |
| scope | No | Return merge requests from a specific scope | |
| state | No | Return merge requests with a specific state | |
| labels | No | Array of label names | |
| search | No | Search for specific terms | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| order_by | No | Return merge requests ordered by the given field | |
| per_page | No | Number of items per page (max: 100, default: 20) | |
| author_id | No | Returns merge requests created by the given user ID (integer). Mutually exclusive with author_username. | |
| milestone | No | Milestone title | |
| project_id | No | Project ID or URL-encoded path (optional - if not provided, lists all merge requests the user has access to) | |
| assignee_id | No | Return MRs assigned to the given user ID (integer), 'none', or 'any'. Mutually exclusive with assignee_username. | |
| reviewer_id | No | Returns merge requests which have the user as a reviewer. Must be an integer, 'none', or 'any'. Mutually exclusive with reviewer_username. | |
| created_after | No | Return merge requests created after the given time | |
| source_branch | No | Return merge requests from a specific source branch | |
| target_branch | No | Return merge requests targeting a specific branch | |
| updated_after | No | Return merge requests updated after the given time | |
| created_before | No | Return merge requests created before the given time | |
| updated_before | No | Return merge requests updated before the given time | |
| author_username | No | Returns merge requests created by the given username. Mutually exclusive with author_id. | |
| assignee_username | No | Returns merge requests assigned to the given username. Mutually exclusive with assignee_id. | |
| reviewer_username | No | Returns merge requests which have the user as a reviewer by username. Mutually exclusive with reviewer_id. | |
| with_labels_details | No | Return more details for each label | |
| approved_by_usernames | No | Returns merge requests approved by the given usernames (array). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so safety is covered. The description adds real behavioral context beyond that: missing resources, denied access, and rate limits all surface as errors, which an agent needs to anticipate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four tight sentences, each load-bearing: scope semantics, sibling routing, error behavior, and parameter format. The most decision-relevant fact (scope of project_id) is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 26-param read tool with no output schema, the description covers scope, the get/list boundary, error conditions, and ID formatting. An agent can call it correctly; pagination behavior (page/per_page defaults) is left to the schema, which is acceptable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all 26 parameters are already documented. The description's note that project_id/group_id accept a numeric ID or URL-encoded path largely repeats the schema's own wording, so it adds only marginal value; baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (List) and resource (merge requests) and then disambiguates scope: without project_id it returns the user's MRs, with project_id it returns project MRs. It also explicitly routes single-resource lookups to the matching get tool, distinguishing it from get_merge_request.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives clear context for the two modes and points to the alternative ('use the matching get tool') when a single known resource is needed. It stops short of naming get_merge_request explicitly or describing when to prefer other list siblings like list_merge_request_diffs.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_project_membersARead-only
List members of a GitLab project. Read-only; missing resources, denied access, and rate limits return errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| query | No | Search for members by name or username | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (default: 20, max: 100) | |
| user_ids | No | Filter by user IDs | |
| project_id | Yes | Project ID or URL-encoded path | |
| skip_users | No | User IDs to exclude | |
| include_inheritance | No | Include inherited members. Defaults to false. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety profile is covered. The description adds genuinely useful behavioral context beyond that: error behavior for missing resources, denied access, and rate limits. Minor flaw: it references `group_id`, which is not a parameter in the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short, front-loaded sentences with no padding; the core action leads. The stray `group_id` reference is a small blemish on otherwise efficient structure.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only listing tool with 100% schema coverage, no output schema, and annotations covering safety, the description supplies the needed error-behavior context. It omits pagination behavior and includes a param (group_id) that doesn't exist, but neither blocks correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema already documents all eight parameters. The description's note that project_id takes a numeric ID or URL-encoded path merely restates the schema's own description, adding no new meaning. Baseline 3 applies when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ("List members of a GitLab project"), which an agent can distinguish from siblings like get_project or list_projects. It doesn't name a directly competing member-listing alternative, so no sibling routing is provided, keeping it just below a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the resource (list the members of a given project), but there is no explicit when-to-use/when-not guidance and no alternative named. Adequate but with clear gaps.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_projectsARead-only
List projects accessible by the current user. For one known resource, use the matching get tool. Read-only; missing resources, denied access, and rate limits return errors.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| sort | No | Return projects sorted in ascending or descending order | |
| owned | No | Filter for projects owned by current user | |
| topic | No | Filter by topic (projects tagged with this topic) | |
| search | No | Search term for projects | |
| simple | No | Return only limited fields | |
| archived | No | Filter for archived projects | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| order_by | No | Return projects ordered by field | |
| per_page | No | Number of items per page (max: 100, default: 20) | |
| membership | No | Filter for projects where current user is a member | |
| visibility | No | Filter by project visibility | |
| min_access_level | No | Filter by minimum access level | |
| search_namespaces | No | Needs to be true if search is full path | |
| with_issues_enabled | No | Filter projects with issues feature enabled | |
| with_merge_requests_enabled | No | Filter projects with merge requests feature enabled |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so safety is covered. The description adds genuinely new context by disclosing error behavior: missing resources, denied access, and rate limits all return errors. It does not describe pagination or return shape, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences with no waste; scope is front-loaded, then the alternative, then the error behavior. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 16-parameter list tool with no output schema, the description covers scope, safety, and errors but says nothing about the shape of returned projects or pagination behavior. Params are fully covered by the schema, but the absent output schema leaves a real gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% across all 16 parameters, so the schema fully documents pagination, filters, sorting, and enums. The description adds no parameter guidance beyond what is already structured, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List projects') plus the scope ('accessible by the current user'), and explicitly routes single-resource lookups to the sibling get tool. An agent can distinguish this from get_project without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides a clear usage rule: use this to list, use the matching get tool for one known resource. No explicit when-not beyond that (e.g., when to prefer my_issues or search_repositories), but the core routing decision is spelled out.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mr_discussionsARead-only
List discussion items for a merge request. Use this to list complete discussion threads for a merge request; use get_merge_request_notes when only flat notes are needed. It is read-only and returns threaded discussion items, while invalid merge request identifiers, missing resources, and permission failures are reported as errors.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (max: 100, default: 20) | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| merge_request_iid | Yes | The IID of a merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, and the description reinforces this while adding valuable context: it returns threaded discussion items and reports invalid IDs, missing resources, and permission failures as errors. This goes beyond the structured annotations and helps the agent anticipate failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loads the core purpose, then adds usage guidance and behavioral context. There is minor redundancy between 'List discussion items' and 'list complete discussion threads,' but overall each sentence contributes useful information without excessive length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only list tool with a well-covered schema and no output schema, the description provides enough context: what it returns, when to use an alternative, and how errors surface. It does not describe response shape, but that is not required here given the tool's simplicity and the absence of side effects.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already has 100% description coverage for all five parameters, so the baseline is 3. The description does not add parameter-specific meaning beyond its general references to merge requests, but it also does not need to since the schema fully documents each parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb and resource: 'List discussion items for a merge request' and specifies that it returns 'complete discussion threads.' It distinguishes itself from the sibling tool `get_merge_request_notes` by contrasting flat notes with threaded discussions, making the purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly provides usage guidance: use this tool for complete discussion threads and use `get_merge_request_notes` when only flat notes are needed. This gives an agent a clear decision rule between two closely related tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
my_issuesARead-only
List issues assigned to the authenticated user. Use this for issue management: list issues assigned to the authenticated user. Use list_issues for project-wide or author-scoped listing and get_issue for one issue. Resolving the current user requires classic read_user or fine-grained User:Read. It is read-only and paginated, requires authentication, and returns assigned issue records or permission/rate-limit errors.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| state | No | Return issues with a specific state (default: opened) | |
| labels | No | Array of label names to filter by | |
| search | No | Search for specific terms in title and description | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (default: 20, max: 100) | |
| milestone | No | Milestone title to filter by | |
| project_id | No | Project ID or URL-encoded path (optional to search across all accessible projects) | |
| created_after | No | Return issues created after the given time (ISO 8601) | |
| updated_after | No | Return issues updated after the given time (ISO 8601) | |
| created_before | No | Return issues created before the given time (ISO 8601) | |
| updated_before | No | Return issues updated before the given time (ISO 8601) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint, openWorldHint), it discloses authentication requirement, the specific permission scopes needed (classic read_user or fine-grained User:Read), pagination, and the failure modes (permission/rate-limit errors). It restates read-only, which the annotation already covers, but the auth and error information is genuine added value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core purpose and compact overall, but the clause 'Use this for issue management: list issues assigned to the authenticated user' repeats the opening sentence verbatim and does not earn its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 12-parameter read-only list tool with no output schema, it covers the essentials: what is returned (assigned issue records), auth requirements, pagination, and error outcomes. Nothing an agent needs to call it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% across all 12 parameters, so the schema already documents pagination, state, labels, date filters, and project_id. The description adds no parameter-level detail (e.g., how project_id interacts with the 'assigned to me' scope), so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource plus a scope qualifier: issues assigned to the authenticated user. It explicitly distinguishes itself from the closest siblings by naming `list_issues` (project-wide/author-scoped) and `get_issue` (single issue), so an agent can route without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states the selecting condition (mine = assigned to me) and names the two alternatives with their respective conditions, effectively covering when-not-to-use-this. Nothing about tool selection is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
resolve_merge_request_threadA
Resolve a thread on a merge request. Use this to mark an existing merge request review thread resolved; use update_merge_request_discussion_note when the note text itself must change. The operation changes review state, requires permission to resolve discussions, and returns the updated discussion or a missing-thread/permission error.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| resolved | Yes | Whether to resolve the thread | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| discussion_id | Yes | The ID of a thread | |
| merge_request_iid | Yes | The IID of a merge request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide only openWorldHint=true, so the description carries the burden. It clearly states the operation changes review state, requires permission to resolve discussions, and returns the updated discussion or a missing-thread/permission error. This discloses side effects, authorization needs, and failure modes. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, purpose first, then usage distinctioncomm and behavior/error summary. Every clause is informative with no filler. Front-loaded with the action and resource.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schemacorpor, the description explains the return value and error cases. It covers purpose, usage boundaries, permissions, state-change impact, and failure modes. Required parameters are all schema-documented, and optional jmespath needs no special explanation. Highly complete for a tool of this complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds general context (review thread, state change) but does not add parameter-level semantics beyond what the schema already provides for project_id, merge_request_iid, discussion_id, or resolved. It is adequate but not compensatory.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action (resolve), a precise resource (existing merge request review thread), and immediately distinguishes it from the sibling update_merge_request_discussion_note. An agent can tell exactly what this tool does without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says when to use this tool (to mark a thread resolved) and when to use the alternative update_merge_request_discussion_note (when note text must change). This is direct when-to-use and when-not-to-use guidance, naming the exact sibling tool. No inference required.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_repositoriesARead-only
Search for GitLab projects. If the identifier is known, use a typed get or list tool. Read-only; missing resources, denied access, and rate limits return errors.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number for pagination (default: 1) | |
| query | No | Search query (alias for 'search') | |
| search | No | Search query | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| per_page | No | Number of items per page (max: 100, default: 20) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so safety is covered structurally. The description adds genuinely new behavioral context by disclosing error behavior ('missing resources, denied access, and rate limits return errors'), which tells the agent how failures surface. It doesn't cover result formatting, but that's a minor gap given the annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, zero filler, and the most decision-relevant fact (routing to typed tools) is front-loaded right after the purpose. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a paginated, read-only search with a fully documented schema and no output schema, the description covers purpose, routing, and error behavior. Return-shape details are absent but partially inferable from the jmespath parameter's JSON filter; overall it is complete enough to invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all five parameters (page, query, search, jmespath, per_page) are already documented in the schema, including the query/search alias relationship and the per_page max. The description adds nothing about parameter semantics, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb+resource ('Search for GitLab projects') and immediately scopes the tool against alternatives ('If the identifier is known, use a typed get or list tool'). The only wrinkle is the terminology shift from the tool name's 'repositories' to 'GitLab projects', which is a minor ambiguity but easily reconciled for a GitLab-aware agent.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states the key when-not condition: if you already know the identifier, don't search – use a typed get or list tool. That is real routing guidance. It stops short of naming the exact siblings (get_project, list_projects), so it's a strong 4 rather than a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_issueA
Update an issue. Returns a slim confirmation by default; set full_response=true for the complete updated issue object. Use this to change fields on an existing issue; use update_issue_description_patch for a targeted description edit that avoids sending the full body, and use create_issue_note for discussion. The operation mutates issue state, requires issue-edit permission, and returns the updated issue or a validation/permission/conflict error.
| Name | Required | Description | Default |
|---|---|---|---|
| title | No | The title of the issue | |
| labels | No | Array of label names | |
| weight | No | Weight of the issue (numeric, typically hours of work) | |
| due_date | No | Date the issue is due (YYYY-MM-DD) | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| issue_iid | Yes | The internal ID of the project issue | |
| issue_type | No | The type of issue. One of issue, incident, test_case or task. | |
| project_id | Yes | Project ID or URL-encoded path | |
| description | No | The description of the issue | |
| state_event | No | Update issue state (close/reopen) | |
| assignee_ids | No | Array of user IDs to assign issue to | |
| confidential | No | Set the issue to be confidential | |
| milestone_id | No | Milestone ID to assign | |
| full_response | No | If true, return the complete updated issue object. Default returns a slim confirmation (iid, title, state, web_url, updated_at) to reduce token usage. | |
| discussion_locked | No | Flag to lock discussions |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only carry `openWorldHint: true`, so the description carries the full behavioral disclosure burden. It discloses that the operation mutates issue state, requires issue-edit permission, returns the updated issue or validation/permission/conflict errors, and explains the slim vs. full response behavior. This substantially exceeds what annotations alone provide and contains no contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences and front-loads the primary action and response behavior before moving to usage distinctions and side effects. Every sentence earns its place: no filler, no repetition of schema details, and the most decision-relevant information appears first.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and sparse annotations, the description is thorough: it covers mutability, permission requirements, return values, error types, and response-shape options. It also provides enough usage context to route between related tools. Nothing an agent needs to call this correctly and safely is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all 15 parameters. The description adds meaningful semantics for `full_response` by explaining the default slim confirmation and the specific fields it returns, which goes beyond the schema's one-line description. This warrants a 4 rather than a baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Update') and resource ('an issue'), and clearly identifies the tool's scope: changing fields on an existing issue. It also distinguishes itself from sibling tools like `update_issue_description_patch` and `create_issue_note`, so an agent can tell them apart without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says when to use this tool ('change fields on an existing issue') and names two alternatives with their use cases: `update_issue_description_patch` for targeted description edits avoiding full-body sends, and `create_issue_note` for discussion. This gives both positive and negative routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_issue_description_patchA
Apply a patch (search/replace or unified diff) to an issue description. Reduces token usage by allowing small changes without sending the full description. Supports dry_run to preview changes and create_note to summarize updates. Use this for a targeted search/replace or unified-diff change to an issue description; use dry_run before applying an uncertain patch and create_note when an audit summary is wanted. It changes the issue description when not dry-running, requires issue-edit permission, and returns the patch result or a mismatch/validation/permission error.
| Name | Required | Description | Default |
|---|---|---|---|
| patch | Yes | The patch content to apply to the issue description | |
| dry_run | No | If true, preview changes without updating the issue | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| issue_iid | Yes | The internal ID of the project issue | |
| patch_type | Yes | Type of patch format to apply | |
| project_id | Yes | Project ID or URL-encoded path | |
| create_note | No | If true, add a note summarizing the change after update | |
| allow_multiple | No | For search_replace: allow multiple matches to all be replaced (default: false — fail on duplicate) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With only openWorldHint in annotations, the description carries the transparency burden and does well: it discloses the side effect ('changes the issue description when not dry-running'), the permission requirement ('requires issue-edit permission'), and possible outcomes ('patch result or a mismatch/validation/permission error'). This goes well beyond the sparse annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core action and is generally efficient. However, the dry_run/create_note functionality is stated twice ('supports dry_run... create_note' and 'use dry_run... create_note'), creating slight redundancy without much added information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description adequately covers the return value ('returns the patch result or ... error') and the key side-effect/permission context. It relies on the thoroughly documented schema for parameter details, which is reasonable at 100% coverage, though a bit more detail on duplicate-match failure for allow_multiple could strengthen it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds mild value by explaining dry_run as 'preview changes' and create_note as 'summarize updates,' and by mapping patch_type to 'search/replace or unified diff,' but it does not substantially extend what the schema already documents.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'apply a patch ... to an issue description.' It also distinguishes itself from a full-description update by noting it 'reduces token usage by allowing small changes without sending the full description,' which differentiates it from sibling tools like update_issue.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says 'use this for a targeted search/replace or unified-diff change to an issue description' and gives conditional guidance for dry_run and create_note. It does not explicitly name the alternative full-update tool or state 'do not use for full rewrites,' but the targeted-change framing makes the intended use clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_merge_requestA
Update a merge request (merge_request_iid or source_branch required). Use the create tool for new resources and a note tool for comments. Changes GitLab data; needs permission and returns validation or conflict errors. project_id/group_id take a numeric ID or URL-encoded path.
| Name | Required | Description | Default |
|---|---|---|---|
| draft | No | Work in progress merge request | |
| title | No | The title of the merge request | |
| labels | No | Labels for the MR | |
| squash | No | Squash commits into a single commit when merging | |
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. | |
| project_id | Yes | Project ID or complete URL-encoded path to project | |
| description | No | The description of the merge request | |
| state_event | No | New state (close/reopen) for the MR | |
| assignee_ids | No | The ID of the users to assign the MR to | |
| milestone_id | No | Milestone ID to assign. Set to 0 to unassign. Null is treated as omitted. | |
| reviewer_ids | No | The ID of the users to assign as reviewers of the MR | |
| source_branch | No | Source branch name | |
| target_branch | No | The target branch | |
| merge_request_iid | No | The IID of a merge request | |
| remove_source_branch | No | Flag indicating if the source branch should be removed |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Only openWorldHint is annotated, so the description carries most of the burden and does so well: it warns the call mutates GitLab data, requires permission, and can return validation or conflict errors. It stops short of describing reversibility or what a partial update leaves untouched.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three compact sentences, front-loaded with the core action and its targeting requirement, with no filler. The identifier caveat and alternative routing are packed into parentheses, which is efficient though slightly dense.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 15-parameter mutation tool with no output schema and minimal annotations, the description covers targeting, safety, permissions, and error modes. It leaves the return shape and optional-field interactions implicit, but the essentials for correct invocation are present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3, but the description adds genuinely non-schema information: the either/or requirement of merge_request_iid or source_branch, and accepted ID/path formats. It does not hint at how the many optional fields interact (e.g. state_event vs draft).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (update) and resource (merge request) plus the identifier constraint needed to target one. It also explicitly distinguishes itself from the create tool and note tools, so an agent can separate it from siblings without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Names alternatives ('create tool for new resources', 'note tool for comments'), which is strong routing guidance. It does not spell out when-not-to-use beyond that (e.g. state transitions vs field edits), so it stops short of the full when/when-not/alternatives triad.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
whoamiARead-only
Get current authenticated user details. Use this to identify the authenticated GitLab user; use get_user or get_users when looking up another user. It requires classic read_user or fine-grained User:Read. It is read-only and returns the current user profile, while missing credentials or GitLab permission failures are reported as errors.
| Name | Required | Description | Default |
|---|---|---|---|
| jmespath | No | Optional JMESPath expression filtering the JSON result before return. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint/openWorldHint annotations, it discloses the required scopes (classic read_user or fine-grained User:Read), confirms read-only behavior, describes what is returned (current user profile), and states that missing credentials or permission failures surface as errors. That is meaningful auth and failure-mode context an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core action, then alternatives, then auth and error behavior — each sentence carries information. The 'It is read-only' clause partly restates readOnlyHint, a minor redundancy, but nothing is padded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description compensates by stating what is returned, and it covers auth requirements and error behavior for a credential-sensitive tool. Nothing an agent needs to invoke it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single jmespath parameter is fully documented in the schema (100% coverage), and the description adds no syntax or usage detail beyond it. Baseline 3 is correct when the schema does all the parameter work.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get current authenticated user details') and explicitly distinguishes itself from the sibling lookups get_user/get_users, which target other users. An agent can route correctly without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit when-to-use ('identify the authenticated GitLab user') plus named alternatives with the condition that selects them ('use get_user or get_users when looking up another user'). No inference required.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
80 tool updates
v2.2.6- Removed
approve_merge_request - Removed
bulk_publish_draft_notes - Removed
create_branch - Removed
create_commit_status - Removed
create_draft_note - Removed
create_group - Removed
create_issue_emoji_reaction - Removed
create_issue_link - Removed
create_issue_note_emoji_reaction - Removed
create_label - Removed
create_merge_request_discussion_note - Removed
create_merge_request_emoji_reaction - Removed
create_merge_request_note - Removed
create_merge_request_note_emoji_reaction - Removed
create_note - Removed
create_or_update_file - Removed
create_repository - Removed
delete_branch - Removed
delete_draft_note - Removed
delete_issue - Removed
delete_issue_emoji_reaction - Removed
delete_issue_link - Removed
delete_issue_note_emoji_reaction - Removed
delete_label - Removed
delete_merge_request_discussion_note - Removed
delete_merge_request_emoji_reaction - Removed
delete_merge_request_note - Removed
delete_merge_request_note_emoji_reaction - Removed
download_attachment - Removed
fork_repository - Removed
get_branch_diffs - Removed
get_ci_catalog_resource - Removed
get_draft_note - Changed
get_issue1 field changed- changed
Input schema / properties / full_response / descriptionPrevious value: -"If true, return the complete issue object including the full milestone description. Default returns a slim milestone (id, iid, title, state, web_url) to reduce token usage."New value: +"If true, include the complete milestone object, including its description, on the returned issue. Default returns the issue with a slim milestone (id, iid, title, state, web_url) to reduce token usage."
- Removed
get_issue_link - Removed
get_label - Removed
get_merge_request_conflicts - Removed
get_merge_request_version - Removed
get_namespace - Removed
get_project_events - Removed
get_protected_branch - Removed
get_user - Removed
get_users - Removed
list_ci_catalog_resources - Removed
list_commit_statuses - Removed
list_draft_notes - Removed
list_events - Removed
list_group_iterations - Removed
list_group_members - Removed
list_group_merge_requests - Removed
list_group_projects - Removed
list_issue_emoji_reactions - Removed
list_issue_links - Removed
list_issue_note_emoji_reactions - Removed
list_merge_request_emoji_reactions - Removed
list_merge_request_note_emoji_reactions - Removed
list_merge_request_pipelines - Removed
list_merge_request_versions - Removed
list_namespaces - Removed
list_protected_branches - Removed
list_todos - Removed
mark_all_todos_done - Removed
mark_todo_done - Removed
merge_merge_request - Removed
protect_branch - Removed
publish_draft_note - Removed
push_files - Removed
unapprove_merge_request - Removed
unprotect_branch - Removed
update_default_branch - Removed
update_draft_note - Removed
update_issue_note - Removed
update_label - Removed
update_merge_request_discussion_note - Removed
update_merge_request_note - Removed
update_project - Removed
upload_markdown - Removed
validate_ci_lint - Removed
validate_project_ci_lint - Removed
verify_namespace
118 tool updates
v2.1.66- Changed
approve_merge_request1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
bulk_publish_draft_notes1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_branch1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_commit_status1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_draft_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_group1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_issue1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_issue_emoji_reaction1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_issue_link1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_issue_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_issue_note_emoji_reaction1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_label1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_merge_request1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_merge_request_discussion_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_merge_request_emoji_reaction1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_merge_request_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_merge_request_note_emoji_reaction1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_merge_request_thread1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_or_update_file1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
create_repository1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_branch1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_draft_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_issue1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_issue_emoji_reaction1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_issue_link1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_issue_note_emoji_reaction1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_label1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_merge_request_discussion_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_merge_request_emoji_reaction1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_merge_request_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
delete_merge_request_note_emoji_reaction1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
discover_tools1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
download_attachment1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
fork_repository1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_branch1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_branch_diffs1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_ci_catalog_resource1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_commit1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_commit_diff1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_draft_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_file_blame1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_file_contents1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_issue1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_issue_link1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_label1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_merge_request1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_merge_request_approval_state1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_merge_request_conflicts1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_merge_request_diffs1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_merge_request_discussion1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_merge_request_file_diff1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_merge_request_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_merge_request_notes1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_merge_request_version1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_namespace1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_project1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_project_events1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_protected_branch1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_repository_tree1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_user1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
get_users1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
health_check1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_branches1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_ci_catalog_resources1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_commit_statuses1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_commits1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_draft_notes1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_events1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_group_iterations1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_group_members1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_group_merge_requests1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_group_projects1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_issue_discussions1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_issue_emoji_reactions1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_issue_links1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_issue_note_emoji_reactions1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_issues1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_labels1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_merge_request_changed_files1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_merge_request_diffs1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_merge_request_emoji_reactions1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_merge_request_note_emoji_reactions1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_merge_request_pipelines1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_merge_request_versions1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_merge_requests1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_namespaces1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_project_members1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_projects1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_protected_branches1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
list_todos1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
mark_all_todos_done1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
mark_todo_done1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
merge_merge_request1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
mr_discussions1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
my_issues1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
protect_branch1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
publish_draft_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
push_files1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
resolve_merge_request_thread1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
search_repositories1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
unapprove_merge_request1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
unprotect_branch1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_default_branch1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_draft_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_issue1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_issue_description_patch1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_issue_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_label1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_merge_request1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_merge_request_discussion_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_merge_request_note1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
update_project1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
upload_markdown1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
validate_ci_lint1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
validate_project_ci_lint1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
verify_namespace1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
- Changed
whoami1 field changed- added
Input schema / properties / jmespathAdded value: +{ + "description": "Optional JMESPath expression filtering the JSON result before return.", + "type": "string" +}
1 tool update
v2.1.63- Added
get_merge_request_discussion
37 tool updates
v2.1.62- Changed
create_branch1 field changed- changed
Input schema / requiredPrevious value: -[ - "branch", - "project_id" -]New value: +[ + "project_id", + "branch" +]
- Changed
create_commit_status1 field changed- changed
Input schema / requiredPrevious value: -[ - "sha", - "state", - "project_id" -]New value: +[ + "project_id", + "sha", + "state" +]
- Changed
create_draft_note1 field changed- changed
Input schema / requiredPrevious value: -[ - "body", - "project_id", - "merge_request_iid" -]New value: +[ + "project_id", + "merge_request_iid", + "body" +]
- Changed
create_issue1 field changed- changed
Input schema / requiredPrevious value: -[ - "title", - "project_id" -]New value: +[ + "project_id", + "title" +]
- Changed
create_issue_emoji_reaction1 field changed- changed
Input schema / requiredPrevious value: -[ - "name", - "project_id", - "issue_iid" -]New value: +[ + "project_id", + "issue_iid", + "name" +]
- Changed
create_issue_note1 field changed- changed
Input schema / requiredPrevious value: -[ - "body", - "project_id", - "issue_iid" -]New value: +[ + "project_id", + "issue_iid", + "body" +]
- Changed
create_issue_note_emoji_reaction1 field changed- changed
Input schema / requiredPrevious value: -[ - "name", - "project_id", - "issue_iid", - "note_id" -]New value: +[ + "project_id", + "issue_iid", + "note_id", + "name" +]
- Changed
create_label1 field changed- changed
Input schema / requiredPrevious value: -[ - "name", - "color", - "project_id" -]New value: +[ + "project_id", + "name", + "color" +]
- Changed
create_merge_request1 field changed- changed
Input schema / requiredPrevious value: -[ - "title", - "source_branch", - "target_branch", - "project_id" -]New value: +[ + "project_id", + "title", + "source_branch", + "target_branch" +]
- Changed
create_merge_request_discussion_note1 field changed- changed
Input schema / requiredPrevious value: -[ - "body", - "project_id", - "merge_request_iid", - "discussion_id" -]New value: +[ + "project_id", + "merge_request_iid", + "discussion_id", + "body" +]
- Changed
create_merge_request_emoji_reaction1 field changed- changed
Input schema / requiredPrevious value: -[ - "name", - "project_id", - "merge_request_iid" -]New value: +[ + "project_id", + "merge_request_iid", + "name" +]
- Changed
create_merge_request_note1 field changed- changed
Input schema / requiredPrevious value: -[ - "body", - "project_id", - "merge_request_iid" -]New value: +[ + "project_id", + "merge_request_iid", + "body" +]
- Changed
create_merge_request_note_emoji_reaction1 field changed- changed
Input schema / requiredPrevious value: -[ - "name", - "project_id", - "merge_request_iid", - "note_id" -]New value: +[ + "project_id", + "merge_request_iid", + "note_id", + "name" +]
- Changed
create_merge_request_thread1 field changed- changed
Input schema / requiredPrevious value: -[ - "body", - "project_id", - "merge_request_iid" -]New value: +[ + "project_id", + "merge_request_iid", + "body" +]
- Changed
create_note1 field changed- changed
Input schema / requiredPrevious value: -[ - "noteable_type", - "body", - "project_id", - "noteable_iid" -]New value: +[ + "project_id", + "noteable_type", + "noteable_iid", + "body" +]
- Changed
create_or_update_file1 field changed- changed
Input schema / requiredPrevious value: -[ - "file_path", - "content", - "commit_message", - "branch", - "project_id" -]New value: +[ + "project_id", + "file_path", + "content", + "commit_message", + "branch" +]
- Changed
create_repository1 field changed- added
Input schema / properties / namespace_id / maximumAdded value: +9007199254740991
- Changed
delete_branch1 field changed- changed
Input schema / requiredPrevious value: -[ - "branch_name", - "project_id" -]New value: +[ + "project_id", + "branch_name" +]
- Changed
get_branch1 field changed- changed
Input schema / requiredPrevious value: -[ - "branch_name", - "project_id" -]New value: +[ + "project_id", + "branch_name" +]
- Changed
get_branch_diffs1 field changed- changed
Input schema / requiredPrevious value: -[ - "from", - "to", - "project_id" -]New value: +[ + "project_id", + "from", + "to" +]
- Changed
get_commit1 field changed- changed
Input schema / requiredPrevious value: -[ - "sha", - "project_id" -]New value: +[ + "project_id", + "sha" +]
- Changed
get_commit_diff1 field changed- changed
Input schema / requiredPrevious value: -[ - "sha", - "project_id" -]New value: +[ + "project_id", + "sha" +]
- Changed
get_file_blame5 fields changed- added
Input schema / properties / range_end / maximumAdded value: +9007199254740991 - added
Input schema / properties / range_end / minimumAdded value: +-9007199254740991 - added
Input schema / properties / range_start / maximumAdded value: +9007199254740991 - added
Input schema / properties / range_start / minimumAdded value: +-9007199254740991 - changed
Input schema / requiredPrevious value: -[ - "file_path", - "ref" -]New value: +[ + "project_id", + "file_path", + "ref" +]
- Changed
get_protected_branch1 field changed- changed
Input schema / requiredPrevious value: -[ - "branch_name", - "project_id" -]New value: +[ + "project_id", + "branch_name" +]
- Changed
list_commit_statuses1 field changed- changed
Input schema / requiredPrevious value: -[ - "sha", - "project_id" -]New value: +[ + "project_id", + "sha" +]
- Changed
list_merge_request_pipelines1 field changed- changed
Input schema / requiredPrevious value: -[ - "merge_request_iid", - "project_id" -]New value: +[ + "project_id", + "merge_request_iid" +]
- Changed
protect_branch7 fields changed- added
Input schema / properties / merge_access_level / maximumAdded value: +9007199254740991 - added
Input schema / properties / merge_access_level / minimumAdded value: +-9007199254740991 - added
Input schema / properties / push_access_level / maximumAdded value: +9007199254740991 - added
Input schema / properties / push_access_level / minimumAdded value: +-9007199254740991 - added
Input schema / properties / unprotect_access_level / maximumAdded value: +9007199254740991 - added
Input schema / properties / unprotect_access_level / minimumAdded value: +-9007199254740991 - changed
Input schema / requiredPrevious value: -[ - "branch_name" -]New value: +[ + "project_id", + "branch_name" +]
- Changed
push_files2 fields changed- removed
Input schema / properties / files / items / additionalPropertiesRemoved value: -false - changed
Input schema / requiredPrevious value: -[ - "branch", - "files", - "commit_message", - "project_id" -]New value: +[ + "project_id", + "branch", + "files", + "commit_message" +]
- Changed
unprotect_branch1 field changed- changed
Input schema / requiredPrevious value: -[ - "branch_name", - "project_id" -]New value: +[ + "project_id", + "branch_name" +]
- Changed
update_default_branch1 field changed- changed
Input schema / requiredPrevious value: -[ - "default_branch", - "project_id" -]New value: +[ + "project_id", + "default_branch" +]
- Changed
update_issue_description_patch1 field changed- changed
Input schema / requiredPrevious value: -[ - "patch_type", - "patch", - "project_id", - "issue_iid" -]New value: +[ + "project_id", + "issue_iid", + "patch_type", + "patch" +]
- Changed
update_issue_note1 field changed- added
Input schema / requiredAdded value: +[ + "project_id", + "issue_iid", + "discussion_id", + "note_id" +]
- Changed
update_merge_request_discussion_note1 field changed- added
Input schema / requiredAdded value: +[ + "project_id", + "merge_request_iid", + "discussion_id", + "note_id" +]
- Changed
update_merge_request_note1 field changed- changed
Input schema / requiredPrevious value: -[ - "body", - "project_id", - "merge_request_iid", - "note_id" -]New value: +[ + "project_id", + "merge_request_iid", + "note_id", + "body" +]
- Changed
update_project1 field changed- added
Input schema / requiredAdded value: +[ + "project_id" +]
- Changed
validate_ci_lint1 field changed- changed
Input schema / requiredPrevious value: -[ - "content", - "project_id" -]New value: +[ + "project_id", + "content" +]
- Changed
verify_namespace2 fields changed- added
Input schema / properties / parent_id / maximumAdded value: +9007199254740991 - added
Input schema / properties / parent_id / minimumAdded value: +-9007199254740991
1 tool update
v2.1.57- Added
list_group_merge_requests
3 tool updates
v2.1.52- Changed
create_or_update_file1 field changed- added
Input schema / properties / encodingAdded value: +{ + "description": "Content encoding. Use 'base64' for binary files (content must already be base64-encoded). When omitted, GITLAB_REPO_FILE_ENCODING applies.", + "enum": [ + "text", + "base64" + ], + "type": "string" +}
- Changed
merge_merge_request1 field changed- added
Input schema / properties / shaAdded value: +{ + "description": "SHA of the source-branch HEAD from get_merge_request (`sha` or `diff_refs.head_sha`). If provided, GitLab merges only when HEAD still matches. GitLab 19.2+ groups may require this (Require a commit SHA on the merge requests API).", + "type": "string" +}
- Changed
push_files7 fields changed- changed
Input schema / properties / files / descriptionPrevious value: -"Array of files to push"New value: +"Array of files to push. Each entry defaults to action 'create'. Per-file fields: action (create/update/delete/move), encoding (text/base64; omitted uses GITLAB_REPO_FILE_ENCODING), previous_path (required for move). Content is required for create and update; omit content for delete, or for a move that should keep the original file. GITLAB_PERMISSION_MODE=modify rejects delete and move." - added
Input schema / properties / files / items / properties / actionAdded value: +{ + "description": "Commit action for this file. Defaults to 'create'.", + "enum": [ + "create", + "update", + "delete", + "move" + ], + "type": "string" +} - changed
Input schema / properties / files / items / properties / content / descriptionPrevious value: -"Content of the file"New value: +"File content. Required for create and update. Omit for delete, or for a move that should keep the original content. Base64-encoded when encoding is 'base64'." - added
Input schema / properties / files / items / properties / encodingAdded value: +{ + "description": "Use 'base64' for binary files (content must already be base64-encoded). When omitted, GITLAB_REPO_FILE_ENCODING applies.", + "enum": [ + "text", + "base64" + ], + "type": "string" +} - changed
Input schema / properties / files / items / properties / file_path / descriptionPrevious value: -"Path where to create the file"New value: +"Path of the file in the repo" - added
Input schema / properties / files / items / properties / previous_pathAdded value: +{ + "description": "Previous path of the file. Required when action is 'move'.", + "type": "string" +} - changed
Input schema / properties / files / items / requiredPrevious value: -[ - "file_path", - "content" -]New value: +[ + "file_path" +]
1 tool update
v2.1.46- Added
list_group_members
35 tool updates
v2.1.45- Added
approve_merge_request - Added
create_branch - Added
create_commit_status - Added
create_issue_emoji_reaction - Added
create_issue_link - Added
create_or_update_file - Added
delete_issue_link - Added
delete_label - Added
discover_tools - Added
fork_repository - Added
get_commit - Added
get_commit_diff - Added
get_file_blame - Added
get_issue_link - Added
get_merge_request_approval_state - Added
get_repository_tree - Added
get_user - Added
get_users - Added
list_ci_catalog_resources - Added
list_commit_statuses - Added
list_commits - Added
list_group_projects - Added
list_issue_discussions - Added
list_issue_links - Added
list_merge_request_changed_files - Added
list_merge_request_versions - Added
list_protected_branches - Added
mark_all_todos_done - Added
merge_merge_request - Added
push_files - Added
update_label - Added
upload_markdown - Added
validate_ci_lint - Added
validate_project_ci_lint - Added
whoami
37 tool updates
v2.1.43- Removed
approve_merge_request - Changed
bulk_publish_draft_notes3 fields changed- added
Input schema / properties / internalAdded value: +{ + "description": "If true, the summary note is internal (GitLab 19.2+, default false)", + "type": "boolean" +} - added
Input schema / properties / noteAdded value: +{ + "description": "Summary note body to post on the merge request (GitLab 19.2+)", + "type": "string" +} - added
Input schema / properties / reviewer_stateAdded value: +{ + "description": "Set reviewer review state after publishing (GitLab 19.2+). Does not record a formal approval. Works even with no draft notes.", + "enum": [ + "requested_changes", + "reviewed" + ], + "type": "string" +}
- Removed
create_branch - Removed
create_commit_status - Removed
create_issue_emoji_reaction - Removed
create_issue_link - Removed
create_or_update_file - Removed
delete_issue_link - Removed
delete_label - Removed
discover_tools - Removed
fork_repository - Removed
get_commit - Removed
get_commit_diff - Removed
get_file_blame - Removed
get_issue_link - Removed
get_merge_request_approval_state - Removed
get_repository_tree - Removed
get_user - Removed
get_users - Removed
list_ci_catalog_resources - Removed
list_commit_statuses - Removed
list_commits - Removed
list_group_projects - Removed
list_issue_discussions - Removed
list_issue_links - Removed
list_merge_request_changed_files - Removed
list_merge_request_versions - Removed
list_protected_branches - Removed
mark_all_todos_done - Removed
merge_merge_request - Removed
push_files - Removed
update_label - Changed
update_merge_request1 field changed- added
Input schema / properties / milestone_idAdded value: +{ + "description": "Milestone ID to assign. Set to 0 to unassign. Null is treated as omitted.", + "type": "string" +}
- Removed
upload_markdown - Removed
validate_ci_lint - Removed
validate_project_ci_lint - Removed
whoami
3 tool updates
v2.1.30- Changed
get_issue1 field changed- added
Input schema / properties / full_responseAdded value: +{ + "description": "If true, return the complete issue object including the full milestone description. Default returns a slim milestone (id, iid, title, state, web_url) to reduce token usage.", + "type": "boolean" +}
- Changed
get_merge_request1 field changed- added
Input schema / properties / include_summariesAdded value: +{ + "description": "If true, include deployment_summary, commit_addition_summary and approval_summary (extra API calls, larger response). Default false to reduce token usage.", + "type": "boolean" +}
- Changed
update_issue1 field changed- added
Input schema / properties / full_responseAdded value: +{ + "description": "If true, return the complete updated issue object. Default returns a slim confirmation (iid, title, state, web_url, updated_at) to reduce token usage.", + "type": "boolean" +}
TDQS
Scored across 39 tools
The set contains several overlapping clusters, especially merge request notes/discussions (get_merge_request_note, get_merge_request_notes, get_merge_request_discussion, mr_discussions) and diffs (get_merge_request_diffs, list_merge_request_diffs, get_merge_request_file_diff, list_merge_request_changed_files). Descriptions do cross-reference each other to reduce confusion, but the boundaries remain nuanced and an agent could easily misselect.
Most tools follow a clear snake_case verb_noun pattern (e.g., create_issue, list_merge_requests, get_commit_diff). A few deviations exist, such as whoami, my_issues, mr_discussions, and health_check, but overall the convention is readable and predictable.
With 39 exposed tools, the surface is much larger than the 3–15 range typically considered well-scoped. Many are highly granular, read-only variants (multiple diff and note getters) that inflate the count beyond what the core workflows require.
Core GitLab areas like issues, merge requests, projects, branches, commits, and files have read coverage plus some creation/update. However, key lifecycle operations are missing: no merge_merge_request, no branch or file creation/deletion, no project creation, no label management, and no CI/pipeline tools exposed. The discover_tools mechanism can activate more categories, but the current surface has notable gaps.
Maintenance
Related MCP Connectors
GitLab MCP — wraps the GitLab REST API v4 (BYO API key)
A MCP server built for developers enabling Git based project management with project and personal…
Go MCP server for GitLab: 2 dynamic tools reach 1000+ REST/GraphQL actions. Free/CE, no paid tier.
Related MCP Servers
- AlicenseAqualityBmaintenanceMCP server for GitLab CI/CD — pipelines, jobs, schedules, branches, tags, merge requests and repository files. Works with any GitLab (SaaS gitlab.com or self-hosted) via python-gitlab.2361 PyPI2MIT
- AlicenseNot gradedqualityDmaintenanceMCP server for interacting with GitLab API, supporting both self-hosted instances and gitlab.com. Provides tools for managing issues, merge requests, code review, pipelines, milestones, releases, search, and file access.445 npmMIT
- AlicenseAqualityAmaintenanceModel Context Protocol (MCP) server for GitLab — exposes 1006 GitLab REST & GraphQL API operations as MCP tools (42 meta-tools / 57 enterprise), 24 resources, 38 prompts, and 17 completion types for AI assistants. Written in Go, single static binary, stdio and HTTP transport.245MIT
- AlicenseNot gradedqualityCmaintenanceMCP server for interacting with GitLab API, supporting dynamic tool selection and enterprise-grade security.10MIT