Skip to main content
Glama

GitLab MCP Server

GitHub stars npm downloads npm GitHub License Install in VS Code Install in Cursor Ask DeepWiki MCP Toplist mcpindex

English | 한국어 | 简体中文 | Português (Brasil)

📖 Documentation → Setup guides, environment variables, and the full tool reference live on the hosted docs site.

Install @zereight/mcp-gitlab with the recommended local personal-access-token setup. These commands use the same arguments as the Claude Code and Codex guides.

Install the zereight-mcp-gitlab binary first with npm install -g @zereight/mcp-gitlab, or Homebrew brew tap zereight/gitlab-mcp https://github.com/zereight/gitlab-mcp and brew install zereight/gitlab-mcp/zereight-mcp-gitlab.

Read the token without echo, then export it. The shell history keeps the variable name.

read -rs GITLAB_PERSONAL_ACCESS_TOKEN && export GITLAB_PERSONAL_ACCESS_TOKEN

Client

Install

Claude Code

claude mcp add gitlab --transport stdio --scope local --env GITLAB_PERSONAL_ACCESS_TOKEN="$GITLAB_PERSONAL_ACCESS_TOKEN" --env GITLAB_API_URL=https://gitlab.com/api/v4 -- zereight-mcp-gitlab

Codex

codex mcp add gitlab --env GITLAB_PERSONAL_ACCESS_TOKEN="$GITLAB_PERSONAL_ACCESS_TOKEN" --env GITLAB_API_URL=https://gitlab.com/api/v4 -- zereight-mcp-gitlab

Cursor

Cursor setup guide

VS Code

VS Code setup guide

JSON clients

JSON-based MCP clients setup guide

Star History Chart

@zereight/mcp-gitlab

Agent-workflow-optimized GitLab MCP — manage projects, merge requests, issues, pipelines, wiki, releases, tags, milestones, and more through stdio, SSE, and Streamable HTTP.

Supports PAT, OAuth, read-only mode, dynamic API URLs, and remote authorization for VS Code, Claude, Cursor, Copilot, and other MCP clients.

Why use this GitLab MCP?

  • 275 tools: 273 in toolsets + execute_graphql + discover_tools — start with a small toolset; activate more at runtime without CQRS-style grouping

  • MR 2-step review — list_merge_request_changed_files → batched get_merge_request_file_diff

  • Agent Skill built in — workflow guidance in skills/gitlab-mcp/

  • Flexible auth — Personal Access Token, local OAuth2 browser flow, MCP OAuth proxy, and per-request remote authorization

  • Multiple transports — stdio for local clients, SSE for legacy clients, and Streamable HTTP for modern remote deployments

  • Client-friendly setup — examples for Claude Code, Codex, Antigravity, OpenCode, Copilot, Cline, Roo Code, Cursor, Kilo Code, and Amp Code

  • Self-hosted ready — works with custom GitLab instances, proxy settings, and dynamic API URL routing

  • JMESPath result filtering — optional jmespath on tool calls (see tools/list) shrinks JSON results without changing GitLab API requests; when response masking is enabled, JMESPath runs on masked data.

How we compare

@zereight/mcp-gitlab

GitLab MCP A (community CQRS-style)

GitLab official MCP server

Best for

AI agent workflows

Enterprise multi-instance / grouped tools

Built into GitLab, no separate install

Tool model

275 tools: 273 in toolsets + execute_graphql + discover_tools

~50–60 grouped browse_* / manage_* tools

Toolsets chosen with an HTTP header

MR review

2-step batched diff

Varies

get_merge_request with diffs

Node.js

>=18.17

Often >=24

Node.js 20+ for stdio via mcp-remote

License

MIT

Varies

Part of GitLab

Full comparison with GitLab MCP A →

GitLab also ships an official MCP server.

  • Free, Premium, and Ultimate. Moved from Premium to Free in GitLab 19.2. Generally available in GitLab 19.5.

  • On GitLab.com, a top-level group Owner allows access to the MCP server. On GitLab Self-Managed and GitLab Dedicated, an administrator controls the instance setting. Default rules are on the official page.

  • Remote clients use HTTP https://<gitlab.example.com>/api/v4/mcp with OAuth 2.0 dynamic client registration.

  • stdio goes through mcp-remote and needs Node.js 20 or later.

  • Toolsets use the X-Gitlab-Enabled-Mcp-Server-Toolsets header. An optional X-Gitlab-Mcp-Server-Tool-Name-Prefix header keeps the first 32 characters of a tool-name prefix.

Quick start: choose either Personal Access Token or OAuth2 setup below, install @zereight/mcp-gitlab, and use zereight-mcp-gitlab in your MCP client configuration.

Client Setup Guides

Related MCP server: gitlab-mcp

Usage

Setup Overview

Authentication Methods

The server supports four authentication methods:

For local/desktop use (most common):

  1. Personal Access Token (GITLAB_PERSONAL_ACCESS_TOKEN or GITLAB_PERSONAL_ACCESS_TOKEN_FILE) — simplest setup

  2. OAuth2 — Local Browser (GITLAB_USE_OAUTH) — recommended for better security

For server/remote deployments:

  1. OAuth2 — MCP Proxy (GITLAB_MCP_OAUTH) — for remote MCP clients such as Claude.ai

  2. Remote Authorization (REMOTE_AUTHORIZATION) — multi-user deployments where each caller provides their own token

Quick setup paths

For the simplest local setup, start with a Personal Access Token. For browser-based local auth, use OAuth2. For remote or multi-user deployments, continue to the MCP OAuth and Remote Authorization sections later in this README.

Install the server once:

brew tap zereight/gitlab-mcp https://github.com/zereight/gitlab-mcp
brew install zereight/gitlab-mcp/zereight-mcp-gitlab

Or with npm:

npm install -g @zereight/mcp-gitlab

Or with Nix, by adding this flake to your own:

# flake.nix
inputs.gitlab-mcp.url = "github:zereight/gitlab-mcp";

# wherever you configure your MCP client:
command = lib.getExe inputs.gitlab-mcp.packages.${system}.default;

The store path is pinned by your lock file; update it with nix flake update gitlab-mcp.

The examples use zereight-mcp-gitlab, a less collision-prone alias for the legacy mcp-gitlab binary. If your MCP client cannot find it, use the absolute path from which zereight-mcp-gitlab.

No global install? Pin npx to the previous stable release (the version these docs recommend), for example npx -y @zereight/mcp-gitlab@2.2.5. If you always want the newest release, use npx -y @zereight/mcp-gitlab@latest instead. The server prints a notice to stderr on startup when a newer version is available (disable with GITLAB_DISABLE_VERSION_CHECK=true).

Using CLI Arguments (for clients with env var issues)

Some MCP clients (like GitHub Copilot CLI) have issues with environment variables. Use CLI arguments instead:

{
  "mcpServers": {
    "gitlab": {
      "command": "zereight-mcp-gitlab",
      "args": ["--token=YOUR_GITLAB_TOKEN", "--api-url=https://gitlab.com/api/v4"],
      "tools": ["*"]
    }
  }
}

Available CLI arguments:

  • --token - GitLab Personal Access Token (replaces GITLAB_PERSONAL_ACCESS_TOKEN)

  • --api-url - GitLab API URL (replaces GITLAB_API_URL)

  • --read-only=true - Deprecated (removed in next major (v3.0.0)); use --permission-mode=readonly instead (replaces GITLAB_READ_ONLY_MODE)

  • --permission-mode - Permission level: readonly, modify (no delete or teardown tools), or full (replaces GITLAB_PERMISSION_MODE, default full)

  • --toolsets=all - Enable named toolsets except the explicit-only api toolset (replaces GITLAB_TOOLSETS; unset uses the lean core default). gitlab_api_request needs --toolsets=api

  • --tools=list_issues - Add individual tools (replaces GITLAB_TOOLS)

  • --use-wiki=true - Deprecated (removed in next major (v3.0.0)); use --toolsets=core,wiki instead (replaces USE_GITLAB_WIKI)

  • --use-milestone=true - Deprecated (removed in next major (v3.0.0)); use --toolsets=core,milestones instead (replaces USE_MILESTONE)

  • --use-pipeline=true - Deprecated (removed in next major (v3.0.0)); use --toolsets=core,pipelines and append validate_ci_lint,validate_project_ci_lint to the existing --tools list (or set --tools=validate_ci_lint,validate_project_ci_lint when that list is unset) (replaces USE_PIPELINE)

  • --disable-version-check=true - Disable the startup new-version notice (replaces GITLAB_DISABLE_VERSION_CHECK)

  • --masking-enabled=true - Enable text-response masking (replaces GITLAB_MASKING_ENABLED)

  • --masking-config - Path to a masking configuration file (replaces GITLAB_MASKING_CONFIG)

  • --masking-policy-file - Path to a protected managed-policy file (replaces GITLAB_MASKING_POLICY_FILE)

  • --masking-workspace-dir - Directory used to resolve masking files (replaces GITLAB_MASKING_WORKSPACE_DIR)

  • --compact-results=true - Truncate oversized MCP tool replies and attach a CLI command for the full payload (replaces GITLAB_MCP_COMPACT_RESULTS; default off)

  • --compact-result-chars - Character threshold for compacting (replaces GITLAB_MCP_COMPACT_RESULT_CHARS; default 4000)

  • --compact-tools - Comma-separated tool names to compact when oversized, without turning global compact on (replaces GITLAB_MCP_COMPACT_TOOLS)

  • --tool-profile - full (default) or slim. slim drops draft notes, emoji reactions, labels, CI catalog tools, and create_group from the initial list. Ignored when GITLAB_TOOLSETS is set (replaces GITLAB_TOOL_PROFILE)

If you already set GITLAB_TOOLSETS or --toolsets, append wiki, milestones, or pipelines to that list instead of replacing it. If you already set GITLAB_TOOLS or --tools, append validate_ci_lint and validate_project_ci_lint to that list instead of replacing it. An explicit list replaces the default core toolset; it does not merge.

CLI arguments take precedence over environment variables.

zereight-mcp-gitlab auth is a subcommand (not an MCP server flag). It runs GitLab device flow and exits. See CLI Arguments.

The same binary is also a gh-style GitLab CLI (tool <name> or curated forms such as mr list). No MCP registration is needed — set a PAT, or run auth and set GITLAB_USE_OAUTH=true: see CLI without MCP. Use it for the full payload in a terminal. MCP replies stay in the chat unless you set GITLAB_MCP_COMPACT_RESULTS=true (or --compact-results), which replaces oversized tool replies with a preview and a CLI command. Human CLI is never compacted. Same permission mode, toolsets, denied-tools regex, and tool-policy filters. Destructive tools and GITLAB_TOOL_POLICY_APPROVE tools need --yes. See Human CLI.

Fine-grained tool filtering: use GITLAB_PERMISSION_MODE=modify to allow create/update while blocking every delete tool and the destructive teardown tools (cancel_pipeline, cancel_pipeline_job, stop_environment, stop_stale_environments, unprotect_branch, unprotect_tag) — including destructive mutations (deletion and teardown verbs) through execute_graphql and push_files delete/move actions — or GITLAB_PERMISSION_MODE=readonly for read-only access. You can also enable toolset groups with GITLAB_TOOLSETS=<group,…>, allow-list individual tools with GITLAB_TOOLS=<tool,…> (e.g. read-only groups plus a few specific write tools), and deny-list by pattern with GITLAB_DENIED_TOOLS_REGEX. The legacy USE_GITLAB_WIKI / USE_MILESTONE / USE_PIPELINE flags are deprecated (removed in next major (v3.0.0)). Use GITLAB_TOOLSETS=core,wiki, core,milestones, or core,pipelines (USE_PIPELINE also needs validate_ci_lint,validate_project_ci_lint appended to an existing GITLAB_TOOLS list instead of replacing it). If you already set GITLAB_TOOLSETS, append the toolset to your existing list instead of replacing it. If GITLAB_TOOLS is unset, set GITLAB_TOOLS=validate_ci_lint,validate_project_ci_lint. If it is already set, append validate_ci_lint,validate_project_ci_lint instead of replacing that list. See Tools Reference and Environment Variables.

CAUTION

gitlab_api_request (toolset api) bypasses GITLAB_ALLOWED_GROUPS and other group restrictions, project allowlists, tool-level restrictions (GITLAB_TOOLS, GITLAB_DENIED_TOOLS_REGEX on other tools), and individual tool safety checks. The full token permission scope is exposed. Prompt injection can drive this tool. Operators who rely on these restrictions must NOT enable it. Enable it only by listing api in GITLAB_TOOLSETS (GITLAB_TOOLSETS=all, discover_tools, GITLAB_TOOLS, legacy USE_* flags, and GITLAB_TOOL_PROFILE do not). GITLAB_ALLOWED_PROJECT_IDS is checked only for /projects/:id paths. Endpoints such as /search, /users, /groups/:id, and /runners are not constrained. GITLAB_PROJECT_ID and OAuth group allowlists are not enforced.

  • sse

Pass the variable name only. The Docker client copies the exported GITLAB_PERSONAL_ACCESS_TOKEN into the container.

docker run -i --rm \
  -e HOST=0.0.0.0 \
  -e GITLAB_PERSONAL_ACCESS_TOKEN \
  -e GITLAB_API_URL="https://gitlab.com/api/v4" \
  -e GITLAB_PERMISSION_MODE=readonly \
  -e GITLAB_TOOLSETS=core,wiki,milestones,pipelines \
  -e SSE=true \
  -e SSE_AUTH_TOKEN=your_mcp_sse_token \
  -p 3333:3002 \
  zereight050/gitlab-mcp
{
  "mcpServers": {
    "gitlab": {
      "type": "sse",
      "url": "http://localhost:3333/sse",
      "headers": {
        "Authorization": "Bearer your_mcp_sse_token"
      }
    }
  }
}
  • streamable-http

docker run -i --rm \
  -e HOST=0.0.0.0 \
  -e REMOTE_AUTHORIZATION=true \
  -e GITLAB_API_URL="https://gitlab.com/api/v4" \
  -e GITLAB_PERMISSION_MODE=readonly \
  -e GITLAB_TOOLSETS=core,wiki,milestones,pipelines \
  -e STREAMABLE_HTTP=true \
  -p 3333:3002 \
  zereight050/gitlab-mcp
{
  "mcpServers": {
    "gitlab": {
      "type": "streamable-http",
      "url": "http://localhost:3333/mcp",
      "headers": {
        "Authorization": "Bearer glpat-..."
      }
    }
  }
}

Using MCP OAuth Proxy (GITLAB_MCP_OAUTH)

For server/remote deployments only. This mode requires the MCP server to be deployed with a publicly accessible HTTPS URL. For local/desktop use, see GITLAB_USE_OAUTH above.

For remote MCP clients that support the MCP OAuth specification (e.g. Claude.ai). The server acts as a full OAuth 2.0 authorization server — unauthenticated requests receive a 401 + WWW-Authenticate response, which triggers the OAuth browser flow automatically on the client side.

Remote MCP clients such as OpenCode, MCPJam, and Claude.ai can send their own callback URL during authorization. If you cannot register every client callback URL in GitLab, enable GITLAB_OAUTH_CALLBACK_PROXY=true. With callback proxy mode, GitLab only needs one registered redirect URI: {MCP_SERVER_URL}/callback.

GITLAB_OAUTH_REDIRECT_URI is for local OAuth (GITLAB_USE_OAUTH) only. It does not override remote MCP OAuth client callback URLs and should not be used to fix remote Unregistered redirect_uri errors.

This variable exists because the local OAuth flow starts a browser on the same machine as the MCP server and listens for the callback on a local HTTP server, for example http://127.0.0.1:8888/callback.

Remote MCP OAuth is different. In GITLAB_MCP_OAUTH=true mode, the MCP client provides its own callback URL during /authorize. GITLAB_OAUTH_REDIRECT_URI does not replace that client-provided URL.

Mode

Enable with

Callback variable

GitLab redirect URI

Local OAuth

GITLAB_USE_OAUTH=true

GITLAB_OAUTH_REDIRECT_URI

http://127.0.0.1:8888/callback or your local callback

Remote MCP OAuth

GITLAB_MCP_OAUTH=true

GITLAB_OAUTH_CALLBACK_PROXY=true

{MCP_SERVER_URL}/callback

Use GITLAB_OAUTH_REDIRECT_URI only when the MCP server itself owns the local browser callback. Use GITLAB_OAUTH_CALLBACK_PROXY=true when a remote MCP client owns the callback URL.

How it works: You deploy this MCP server somewhere with a public HTTPS URL. MCP clients connect to {MCP_SERVER_URL}/mcp. The server handles the OAuth 2.0 flow, exchanging credentials with GitLab on behalf of the client.

Prerequisites:

  1. A publicly accessible HTTPS server URL (MCP_SERVER_URL) — use ngrok for local testing

  2. A pre-registered GitLab OAuth application with api (or read_api) scopes — Go to Admin area → Applications, set Redirect URI to {MCP_SERVER_URL}/callback

Environment Variable

Required

Description

GITLAB_MCP_OAUTH

✅

Set to true to enable

GITLAB_API_URL

✅

GitLab API base URL

GITLAB_OAUTH_APP_ID

✅

GitLab OAuth Application ID

MCP_SERVER_URL

✅

Public HTTPS URL of this MCP server

STREAMABLE_HTTP

✅

Must be true

GITLAB_OAUTH_CALLBACK_PROXY

optional

Set to true to use the MCP server's fixed /callback URL

GITLAB_OAUTH_SCOPES

optional

Comma-separated scopes (default: api,read_api,read_user)

GITLAB_OAUTH_ALLOWED_GROUPS

optional

Comma-separated group full paths — only members (and subgroup members) may obtain a token (replaces deprecated GITLAB_ALLOWED_GROUPS)

When STREAMABLE_HTTP=true, server-side GitLab credentials (GITLAB_PERSONAL_ACCESS_TOKEN, GITLAB_JOB_TOKEN, GITLAB_AUTH_COOKIE_PATH, or GITLAB_USE_OAUTH) require REMOTE_AUTHORIZATION=true, GITLAB_MCP_OAUTH=true, or STREAMABLE_HTTP_AUTH_TOKEN.

Troubleshooting Unregistered redirect_uri

Check the redirect_uri in the browser URL. If it points to a client callback such as http://127.0.0.1:xxxxx/.../callback, enable:

GITLAB_OAUTH_CALLBACK_PROXY=true

Do not fix remote MCP OAuth by changing GITLAB_OAUTH_REDIRECT_URI. That variable is for local OAuth (GITLAB_USE_OAUTH) only.

docker run -i --rm \
  -e HOST=0.0.0.0 \
  -e GITLAB_MCP_OAUTH=true \
  -e GITLAB_OAUTH_CALLBACK_PROXY=true \
  -e STREAMABLE_HTTP=true \
  -e MCP_SERVER_URL=https://your-server.example.com \
  -e GITLAB_API_URL="https://gitlab.com/api/v4" \
  -e GITLAB_OAUTH_APP_ID=your_app_id \
  -p 3000:3002 \
  zereight050/gitlab-mcp

MCP client configuration:

{
  "mcpServers": {
    "gitlab": {
      "type": "http",
      "url": "https://your-server.example.com/mcp"
    }
  }
}

Using Remote Authorization (REMOTE_AUTHORIZATION)

For server/remote deployments only. Each HTTP caller provides their own GitLab token directly in request headers — no OAuth flow involved.

For multi-user or multi-tenant deployments where each caller provides their own GitLab token in the HTTP request header. No OAuth flow — the MCP server forwards the token to GitLab on behalf of the caller.

Header priority: Private-Token > JOB-TOKEN > Authorization: Bearer

Environment Variable

Required

Description

REMOTE_AUTHORIZATION

✅

Set to true to enable

STREAMABLE_HTTP

✅

Must be true

ENABLE_DYNAMIC_API_URL

optional

Allow per-request GitLab URL via X-GitLab-API-URL header

GITLAB_ALLOWED_HOSTS

optional

Comma-separated allowed X-GitLab-API-URL hosts; GITLAB_API_URL hosts are always allowed. Also trusted as download redirect targets (release assets, job artifacts, uploaded attachments); list private-network hosts here

GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY

optional

Allow unauthenticated initialize, notifications/initialized, tools/list, and server/discover only (tool calls still require auth)

MCP_SERVER_URL / MCP_ALLOWED_HOSTS / MCP_ALLOWED_ORIGINS

optional

Allowed public /mcp host/origin values for DNS rebinding protection

MCP_TRUST_PROXY

optional

Trust Forwarded / X-Forwarded-* headers behind a reverse proxy (download URLs, Express req.ip, /mcp IP rate limits, OAuth rate limits)

GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY=true is intended for MCP gateways or admin UIs that need to inspect tool metadata before a user provides a GitLab token. Leave it disabled unless the tool list is safe to expose in your deployment.

When MCP_SERVER_URL is not set, remote download URLs fall back to the local server address. Set MCP_TRUST_PROXY=true only if the server is reachable through a trusted reverse proxy and direct client access to the MCP server is blocked. This enables Express trust proxy for Streamable HTTP and SSE, derives public download URLs from Forwarded / X-Forwarded-Proto / X-Forwarded-Host / X-Forwarded-Prefix, and keeps OAuth endpoint rate limiting working when proxies send X-Forwarded-For with a client port (for example 1.2.3.4:5678). Existing OAuth+proxy deployments must set this explicitly after the flag was introduced.

Example request headers:

Private-Token: glpat-xxxxxxxxxxxxxxxxxxxx

or using a Bearer token:

Authorization: Bearer glpat-xxxxxxxxxxxxxxxxxxxx

⚠️ REMOTE_AUTHORIZATION is not compatible with SSE transport. STREAMABLE_HTTP=true is required.

Environment Variables

Use the dedicated reference for the full environment variable list:

Most users only need one of these starting sets:

  • Local PAT: GITLAB_PERSONAL_ACCESS_TOKEN, GITLAB_API_URL

  • Local OAuth: GITLAB_USE_OAUTH=true, GITLAB_OAUTH_CLIENT_ID, GITLAB_OAUTH_REDIRECT_URI, GITLAB_API_URL

  • Remote multi-user HTTP: STREAMABLE_HTTP=true, REMOTE_AUTHORIZATION=true (or GITLAB_MCP_OAUTH=true), MCP_TRUST_PROXY=true (behind a reverse proxy), MAX_REQUESTS_PER_MINUTE=300, MCP_SERVER_URL or MCP_ALLOWED_HOSTS, HOST, PORT

  • Multiple side-by-side deployments: set a distinct MCP_SERVER_NAME per instance (e.g. gitlab-selfhosted-readonly) so clients, logs, and telemetry can tell them apart

  • Multi-pod HPA (stateless): above + OAUTH_STATELESS_MODE=true, OAUTH_STATELESS_SECRET (same across all pods). See Stateless Mode.

Commonly referenced variables:

  • GITLAB_API_URL

  • GITLAB_PERSONAL_ACCESS_TOKEN

  • GITLAB_USE_OAUTH

  • REMOTE_AUTHORIZATION

  • MCP_TRUST_PROXY

  • MAX_REQUESTS_PER_MINUTE

  • MAX_SESSIONS

  • MCP_ALLOWED_HOSTS

  • MCP_ALLOWED_ORIGINS

  • GITLAB_MCP_OAUTH

  • GITLAB_OAUTH_CALLBACK_PROXY

  • OAUTH_REGISTER_RATE_LIMIT_PER_HOUR

  • OAUTH_STATELESS_MODE

  • OAUTH_STATELESS_SECRET

The reference document also covers:

  • auth and OAuth variables

  • MCP OAuth proxy variables

  • project and tool filtering variables

  • dynamic tool discovery via discover_tools (on-demand toolset activation)

  • transport and session variables

  • proxy and TLS variables

For callback proxy mode details, see GitLab MCP OAuth Callback Proxy.

SSE session limits

GET /sse is subject to the same remote-transport controls as Streamable HTTP:

  • Capacity: at most MAX_SESSIONS concurrent SSE sessions (default 1000); further connections get 503.

  • Creation rate limit: new connections are limited to MAX_REQUESTS_PER_MINUTE per client IP (default 60); excess connections get 429.

  • Idle timeout: a session that receives no POST /messages request for SESSION_TIMEOUT_SECONDS (default 1 hour) is closed, so an idle client must reconnect instead of holding a capacity slot. Unlike Streamable HTTP, holding the SSE stream open does not count as activity.

  • /health returns 503 with status: "degraded" while the instance is at capacity.

Tune these with MAX_SESSIONS, MAX_REQUESTS_PER_MINUTE, and SESSION_TIMEOUT_SECONDS.

Remote Authorization Setup (Multi-User Support)

When using REMOTE_AUTHORIZATION=true, the MCP server can support multiple users, each with their own GitLab token passed via HTTP headers. This is useful for:

  • Shared MCP server instances where each user needs their own GitLab access

  • IDE integrations that can inject user-specific tokens into MCP requests

Setup Example:

# Start server with remote authorization
docker run -d \
  -e HOST=0.0.0.0 \
  -e STREAMABLE_HTTP=true \
  -e REMOTE_AUTHORIZATION=true \
  -e GITLAB_API_URL="https://gitlab.com/api/v4" \
  -e GITLAB_PERMISSION_MODE=readonly \
  -e SESSION_TIMEOUT_SECONDS=3600 \
  -p 3333:3002 \
  zereight050/gitlab-mcp

Client Configuration:

Your IDE or MCP client must send one of these headers with each request:

Authorization: Bearer glpat-xxxxxxxxxxxxxxxxxxxx

or

Private-Token: glpat-xxxxxxxxxxxxxxxxxxxx

The token is stored per session (identified by mcp-session-id header) and reused for subsequent requests in the same session.

Remote Authorization Client Configuration Example with Cursor

{
  "mcpServers": {
    "GitLab": {
      "url": "http(s)://<your_mcp_gitlab_server>/mcp",
      "headers": {
        "Authorization": "Bearer glpat-..."
      }
    }
  }
}

Important Notes:

  • Remote authorization only works with Streamable HTTP transport

  • Each session is isolated - tokens from one session cannot access another session's data Tokens are automatically cleaned up when sessions close

  • Session timeout: Auth tokens expire after SESSION_TIMEOUT_SECONDS (default 1 hour) of inactivity. After timeout, the client must send auth headers again. The transport session remains active.

  • Each request resets the timeout timer for that session

  • Rate limiting: /mcp requests are limited to MAX_REQUESTS_PER_MINUTE per client IP, and per MCP session when using OAuth or remote authorization (default 60). See environment-variables.md.

  • Capacity limit: Server accepts up to MAX_SESSIONS concurrent sessions (default 1000)

MCP OAuth Setup (Claude.ai Native OAuth)

When using GITLAB_MCP_OAUTH=true, the server acts as an OAuth proxy to your GitLab instance. Claude.ai (and any MCP-spec-compliant client) handles the entire browser authentication flow automatically — no manual Personal Access Token management needed.

Prerequisites:

A pre-registered GitLab OAuth application is required. GitLab restricts dynamically registered (unverified) applications to the mcp scope, which is insufficient for API calls (need api or read_api).

  1. Go to your GitLab instance → Admin Area > Applications (instance-wide) or User Settings > Applications (personal)

  2. Create a new application with:

    • Confidential: unchecked

    • Scopes: api, read_api, read_user (or whichever scopes you intend to request via GITLAB_OAUTH_SCOPES)

  3. Save and copy the Application ID — this is your GITLAB_OAUTH_APP_ID

How it works:

  1. User adds your MCP server URL in Claude.ai

  2. Claude.ai discovers OAuth endpoints via /.well-known/oauth-authorization-server

  3. Claude.ai registers itself via Dynamic Client Registration (POST /register) — handled locally by the MCP server (each client gets a virtual client ID)

  4. Claude.ai redirects the user's browser to GitLab's login page using the pre-registered OAuth application

  5. User authenticates; GitLab redirects back to https://claude.ai/api/mcp/auth_callback

  6. Claude.ai sends Authorization: Bearer <token> on every MCP request

  7. Server validates the token with GitLab and stores it per session

Server setup:

docker run -d \
  -e STREAMABLE_HTTP=true \
  -e GITLAB_MCP_OAUTH=true \
  -e GITLAB_OAUTH_APP_ID="your-gitlab-oauth-app-client-id" \
  -e GITLAB_API_URL="https://gitlab.example.com/api/v4" \
  -e MCP_SERVER_URL="https://your-mcp-server.example.com" \
  -p 3002:3002 \
  zereight050/gitlab-mcp

For local development (HTTP allowed):

MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL=true \
STREAMABLE_HTTP=true \
GITLAB_MCP_OAUTH=true \
GITLAB_OAUTH_APP_ID=your-gitlab-oauth-app-client-id \
MCP_SERVER_URL=http://localhost:3002 \
GITLAB_API_URL=https://gitlab.com/api/v4 \
node build/index.js

Claude.ai configuration:

{
  "mcpServers": {
    "GitLab": {
      "url": "https://your-mcp-server.example.com/mcp"
    }
  }
}

No headers field is needed — Claude.ai obtains the token via OAuth automatically.

Environment variables:

Variable

Required

Description

GITLAB_MCP_OAUTH

Yes

Set to true to enable

GITLAB_OAUTH_APP_ID

Yes

Client ID of the pre-registered GitLab OAuth application

MCP_SERVER_URL

Yes

Public HTTPS URL of your MCP server; also allowed for /mcp Host/Origin checks

GITLAB_API_URL

Yes

Your GitLab instance API URL (e.g. https://gitlab.com/api/v4)

STREAMABLE_HTTP

Yes

Must be true (SSE is not supported)

GITLAB_OAUTH_SCOPES

No

Comma-separated GitLab scopes to request (e.g. api,read_user). Defaults to api (or read_api when the effective permission mode is readonly). The pre-registered application must be configured with at least these scopes.

OAUTH_REGISTER_RATE_LIMIT_PER_HOUR

No

Per-IP rolling limit for Dynamic Client Registration (POST /register). Default 20/hour; range 1–1000. Raise when clients (e.g. multiple IDE windows) hit registration throttling. Not a GitLab API limit.

MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL

No

Set true for local HTTP dev only

Important Notes:

  • MCP OAuth only works with Streamable HTTP transport (SSE=true is incompatible)

  • Each user session stores its own OAuth token — sessions are fully isolated

  • Session timeout, rate limiting, and capacity limits apply identically to the REMOTE_AUTHORIZATION mode (SESSION_TIMEOUT_SECONDS, MAX_REQUESTS_PER_MINUTE, MAX_SESSIONS)

  • DCR rate limiting: POST /register is limited to OAUTH_REGISTER_RATE_LIMIT_PER_HOUR per client IP (default 20/hour). Separate from /mcp limits and GitLab API quotas. See environment-variables.md.

  • Header auth fallback: when Private-Token or JOB-TOKEN request headers are present, OAuth validation is skipped and the raw token is used directly for that session. This allows PATs and CI job tokens to be used alongside the OAuth flow on the same server instance. Authorization: Bearer is always treated as an OAuth token — use Private-Token for PAT-based header auth.

Agent Skill Files

Pre-built skill files are available in skills/gitlab-mcp/ for AI agents that support skill/instruction loading (Claude Code, GitHub Copilot, Cursor, etc.).

  • SKILL.md — Core guide (~800 tokens) with toolset overview, key workflows, and parameter hints

  • reference/ — Detailed workflow docs for code review, merge requests, issues, pipelines, and vulnerability triage

Install with the skills CLI:

npx skills add zereight/gitlab-mcp --skill gitlab-mcp-skill

Register the skill directory in your AI client to get optimal tool usage guidance without relying solely on the full ListTools response.

Tools 🛠️

  1. merge_merge_request - Merge a merge request

  2. approve_merge_request - Approve a merge request

  3. unapprove_merge_request - Unapprove a merge request

  4. get_merge_request_approval_state - Get merge request approval details including approvers

  5. get_merge_request_conflicts - Get the conflicts of a merge request

  6. list_merge_request_pipelines - List pipelines for a merge request with pagination

  7. execute_graphql - Execute a GitLab GraphQL query

  8. create_or_update_file - Create or update a file in a GitLab project

  9. search_repositories - Search for GitLab projects

  10. create_repository - Create a new GitLab project

  11. create_group - Create new group or subgroup

  12. get_file_contents - Get contents of a file or directory from a GitLab project

  13. push_files - Push multiple files in a single commit

  14. create_issue - Create a new issue

  15. create_merge_request - Create a new merge request

  16. fork_repository - Fork a project to your account or specified namespace

  17. create_branch - Create a new branch

  18. get_branch - Get branch details (commit, protection status)

  19. list_branches - List branches in project with search filter

  20. delete_branch - Delete branch from project

  21. list_protected_branches - List protected branches in a project, supports search filter

  22. get_protected_branch - Get details of a single protected branch (access levels, force push settings)

  23. protect_branch - Protect a repository branch (set push/merge/unprotect access levels)

  24. unprotect_branch - Remove protection from a previously protected branch

  25. update_default_branch - Change the default branch of a project

  26. get_merge_request - Get details of a merge request (merge_request_iid or source_branch required). Set include_summaries=true for deployment/commit/approval summaries

  27. get_merge_request_diffs - Get the changes/diffs of a merge request (merge_request_iid or source_branch required)

  28. list_merge_request_changed_files - List changed file paths in a merge request without diff content (merge_request_iid or source_branch required)

  29. list_merge_request_diffs - List merge request diffs with pagination (merge_request_iid or source_branch required)

  30. get_merge_request_file_diff - Get diffs for specific files from a merge request (merge_request_iid or source_branch required)

  31. list_merge_request_versions - List all versions of a merge request

  32. get_merge_request_version - Get a specific version of a merge request

  33. get_branch_diffs - Get diffs between two branches or commits

  34. update_merge_request - Update a merge request (merge_request_iid or source_branch required)

  35. create_note - Create a new note (comment) to an issue or merge request

  36. create_merge_request_thread - Create a new thread on a merge request

  37. resolve_merge_request_thread - Resolve a thread on a merge request

  38. mr_discussions - List discussion items for a merge request

  39. get_merge_request_discussion - Get a single discussion item for a merge request

  40. delete_merge_request_discussion_note - Delete a discussion note on a merge request

  41. update_merge_request_discussion_note - Update a discussion note on a merge request

  42. create_merge_request_discussion_note - Add a new discussion note to an existing merge request thread

  43. create_merge_request_note - Add a new note to a merge request

  44. delete_merge_request_note - Delete an existing merge request note

  45. get_merge_request_note - Get a specific note for a merge request

  46. get_merge_request_notes - List notes for a merge request

  47. update_merge_request_note - Modify an existing merge request note

  48. get_draft_note - Get a single draft note from a merge request

  49. list_draft_notes - List draft notes for a merge request

  50. create_draft_note - Create a draft note for a merge request

  51. update_draft_note - Update an existing draft note

  52. delete_draft_note - Delete a draft note

  53. publish_draft_note - Publish a single draft note

  54. bulk_publish_draft_notes - Publish all draft notes for a merge request. Optionally sets reviewer_state and posts a summary note (GitLab 19.2+). Can set reviewer_state even with no drafts.

  55. list_merge_request_emoji_reactions - List all emoji reactions on a merge request

  56. list_merge_request_note_emoji_reactions - List all emoji reactions on a merge request note. Pass discussion_id for discussion thread replies.

  57. create_merge_request_emoji_reaction - Add an emoji reaction to a merge request (e.g. thumbsup, rocket, eyes)

  58. delete_merge_request_emoji_reaction - Remove an emoji reaction from a merge request

  59. create_merge_request_note_emoji_reaction - Add an emoji reaction to a merge request note. Pass discussion_id for discussion thread replies.

  60. delete_merge_request_note_emoji_reaction - Remove an emoji reaction from a merge request note. Pass discussion_id for discussion thread replies.

  61. update_issue_note - Modify an existing issue thread note

  62. create_issue_note - Add a note to an issue, optionally replying to a discussion thread

  63. list_issue_emoji_reactions - List all emoji reactions on an issue

  64. list_issue_note_emoji_reactions - List all emoji reactions on an issue note. Pass discussion_id for discussion thread replies.

  65. create_issue_emoji_reaction - Add an emoji reaction to an issue (e.g. thumbsup, rocket, eyes)

  66. delete_issue_emoji_reaction - Remove an emoji reaction from an issue

  67. create_issue_note_emoji_reaction - Add an emoji reaction to an issue note. Pass discussion_id for discussion thread replies.

  68. delete_issue_note_emoji_reaction - Remove an emoji reaction from an issue note. Pass discussion_id for discussion thread replies.

  69. list_issues - List issues (default: created by current user; use scope='all' for all)

  70. my_issues - List issues assigned to the authenticated user

  71. get_issue - Get details of a specific issue. Returns the issue with a slim nested milestone by default; set full_response=true for the complete milestone object

  72. update_issue - Update an issue. Returns a slim confirmation by default; set full_response=true for the complete updated issue object

  73. update_issue_description_patch - Apply a patch (search/replace or unified diff) to an issue description. Reduces token usage by allowing small changes without sending the full description. Supports dry_run to preview changes and create_note to summarize updates.

  74. delete_issue - Delete an issue

  75. list_todos - List GitLab to-do items for the current user

  76. mark_todo_done - Mark a GitLab to-do item as done

  77. mark_all_todos_done - Mark all pending GitLab to-do items as done for the current user

  78. list_issue_links - List all issue links for a specific issue

  79. list_issue_discussions - List discussions for an issue

  80. get_issue_link - Get a specific issue link

  81. create_issue_link - Create an issue link between two issues

  82. delete_issue_link - Delete an issue link

  83. list_namespaces - List all namespaces (users and groups) available to the current user. Filter by kind='group' for groups only.

  84. get_namespace - Get details of a namespace (user or group) by ID or path. Groups are namespaces with kind='group'.

  85. verify_namespace - Verify if a namespace path exists. Use parent_id to scope the check to a specific parent namespace — required for nested namespaces where the same path may exist under different parents.

  86. get_project - Get details of a specific project

  87. list_projects - List projects accessible by the current user

  88. update_project - Update project settings such as description, visibility, default branch, and feature access levels

  89. list_project_members - List members of a GitLab project

  90. list_group_members - List members of a GitLab group with optional name or username search

  91. list_labels - List labels for a project

  92. get_label - Get a single label from a project

  93. create_label - Create a new label in a project

  94. update_label - Update an existing label in a project

  95. delete_label - Delete a label from a project

  96. list_group_projects - List projects in a group

  97. list_wiki_pages - List wiki pages in a project

  98. get_wiki_page - Get details of a specific wiki page

  99. create_wiki_page - Create a wiki page in a project

  100. update_wiki_page - Update a wiki page in a project

  101. delete_wiki_page - Delete a wiki page from a project

  102. list_group_wiki_pages - List wiki pages in a group

  103. get_group_wiki_page - Get details of a specific group wiki page

  104. create_group_wiki_page - Create a wiki page in a group

  105. update_group_wiki_page - Update a wiki page in a group

  106. delete_group_wiki_page - Delete a wiki page from a group

  107. get_repository_tree - List files and directories in a repository

  108. list_pipelines - List pipelines with filtering options

  109. get_pipeline - Get details of a specific pipeline

  110. get_pipeline_variables - Get variables configured for a pipeline

  111. get_pipeline_test_report - Get pipeline test report

  112. get_pipeline_test_report_summary - Get pipeline test report summary

  113. delete_pipeline - Delete a pipeline. Requires the project Owner role, cannot be undone, and does not automatically delete child pipelines.

  114. update_pipeline_metadata - Update pipeline metadata

  115. list_deployments - List deployments with filtering options

  116. get_deployment - Get deployment details, including approval_summary, approvals, and pending_approval_count when GitLab provides them

  117. create_deployment - Create a deployment

  118. update_deployment - Update a deployment status

  119. delete_deployment - Delete a deployment

  120. list_deployment_merge_requests - List merge requests shipped with a deployment

  121. approve_deployment - Approve or reject a protected-environment deployment

  122. list_environments - List environments in a project

  123. get_environment - Get details of a specific environment

  124. update_environment - Update an environment

  125. delete_environment - Delete a stopped environment

  126. stop_environment - Stop an environment

  127. stop_stale_environments - Stop eligible stale environments; protected environments are excluded and environments are stopped, not deleted

  128. delete_review_app_environments - Schedule deletion of stopped review-app environments one week later; dry_run defaults to true and actual scheduling requires dry_run=false

  129. list_pipeline_triggers - List project pipeline trigger tokens

  130. get_pipeline_trigger - Get a project pipeline trigger

  131. create_pipeline_trigger - Create a project pipeline trigger

  132. update_pipeline_trigger - Update a project pipeline trigger

  133. delete_pipeline_trigger - Delete a project pipeline trigger

  134. trigger_pipeline - Trigger a pipeline with a pipeline trigger token

  135. list_pipeline_jobs - List all jobs in a specific pipeline

  136. list_pipeline_trigger_jobs - List trigger jobs (bridges) in a pipeline

  137. get_pipeline_job - Get details of a GitLab pipeline job number

  138. get_pipeline_job_output - Get the output/trace of a pipeline job with optional pagination

  139. validate_ci_lint - Validate provided GitLab CI/CD YAML content for a project

  140. validate_project_ci_lint - Validate an existing .gitlab-ci.yml configuration for a project

  141. list_ci_catalog_resources - List GitLab CI/CD Catalog resources/components visible to the user

  142. get_ci_catalog_resource - Get details for a GitLab CI/CD Catalog resource, including versions and components

  143. create_pipeline - Create a new pipeline for a branch or tag

  144. retry_pipeline - Retry a failed or canceled pipeline

  145. cancel_pipeline - Cancel a running pipeline

  146. list_pipeline_schedules - List pipeline schedules in a project, optionally filtered to active or inactive

  147. get_pipeline_schedule - Get details of a specific pipeline schedule, including its variables and last pipeline

  148. list_pipeline_schedule_pipelines - List the pipelines that a pipeline schedule has triggered

  149. create_pipeline_schedule - Create a new pipeline schedule for a branch or tag

  150. update_pipeline_schedule - Update an existing pipeline schedule

  151. delete_pipeline_schedule - Delete a pipeline schedule

  152. play_pipeline_schedule - Run a pipeline schedule immediately

  153. take_ownership_pipeline_schedule - Take ownership of a pipeline schedule

  154. get_pipeline_schedule_variable - Get a single variable of a pipeline schedule

  155. create_pipeline_schedule_variable - Create a variable for a pipeline schedule

  156. update_pipeline_schedule_variable - Update a variable of a pipeline schedule

  157. delete_pipeline_schedule_variable - Delete a variable from a pipeline schedule

  158. play_pipeline_job - Run a manual pipeline job

  159. play_pipeline_jobs - Play multiple manual pipeline jobs sequentially

  160. retry_pipeline_job - Retry a failed or canceled pipeline job

  161. cancel_pipeline_job - Cancel a running pipeline job

  162. erase_pipeline_job - Erase a pipeline job log and artifacts

  163. wait_for_pipeline - Wait for a pipeline to reach a terminal status

  164. wait_for_job - Wait for a job to reach a terminal status

  165. list_job_artifacts - List artifact files in a job's archive

  166. download_job_artifacts - Download job artifact archive (zip) and save to a local path

  167. get_job_artifact_file - Get content of a single file from a job's artifacts

  168. list_merge_requests - List merge requests (without project_id: user's MRs; with project_id: project MRs)

  169. list_group_merge_requests - List merge requests across all projects of a group and its subgroups

  170. list_milestones - List milestones with filtering options

  171. get_milestone - Get details of a specific milestone

  172. create_milestone - Create a new milestone

  173. edit_milestone - Edit an existing milestone

  174. delete_milestone - Delete a milestone

  175. get_milestone_issue - Get issues associated with a specific milestone

  176. get_milestone_merge_requests - Get merge requests associated with a specific milestone

  177. promote_milestone - Promote a milestone to the next stage

  178. get_milestone_burndown_events - Get burndown events for a specific milestone

  179. list_group_milestones - List group milestones with filtering options

  180. get_group_milestone - Get details of a specific group milestone

  181. create_group_milestone - Create a new group milestone

  182. edit_group_milestone - Edit an existing group milestone

  183. delete_group_milestone - Delete a group milestone

  184. get_group_milestone_issue - Get issues associated with a specific group milestone

  185. get_group_milestone_merge_requests - Get merge requests associated with a specific group milestone

  186. get_group_milestone_burndown_events - Get burndown events for a specific group milestone

  187. get_users - Get GitLab user details by usernames

  188. get_user - Get user details by ID

  189. whoami - Get current authenticated user details

  190. list_commits - List repository commits with filtering options

  191. get_commit - Get details of a specific commit

  192. get_commit_diff - Get changes/diffs of a specific commit

  193. get_file_blame - Get git blame for a file at a given ref. Each entry maps a contiguous range of source lines to the commit that last changed them (id, author, authored_date, message). Use range_start/range_end to limit blame to specific lines.

  194. list_commit_statuses - List statuses for a commit

  195. create_commit_status - Create or update the status of a commit

  196. list_group_iterations - List group iterations with filtering options

  197. upload_markdown - Upload a file for use in markdown content

  198. download_attachment - Download an uploaded file from a project (images returned as base64; use local_path to save to disk)

  199. health_check - Verify server status and authentication. Always reports the MCP server version (mcp_server_version). When authenticated, also reports the GitLab instance version from GET /api/v4/version (version, revision, enterprise). Version lookup failures do not fail the health check — those fields are omitted.

  200. list_events - List events for the authenticated user (before/after: YYYY-MM-DD)

  201. get_project_events - List events for a project (before/after: YYYY-MM-DD)

  202. list_releases - List all releases for a project

  203. get_release - Get a release by tag name

  204. create_release - Create a new release

  205. update_release - Update an existing release

  206. delete_release - Delete a release (does not delete the tag)

  207. create_release_evidence - Create release evidence (Premium/Ultimate)

  208. download_release_asset - Download a release asset file by direct asset path

  209. list_tags - List repository tags for a project

  210. get_tag - Get a repository tag by name

  211. create_tag - Create a new repository tag

  212. delete_tag - Delete a repository tag

  213. get_tag_signature - Get the X.509 signature of a signed tag (404 if unsigned)

  214. list_protected_tags - List protected tags in a project

  215. get_protected_tag - Get details of a single protected tag or wildcard (create access levels)

  216. protect_tag - Protect a repository tag or wildcard (set who can create it)

  217. unprotect_tag - Remove protection from a previously protected tag or wildcard

  218. get_work_item - Get a work item with full details including status, hierarchy, type, and widgets

  219. list_work_items - List work items with filters (type, state, search, assignees, labels)

  220. create_work_item - Create a work item (issue, task, incident, epic, etc.) with full field support

  221. update_work_item - Update a work item (title, description, labels, assignees, state, parent, custom fields, etc.)

  222. convert_work_item_type - Convert a work item to a different type

  223. list_work_item_statuses - List available statuses for a work item type (Premium/Ultimate)

  224. list_custom_field_definitions - List custom field definitions for a work item type

  225. move_work_item - Move a work item to a different project

  226. list_work_item_notes - List notes and discussions on a work item

  227. create_work_item_note - Add a note to a work item (supports Markdown, internal notes, threads)

  228. list_work_item_emoji_reactions - List all emoji reactions on a work item

  229. list_work_item_note_emoji_reactions - List all emoji reactions on a work item note (comment, thread, or thread reply)

  230. create_work_item_emoji_reaction - Add an emoji reaction to a work item (e.g. thumbsup, rocket, eyes)

  231. delete_work_item_emoji_reaction - Remove an emoji reaction from a work item

  232. create_work_item_note_emoji_reaction - Add an emoji reaction to a work item note (comment, thread, or thread reply)

  233. delete_work_item_note_emoji_reaction - Remove an emoji reaction from a work item note (comment, thread, or thread reply)

  234. get_timeline_events - List timeline events for an incident

  235. create_timeline_event - Create a timeline event on an incident

  236. list_webhooks - List webhooks for a project or group

  237. create_webhook - Create a webhook on a project or group

  238. update_webhook - Update an existing project or group webhook

  239. delete_webhook - Delete a project or group webhook

  240. list_webhook_events - List recent webhook events (past 7 days)

  241. get_webhook_event - Get full details of a specific webhook event

  242. search_code - Search for code across all projects (requires advanced search or Zoekt)

  243. search_project_code - Search for code within a specific project (requires advanced search or Zoekt)

  244. search_group_code - Search for code within a specific group (requires advanced search or Zoekt)

  245. list_project_variables - List CI/CD variables for a project

  246. get_project_variable - Get a single CI/CD variable from a project

  247. create_project_variable - Create a CI/CD variable for a project

  248. update_project_variable - Update an existing CI/CD variable in a project

  249. delete_project_variable - Delete a CI/CD variable from a project

  250. list_group_variables - List CI/CD variables for a group

  251. get_group_variable - Get a single CI/CD variable from a group

  252. create_group_variable - Create a CI/CD variable for a group

  253. update_group_variable - Update an existing CI/CD variable in a group

  254. delete_group_variable - Delete a CI/CD variable from a group

  255. get_dependency_proxy_settings - Get dependency proxy settings for a group

  256. update_dependency_proxy_settings - Update dependency proxy settings for a group (enable/disable, credentials for authenticated Docker Hub pulls)

  257. list_dependency_proxy_blobs - List cached dependency proxy blobs for a group

  258. purge_dependency_proxy_cache - Schedule purge of all cached dependency proxy blobs for a group

  259. list_project_vulnerabilities - List vulnerabilities for a project with optional state, severity, and report type filters (GraphQL-backed, cursor pagination)

  260. get_vulnerability - Get full details of a specific vulnerability

  261. dismiss_vulnerability - Dismiss a vulnerability with a reason (acceptable_risk, false_positive, used_in_tests, mitigating_control, not_applicable) and optional comment

  262. confirm_vulnerability - Confirm a vulnerability as a real finding requiring remediation

  263. orbit_query - Execute a GitLab Orbit graph query over the indexed SDLC knowledge graph

  264. orbit_get_schema - Fetch the current GitLab Orbit graph schema (node and edge types)

  265. orbit_get_status - Check GitLab Orbit indexing status for the enabled scope

  266. orbit_list_tools - List the MCP tool definitions exposed by GitLab Orbit

  267. list_snippets - List snippets — project snippets when project_id is given, otherwise personal snippets

  268. get_snippet - Get a snippet's metadata. Set include_content=true to also fetch the raw file content.

  269. create_snippet - Create a snippet — project-scoped when project_id is given, otherwise a personal snippet. Requires title plus either file_name + content (single file) or files[] (multi-file); the two shapes cannot be mixed.

  270. update_snippet - Update an existing snippet (provide at least one field to change). For multi-file edits — renames, deletions, additions — pass files[] with action (create/update/delete/move) and previous_path. The file_name + content shortcut still works for single-file content replacement.

  271. delete_snippet - Delete a snippet

  272. list_project_runners - List runners available to a project (type, status, paused, tag_list). Omits registration and authentication tokens.

  273. get_runner - Get a runner's tag_list, run_untagged, locked, and access_level. When a project allowlist is active, the runner must be available to an allowed project. Omits registration and authentication tokens.

  274. gitlab_api_request - Send one GitLab REST call under /api/v4. Enabled only when GITLAB_TOOLSETS lists api. Readonly allows GET; modify rejects DELETE.

  275. discover_tools - Discover and activate additional tool categories for this session. Available categories: core, merge_requests, issues, repositories, branches, projects, labels, ci, groups, pipelines, milestones, wiki, releases, tags, snippets, users, workitems, webhooks, search, variables, dependency_proxy, vulnerabilities, orbit. Already-active categories are listed in the response.

Wiki page titles vs. slugs

GitLab derives a wiki page's slug (its URL, /-/wikis/<slug>) from the page title. Passing title to update_wiki_page / update_group_wiki_page therefore renames the page and changes its URL — for nested pages it can also move the page to a different path — which breaks existing links.

To change only the displayed title while keeping the URL stable, do not pass title. Instead, store the display title in the page content's YAML front matter and update the content:

---
title: My Custom Display Title
---

Page body…

GitLab keeps the slug/URL untouched and shows the front-matter title in the UI. Read it back with get_wiki_page using render_html: true, which populates the front_matter field — the plain title field always reflects the slug-derived value.

Testing 🧪

The project includes comprehensive test coverage including remote authorization:

# Run all tests (API validation + remote auth)
npm test

# Run only remote authorization tests
npm run test:remote-auth

# Run all tests including readonly MCP tests
npm run test:all

# Run only API validation
npm run test:integration

All remote authorization tests use a mock GitLab server and do not require actual GitLab credentials.

Available Tools

39 tools
create_issueA

Create a new issue. Use this to open a new issue; use update_issue for an existing issue and create_issue_note to add discussion without changing issue fields. The operation creates remote project data, requires issue creation permission, and returns the new issue or a validation, permission, or duplicate-related error.

ParametersJSON Schema
NameRequiredDescriptionDefault
titleYesIssue title
labelsNoArray of label names
weightNoWeight of the issue (numeric, typically hours of work)
jmespathNoOptional JMESPath expression filtering the JSON result before return.
issue_typeNoThe type of issue. One of issue, incident, test_case or task.issue
project_idYesProject ID or complete URL-encoded path to project
descriptionNoIssue description
assignee_idsNoArray of user IDs to assign
milestone_idNoMilestone ID to assign

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only provide openWorldHint, so the description carries most of the behavioral disclosure burden. It clearly states the operation creates remote project data, requires issue creation permission, and returns the new issue or validation/permission/duplicate errors. This gives an agent meaningful expectations about side effects and failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded, with the primary action first and the usage alternatives following. The only minor redundancy is 'Create a new issue' followed by 'Use this to open a new issue,' but overall it is tightly written and information-dense.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having 9 parameters and no output schema, the description covers the core behavioral contract: creation, permission requirement, expected return value, and likely error categories. Optional parameters are fully covered by the schema, so nothing essential is missing for agent decision-making.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so parameters are already well-documented in the input schema. The description adds no parameter-specific semantics beyond the high-level mention of the result and error cases, which is consistent with the baseline 3 for full schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource ('Create a new issue') and immediately differentiates itself from sibling tools: update_issue for existing issues and create_issue_note for discussion-only additions. An agent can confidently select this tool without inspecting sibling schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit guidance is provided: use this tool to open a new issue, update_issue for an existing issue, and create_issue_note for adding discussion without changing issue fields. This directly answers when-to-use and when-not-to-use, with named alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_issue_noteA

Add a note to an issue, optionally replying to a discussion thread. Use this to add a note to an existing issue, optionally as a reply to a discussion; use update_issue for issue fields and create_note only when the generic endpoint is required. The operation creates remote discussion content, requires note permission, and returns the note or a missing-issue/thread/permission error.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesThe content of the note or reply
jmespathNoOptional JMESPath expression filtering the JSON result before return.
issue_iidYesThe IID of an issue
created_atNoDate the note was created at (ISO 8601 format)
project_idYesProject ID or complete URL-encoded path to project
discussion_idNoThe ID of a thread. If provided, replies to that thread; otherwise creates a top-level note

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only include openWorldHint, which is a minimal hint about side effects. The description carries the burden and discloses that the operation 'creates remote discussion content', requires note permission, and returns the note or a missing-issue/thread/permission error. This goes beyond the sparse annotation and gives the agent a clear behavioral model, including side effects, authorization, and error cases.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, but the second sentence partially repeats the first ('add a note to an existing issue, optionally as a reply to a discussion') before adding the guidance. It is still concise and front-loaded with the primary action, though the redundancy prevents a perfect score.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's moderate complexity (6 parameters, no output schema, minimal annotations), the description covers the core purpose, usage guidance, permission requirement, and error outcomes. It doesn't explain the jmespath or created_at parameters, but the schema already defines them, and the description is otherwise sufficient for an agent to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents all 6 parameters with descriptions (100% coverage). The description adds no parameter-specific detail beyond what the schema provides; the only related phrase, 'optionally replying to a discussion thread', merely restates what discussion_id already says in the schema. With full schema coverage, a baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Add a note to an issue, optionally replying to a discussion thread', which is a specific verb+resource action. It explicitly differentiates from siblings by naming update_issue for issue fields and create_note for the generic endpoint, so an agent can immediately distinguish this tool from related ones without inspecting schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides explicit when-to-use guidance: 'Use this to add a note to an existing issue, optionally as a reply to a discussion; use update_issue for issue fields and create_note only when the generic endpoint is required.' This also covers when not to use it and names the alternatives, leaving no ambiguity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_merge_requestA

Create a new merge request. Use this to open a new merge request from an existing source branch to a target branch; use update_merge_request after it exists. The operation creates remote review state, requires project access, and returns the new merge request or a validation, permission, branch, or duplicate-related error.

ParametersJSON Schema
NameRequiredDescriptionDefault
draftNoCreate as draft merge request
titleYesMerge request title
labelsNoLabels for the MR
squashNoIf true, squash all commits into a single commit on merge.
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project
descriptionNoMerge request description
assignee_idsNoThe ID of the users to assign the MR to
reviewer_idsNoThe ID of the users to assign as reviewers of the MR
source_branchYesBranch containing changes
target_branchYesBranch to merge into
target_project_idNoNumeric ID of the target project.
allow_collaborationNoAllow commits from upstream members
remove_source_branchNoFlag indicating if a merge request should remove the source branch when merging.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only include openWorldHint, so the description carries the behavioral burden. It discloses that the operation 'creates remote review state' (side effect), 'requires project access' (permission prerequisite), and describes return behavior including error categories. These are meaningful, non-obvious behavioral traits not in the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with no fluff. The purpose is front-loaded, followed by usage guidance, then behavioral context. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 14-parameter creation tool with no output schema, the description adequately covers purpose, lifecycle sequencing, side effects, permission requirements, and error outcomes. It provides enough for an agent to invoke the tool and interpret the response correctly without needing the schema for high-level semantics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description only reuses terms like 'source branch' and 'target branch' that are already explained in the schema; it adds no additional parameter-level meaning, but does not need to given full schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States the specific action ('Create a new merge request'), the resource ('merge request'), and the context (from existing source branch to target branch). Explicitly differentiates from the sibling `update_merge_request` by stating the lifecycle order, so an agent can clearly distinguish when to create vs. update.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit guidance: 'Use this to open a new merge request from an existing source branch to a target branch; use `update_merge_request` after it exists.' This gives a clear when-to-use condition and names the alternative, making tool selection unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_merge_request_threadA

Create a new thread on a merge request. Use this to start a review thread on a merge request; use create_merge_request_note for an unthreaded note and create_merge_request_discussion_note to reply to an existing thread. The operation creates remote review content, requires note permission, and returns the discussion or a position/permission/validation error.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesThe content of the thread
jmespathNoOptional JMESPath expression filtering the JSON result before return.
positionNoPosition when creating a diff note
created_atNoDate the thread was created at (ISO 8601 format)
project_idYesProject ID or complete URL-encoded path to project
merge_request_iidYesThe IID of a merge request

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations provide only openWorldHint=true, so the description carries most of the behavioral burden. It states that the operation 'creates remote review content,' requires note permission, and returns a discussion or error. This adds useful transparency about side effects and failure modes, beyond what openWorldHint implies.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each earning its place: the first states the core action, the second distinguishes siblings, and the third covers behavior and errors. No filler or redundancy; the structure front-loads the purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complex nested schema and openWorldHint annotation, the description covers purpose, alternatives, permissions, and expected return/error behavior. It does not explain how to construct a position object, but the schema covers that in depth, so the description is complete enough for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with rich descriptions on position, line_range, and required fields. The description itself adds no parameter-level meaning beyond the schema, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource: 'Create a new thread on a merge request.' It explicitly differentiates from siblings by naming create_merge_request_note for unthreaded notes and create_merge_request_discussion_note for replies, so an agent can immediately tell them apart.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use guidance: 'Use this to start a review thread' and names the exact alternatives for other cases. It also mentions the permission requirement ('requires note permission'), which is essential context for deciding whether this is the right tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

discover_tools
Read-only

Discover and activate additional tool categories for this session. Available categories: core, merge_requests, issues, repositories, branches, projects, labels, ci, groups, pipelines, milestones, wiki, releases, tags, snippets, users, workitems, webhooks, search, variables, dependency_proxy, vulnerabilities, orbit. Already-active categories are listed in the response. Explicit-only toolsets are omitted; list them in GITLAB_TOOLSETS. Use this when a needed opt-in category is not currently exposed; omit category to inspect available categories, then call it with a category to activate that group for the current session. It changes only the session's tool registry, returns the active-tool summary, and does not change GitLab data.

ParametersJSON Schema
NameRequiredDescriptionDefault
categoryNoToolset category to activate (e.g. 'pipelines', 'wiki'). Omit to list available categories.
jmespathNoOptional JMESPath expression filtering the JSON result before return.
get_branchA
Read-only

Get branch details (commit, protection status). Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project
branch_nameYesName of the branch

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=true, and the description reinforces this with 'read-only and does not mutate GitLab data'. It adds useful behavioral context beyond annotations by listing error conditions: 'missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors.'

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the purpose and usage guidance, and each sentence contributes. The final sentence is somewhat generic boilerplate about identifiers and pagination that could be trimmed, but overall it is concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers when to use, safety, errors, and identifier format. With no output schema, it gives a hint of return content ('commit, protection status') but doesn't enumerate all fields. Still, for a simple get-one-resource tool, this is sufficiently complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%; the description adds no new meaning for branch_name or jmespath. It repeats the project_id format ('numeric ID or complete URL-encoded path') that the schema already documents, so it stays at the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Get branch details (commit, protection status)'. It also distinguishes from discovery tools by stating this is for a known resource or result, making it clear which sibling tools (list_branches, search) are alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use the tool versus alternatives: 'Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources.' This removes ambiguity and routes the agent to the appropriate sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_commitA
Read-only

Get details of a specific commit. Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
shaYesThe commit hash or name of a repository branch or tag
statsNoInclude commit stats
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, and the description reinforces non-mutating behavior while adding useful error conditions: missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. This goes beyond the annotation baseline without contradicting it.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The first sentence is concise and front-loaded, and the second provides useful routing. However, the final sentence includes generic boilerplate about group_id and pagination fields that do not apply to this tool's schema, adding noise. The description is adequate but not tightly scoped to this specific tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only lookup with no output schema, the description covers the core need: what it does, when to use it, important error behaviors, and identifier requirements. The only minor gap is lack of any hint about the return value shape, but this is not necessary for such a straightforward get-by-id tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents each parameter. The description adds only a slight reinforcement of the project_id identifier format and a generic instruction to use identifiers/pagination as documented. It does not meaningfully explain sha, stats, or jmespath beyond what the schema provides, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with a precise verb and object: 'Get details of a specific commit.' It also explicitly scopes the tool to known resources/individual results and contrasts it with list or search tools for discovery, clearly distinguishing it from siblings like list_commits.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use the tool ('for a known resource or result') and when not to ('choose the corresponding list or search tool when you need to discover multiple resources'). It also provides concrete guidance on identifier formats, which helps the agent choose and populate the correct call.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_commit_diffA
Read-only

Get changes/diffs of a specific commit. Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
shaYesThe commit hash or name of a repository branch or tag
jmespathNoOptional JMESPath expression filtering the JSON result before return.
full_diffNoWhether to return the full diff or only first page (default: false)
project_idYesProject ID or complete URL-encoded path to project

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, but the description adds non-redundant behavioral details: missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. This clarifies the error contract beyond what annotations provide. It does not describe return formatting, but that is covered by schema fields like full_diff.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a few sentences long but each sentence earns its place: purpose, usage delineation, read-only/error note, parameter guidance. It is front-loaded with the primary action and then adds necessary context. Slightly verbose but not bloated; it avoids redundancy with annotations by noting error behavior instead of repeating read-only (though it does repeat read-only). Overall, well-structured and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a specific-commit diff tool with no output schema, the description covers purpose, usage boundaries, error behavior, and parameter guidance. It lacks explicit mention of the response format, but the full_diff parameter implies pagination and the diff itself is a standard git structure. Given the schema covers all parameters and annotations cover safety, this description is sufficiently complete for an agent to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds extra guidance on parameter usage: 'provide the numeric ID or complete URL-encoded path described by the schema' and 'use required identifiers and pagination fields exactly as documented'. This goes beyond the schema's basic field descriptions, clarifying the expected format and constraint that parameters must be used exactly as documented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States specific verb 'Get changes/diffs' and resource 'a specific commit'. Clearly differentiates from list/search tools by explicitly saying 'Use this for a known resource or result' and directing to 'the corresponding list or search tool' for discovery. Distinguishes from siblings like get_commit or list_merge_request_diffs without ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use (known resource) and when-not-to (discover multiple resources) guidance, and mentions error conditions. Does not name specific sibling tools but the 'corresponding list or search tool' is contextually clear. Overall, strong usage direction with only minor lack of exact sibling names.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_file_blameA
Read-only

Get git blame for a file at a given ref. Each entry maps a contiguous range of source lines to the commit that last changed them (id, author, authored_date, message). Use range_start/range_end to limit blame to specific lines.

ParametersJSON Schema
NameRequiredDescriptionDefault
refYesThe name of branch, tag or commit (required by GitLab blame API)
jmespathNoOptional JMESPath expression filtering the JSON result before return.
file_pathYesThe full path of the file to blame, relative to repo root
range_endNoLast line of the blame range (inclusive, 1-based). Both range[start] and range[end] must be set together.
project_idYesProject ID or complete URL-encoded path to project
range_startNoFirst line of the blame range (inclusive, 1-based). Both range[start] and range[end] must be set together.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the description does not need to repeat safety semantics. It adds behavior beyond the annotations by explaining the entry structure: contiguous source-line ranges map to the commit with id, author, authored_date, and message. It does not cover pagination or edge cases, but the read-only hint plus output-shape context is meaningful.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two well-structured sentences. The first front-loads the action and resource; the second communicates the return shape and the optional range limitation. Every phrase contributes information, and there is no filler or duplication of schema text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given there is no output schema, the description supplies the essential return semantics by naming the fields a caller can expect in each entry. The schema covers all parameters, and the read-only annotation covers the safety profile. Missing details such as pagination or behavior on nonexistent refs are minor for a straightforward blame call.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema itself documents all six parameters including range_start, range_end, ref, and file_path. The description adds only a light hint that range_start/range_end limit the blame to specific lines, which is useful but does not materially go beyond the schema. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Get git blame for a file at a given ref.' This clearly separates it from read-content tools like get_file_contents and commit-history tools like get_commit-repository. It also states the central output concept (line ranges mapped to commits), removing ambiguity about what GitLab blame returns.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear operational context: run blame at a specific ref dat and optionally constrain the result to a range of lines with range_start/range_end. It does not explicitly name sibling alternatives or say when not to use this tool, but 'git blame' is a distinct enough operation that the usage context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_file_contentsA
Read-only

Get contents of a file or directory from a GitLab project. Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
refNoBranch/tag/commit to get contents from
pathNoAlias of file_path
jmespathNoOptional JMESPath expression filtering the JSON result before return.
file_pathNoPath to the file or directory. Takes precedence over 'path' when both are provided
project_idNoProject ID or URL-encoded path (optional; falls back to env)

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description reinforces this while adding useful behavior: missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. This is valuable context beyond the structured annotations, though it partially duplicates the read-only hint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with the core purpose and usage guidance front-loaded. The description is efficient, but some boilerplate like 'exactly as documented' and the duplication of the readOnlyHint annotation keep it just short of perfect conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only fetch tool with no required parameters and no output schema, the description covers selection criteria, error behavior, and identifier formatting. It leaves the exact shape of file versus directory output somewhat implicit, but the name and first sentence convey the core return type adequately.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all parameters and the baseline is 3. The description adds little beyond that, mostly reiterating identifier-format guidance already present in the schema and mentioning group_id even though it is not a schema parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific action ('Get contents of a file or directory') with a clear resource scope ('from a GitLab project'). It also distinguishes itself from list/search siblings by positioning itself as the tool for a known resource or result rather than discovery.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to use this tool for a known resource/result and to choose the corresponding list or search tool when discovering multiple resources. This gives a usable decision rule for tool selection without leaving the agent to infer when this tool applies.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_issue
Read-only

Get details of a specific issue. Returns the issue with a slim nested milestone by default; set full_response=true for the complete milestone object. Use this for issue management: inspect one issue's fields; use list_issues or my_issues to discover issues first. It is read-only, requires issue read permission, and returns the issue or an error when the identifier is invalid, the issue is missing, or access is denied.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.
issue_iidYesThe internal ID of the project issue
project_idYesProject ID or URL-encoded path
full_responseNoIf true, include the complete milestone object, including its description, on the returned issue. Default returns the issue with a slim milestone (id, iid, title, state, web_url) to reduce token usage.
get_merge_request
Read-only

Get details of a merge request (merge_request_iid or source_branch required). Set include_summaries=true for deployment/commit/approval summaries. Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project
source_branchNoSource branch name
include_summariesNoIf true, include deployment_summary, commit_addition_summary and approval_summary (extra API calls, larger response). Default false to reduce token usage.
merge_request_iidNoThe IID of a merge request
get_merge_request_approval_stateA
Read-only

Get merge request approval details including approvers. Use this to inspect approval rules and approvers before deciding whether a merge request can be merged; use approve_merge_request to change approval state. It is read-only and returns the approval-state response, while missing requests, unsupported GitLab versions, and permission failures are reported as errors.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project
merge_request_iidYesThe IID of the merge request

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations provide readOnlyHint=true, and the description reinforces this by saying 'It is read-only.' It adds useful behavioral detail by listing error conditions: missing requests, unsupported GitLab versions, and permission failures are reported as errors. It does not describe the full shape of the approval-state response, but the error disclosure is meaningful beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no filler. It front-loads the core purpose, then provides usage guidance, safety confirmation, and error behavior in a compact, well-ordered way. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only retrieval tool with rich annotations and complete schema coverage, the description covers purpose, usage, safety, and error conditions. The only minor gap is that it does not describe the specific fields contained in the 'approval-state response,' which would be more important if no output schema existed. Still, the essential context for correct selection and invocation is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all three parameters. The description adds no additional parameter-specific meaning, such as how project_id is resolved or how jmespath interacts with the result. Baseline 3 is appropriate because the schema carries the parameter documentation burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb-resource relationship: 'Get merge request approval details including approvers.' It also names the inspection purpose ('inspect approval rules and approvers before deciding whether a merge request can be merged'), which distinguishes it from sibling tools like approve_merge_request and unapprove_merge_request.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly tells the agent when to use this tool ('before deciding whether a merge request can be merged') and points to the alternative for changing state ('use `approve_merge_request` to change approval state'). This is direct, actionable guidance with no ambiguity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_merge_request_diffs
Read-only

Get the changes/diffs of a merge request (merge_request_iid or source_branch required). Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
viewNoDiff view type
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project
source_branchNoSource branch name
merge_request_iidNoThe IID of a merge request
excluded_file_patternsNoArray of regex patterns to exclude files from the diff results. Each pattern is a JavaScript-compatible regular expression that matches file paths to ignore. Examples: ["^vendor/", "^test/mocks/", "\.spec\.ts$", "package-lock\.json"]
get_merge_request_discussionA
Read-only

Get a single discussion item for a merge request. Use this to fetch one known merge request discussion by discussion identifier; use mr_discussions for a collection and get_merge_request_note for a flat note. It is read-only and returns the discussion item or an error for an invalid identifier, missing discussion, or insufficient permission.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project
discussion_idYesThe ID of a thread
merge_request_iidYesThe IID of a merge request

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already covers safety, and the description reinforces it with 'It is read-only.' It also adds behavioral context beyond annotations by describing the outcome: returns the discussion item or an error for invalid identifier, missing discussion, or insufficient permission.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the core purpose, then adds targeted usage and behavior information. Every sentence earns its place with no filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-discussion read tool with three required identifiers and a fully documented schema, the description covers selection, alternatives, return behavior, and error conditions. Nothing essential for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all four parameters. The description adds little beyond restating that a discussion is fetched by identifier, so it provides no meaningful extra parameter meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Get a single discussion item for a merge request.' It also explicitly distinguishes itself from siblings by naming `mr_discussions` for collections and `get_merge_request_note` for flat notes, so an agent can clearly tell this tool apart.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use guidance: fetch one known discussion by discussion identifier. It names the exact alternatives for collection and flat note use cases, leaving no ambiguity about which sibling tool to choose.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_merge_request_file_diff
Read-only

Get diffs for specific files from a merge request (merge_request_iid or source_branch required). Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
unidiffNoPresent diff in the unified diff format. Default is false.
jmespathNoOptional JMESPath expression filtering the JSON result before return.
file_pathsYesList of file paths to retrieve diffs for (e.g. ['src/api/users.ts', 'src/repo/user.go']). Call list_merge_request_changed_files first to get the full list of changed paths.
project_idYesProject ID or complete URL-encoded path to project
source_branchNoSource branch name
merge_request_iidNoThe IID of a merge request
get_merge_request_noteA
Read-only

Get a specific note for a merge request. Use this to fetch one known merge request note by note identifier; use get_merge_request_notes for a collection and mr_discussions for threaded context. It is read-only and returns the note object or an error for an invalid identifier, missing note, or insufficient permission.

ParametersJSON Schema
NameRequiredDescriptionDefault
note_idYesThe ID of a thread note
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project
merge_request_iidYesThe IID of a merge request

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description reinforces this by saying 'It is read-only.' It adds useful behavior beyond the annotation: it returns the note object or an error for invalid identifier, missing note, or insufficient permission. This helps set expectations without contradicting the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no filler. The primary action is front-loaded, and the usage guidance and behavioral expectations are packed efficiently into the second sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-object read tool with no output schema, the description is complete: it states the resource, the lookup key, the read-only nature, the return value, likely error conditions, and relevant alternatives. No additional context is needed for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the parameters are already documented in the input schema. The description adds little beyond identifying note_id as the identifier to use, but it does not provide additional semantics or format details beyond what the schema already contains.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource: 'Get a specific note for a merge request.' It clearly differentiates this tool from get_merge_request_notes and mr_discussions by scope (single known note vs collection vs threaded context).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use this tool ('fetch one known merge request note by note identifier') and directly names the alternatives ('use get_merge_request_notes for a collection and mr_discussions for threaded context'). This gives an agent clear routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_merge_request_notesA
Read-only

List notes for a merge request. Use this to list flat notes on a merge request; use mr_discussions when thread structure and resolution state are required. It is read-only and returns note records, while invalid identifiers, missing resources, and pagination or permission errors are reported by GitLab.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination
sortNoThe sort order of the notes
jmespathNoOptional JMESPath expression filtering the JSON result before return.
order_byNoThe field to sort the notes by
per_pageNoNumber of items per page
project_idYesProject ID or complete URL-encoded path to project
merge_request_iidYesThe IID of a merge request

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description reinforces this with 'It is read-only.' It adds useful behavioral context beyond annotations by specifying that the tool returns note records and that GitLab reports invalid identifiers, missing resources, pagination, and permission errors. This helps set error-handling expectations, though it does not detail response shapes or pagination behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with no filler. The core action is front-loaded, the sibling distinction follows immediately, and the behavioral/error note is concise. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is complete for tool selection and invocation: it states behavior, scope, the key sibling alternative, and error reporting. With no output schema, saying it 'returns note records' is a minimal but sufficient return-value hint. It could mention that results are flat and how pagination manifests, but this is a minor gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the parameters are already documented in the schema. The description adds no parameter-specific meaning (e.g., how `sort` or `order_by` interact, or what `jmespath` filters). Baseline 3 is appropriate because the schema carries the full parameter-semantics burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('List notes for a merge request') and immediately differentiates from the sibling tool `mr_discussions` by characterizing itself as returning flat notes. This makes the tool's scope unmistakable and distinct from discussion-thread operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use this tool vs. an alternative: 'use mr_discussions when thread structure and resolution state are required.' This gives the agent a clear decision rule and excludes the overlapping sibling, leaving no ambiguity about selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_projectA
Read-only

Get details of a specific project. Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or URL-encoded path

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare readOnlyHint=true, and the description reinforces this by stating the operation does not mutate GitLab data. It adds useful behavioral context by enumerating error conditions: missing resources, invalid identifiers, insufficient permission, and rate limits. This is meaningful added value beyond the structured annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is appropriately sized and front-loaded with the core purpose. The final sentence about identifiers and pagination fields is somewhat boilerplate and adds limited value, but overall the structure is clear and readable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-resource retrieval tool with read-only annotations, the description covers the core behavior, the intended invocation context, error outcomes, and identifier requirements. Nothing critical is missing for an agent to select and invoke this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both project_id and jmespath. The description mostly restates the project identifier guidance ('numeric ID or complete URL-encoded path') that the schema already provides, offering little additional semantic value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies a specific verb ('Get details') and resource ('a specific project'), and explicitly contrasts itself with list/search tools for discovering multiple resources. This makes it easy to distinguish from siblings like list_projects or search_repositories.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says to use this tool for a known resource or result and to choose a list or search tool when discovering multiple resources. The guidance is clear, though it refers to 'the corresponding list or search tool' generically rather than naming exact sibling alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_repository_treeA
Read-only

List files and directories in a repository. Use this for a known resource or result; choose the corresponding list or search tool when you need to discover multiple resources. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
refNoThe name of a repository branch or tag. Defaults to the default branch.
pathNoThe path inside the repository
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of results to show per page
recursiveNoBoolean value to get a recursive tree
page_tokenNoToken for keyset pagination. Use the next_page_token value returned in the previous response to retrieve the next page.
paginationNoPagination method. Use 'keyset' for keyset-based pagination (required for repositories with many files). Non-keyset calls keep the legacy array response for backward compatibility; that legacy response shape is deprecated and may be removed in a future major release. Keyset calls return a structured response with items and next_page_token when more pages are available.
project_idYesThe ID or URL-encoded path of the project

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint and openWorldHint, lowering the bar. The description adds valuable context by confirming no mutation and enumerating error conditions (missing resources, invalid identifiers, insufficient permission, rate limits), which goes beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is four sentences, each serving a distinct purpose: action, usage guidance, behavioral transparency, and parameter handling. It is front-loaded with the primary purpose and contains no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 8 parameters, 100% schema coverage, annotations, and no output schema, the description adequately covers purpose, usage, safety, and error behavior. Minor gaps: the unsupported reference to group_id could confuse, and it does not explicitly describe the return structure, but the schema and clear purpose compensate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all parameters; the description only reinforces how to provide project_id/path and pagination. The mention of 'group_id' is extraneous since it is not in this schema, but it does not materially harm parameter understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action and resource: 'List files and directories in a repository.' It also differentiates from discovery-focused siblings by advising to use other list or search tools when discovering multiple resources, making the tool's niche clear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says to use this tool for a known resource or result and to choose 'the corresponding list or search tool' when discovery is needed. It also instructs to use required identifiers and pagination fields exactly as documented, giving actionable usage direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

health_check
Read-only

Verify server status and authentication. Always reports the MCP server version (mcp_server_version). When authenticated, also reports the GitLab instance version from GET /api/v4/version (version, revision, enterprise). Version lookup failures do not fail the health check — those fields are omitted. Use this to verify server connectivity and authentication before making GitLab requests; use whoami when the authenticated user's identity is the goal. A 403 from GET /user with an insufficient_scope error means the token is accepted but User API scope is missing (read_user or fine-grained User:Read); the check stays ok, sets user_api_warning, and omits version metadata. Rate-limit and authentication-ban 403 responses stay unauthenticated. It does not mutate GitLab state and returns server/authentication status plus GitLab version details when available. Connection failures with no HTTP response return status error, authenticated false, and an error object (kind tls, dns, timeout, or network, plus code and message) instead of a protocol error.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.
list_branchesA
Read-only

List branches in project with search filter. Use this for a collection of resources; choose the corresponding get tool when you already know the single resource to inspect. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
searchNoSearch term to filter branches by name
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (max: 100, default: 20)
project_idYesProject ID or complete URL-encoded path to project

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, so the description's read-only claim adds limited value. However, it goes beyond annotations by disclosing that missing resources, invalid identifiers, insufficient permission, and rate limits surface as errors, which helps an agent anticipate failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose is front-loaded in the first sentence, and the usage guidance follows immediately. The final sentence about 'project_id or group_id' is a bit generic and slightly redundant with the schema, keeping it from a perfect score.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers what the tool does, when to use it, error behavior, and parameter identification guidance, which is sufficient for a simple list operation. There is no output schema, but for a branch-listing tool this is not a serious gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema carries the parameter documentation burden. The description adds some guidance about project_id being a numeric ID or URL-encoded path and reminds about pagination, but this is largely restating or slightly genericizing the schema content.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific action ('List branches in project') and a distinguishing detail ('with search filter'), and explicitly contrasts with the corresponding get tool for single resources. This makes it easy to tell apart from sibling tools like get_branch and list_protected_branches.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use guidance: use for a collection of resources, and choose the get tool when the single resource is already known. It also clarifies read-only behavior and error conditions, leaving little room for agent misselection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_commitsA
Read-only

List repository commits with filtering options. Use this for a collection of resources; choose the corresponding get tool when you already know the single resource to inspect. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
allNoRetrieve every commit from the repository
pageNoPage number for pagination (default: 1)
pathNoThe file path
orderNoList commits in order
sinceNoOnly commits after or on this date are returned in ISO 8601 format YYYY-MM-DDTHH:MM:SSZ
untilNoOnly commits before or on this date are returned in ISO 8601 format YYYY-MM-DDTHH:MM:SSZ
authorNoSearch commits by commit author
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (max: 100, default: 20)
ref_nameNoThe name of a repository branch, tag or revision range, or if not given the default branch
trailersNoParse and include Git trailers for every commit
project_idYesProject ID or complete URL-encoded path to project
with_statsNoStats about each commit are added to the response
first_parentNoFollow only the first parent commit upon seeing a merge commit

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description goes beyond that by enumerating failure modes (missing resources, invalid identifiers, insufficient permission, and rate limits returned as errors). It does not describe response shape or pagination internals, but the added error behavior is meaningful.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences are front-loaded with the core action and usage rule, then safety and error details. The last sentence is slightly redundant ('described by the schema' and 'exactly as documented') but the overall length is tight and focused.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers purpose, usage boundary, read-only safety, error behavior, and identifier/pagination care, which is enough for a list operation without an output schema. The group_id reference is a flaw, and the description does not explain filter interactions, leaving minor gaps for a 14-parameter tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already covers all 14 parameters, so the bar for added meaning is modest. However, the description's identifier guidance mostly repeats the schema, and its claim that 'project_id or group_id is accepted' is not supported by the schema, which lists only project_id. This makes the parameter guidance partially misleading.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'List repository commits with filtering options.' It explicitly positions this tool as the collection-level operation and distinguishes it from the corresponding get tool for a single resource, so an agent can tell it apart from get_commit and similar siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Directly says when to use this tool ('Use this for a collection of resources') and when to choose an alternative ('choose the corresponding get tool when you already know the single resource to inspect'). It also adds operational context: read-only behavior, error conditions, and identifier/pagination care.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_issue_discussionsA
Read-only

List discussions for an issue. Use this to inspect threaded discussions for an issue; use list_issues for issue records and get_issue for one issue's fields. It is read-only and returns discussion items, while invalid identifiers, missing issues, and permission failures are reported as errors.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (max: 100, default: 20)
issue_iidYesThe internal ID of the project issue
project_idYesProject ID or URL-encoded path

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description states it is read-only (matching readOnlyHint=true) and adds error behavior: invalid identifiers, missing issues, and permission failures are reported as errors. It also says it returns discussion items. While annotations already cover the read-only safety profile, the error reporting adds value beyond annotations. It doesn't contradict annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no filler. The core purpose is front-loaded, and the sibling differentiation and error behavior are compactly included. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers purpose, usage, and error behavior, and the schema covers parameters and pagination. It does not describe the exact structure of returned discussion items, but for a list tool with no output schema, this is a minor gap. The tool is adequately specified for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all five parameters are already fully documented in the schema. The description adds no extra parameter-level detail, but given the complete schema, the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (list discussions) and the target (an issue), and explicitly differentiates it from `list_issues` and `get_issue`, so an agent can immediately tell what this tool does and how it differs from close siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage guidance: use this to inspect threaded discussions, use `list_issues` for issue records, and `get_issue` for single issue fields. This provides both when-to-use and when-not-to-use with named alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_issuesA
Read-only

List issues (default: created by current user; use scope='all' for all). Use this for issue management: list GitLab issues, optionally scoped with project_id. Use get_issue when the issue iid is already known and my_issues for issues assigned to the current user. It is read-only and paginated, requires issue read permission, and returns issue records or GitLab errors for invalid identifiers, missing resources, or rate limits.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
scopeNoReturn issues from a specific scope
stateNoReturn issues with a specific state
labelsNoArray of label names
searchNoSearch for specific terms
due_dateNoReturn issues that have the due date
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (max: 100, default: 20)
author_idNoReturn issues created by the given user ID. Mutually exclusive with author_username.
milestoneNoMilestone title
issue_typeNoFilter to a given type of issue. One of issue, incident, test_case or task
project_idNoProject ID or URL-encoded path (optional - if not provided, lists issues across all accessible projects)
assignee_idNoReturn issues assigned to the given user ID (user id, none, or any). Mutually exclusive with assignee_username.
confidentialNoFilter confidential or public issues
iteration_idNoReturn issues assigned to the given iteration ID. None returns issues that do not belong to an iteration. Any returns issues that belong to an iteration.
created_afterNoReturn issues created after the given time
updated_afterNoReturn issues updated after the given time
created_beforeNoReturn issues created before the given time
updated_beforeNoReturn issues updated before the given time
author_usernameNoReturn issues created by the given username. Mutually exclusive with author_id.
assignee_usernameNoReturn issues assigned to the given username. Mutually exclusive with assignee_id.
with_labels_detailsNoReturn more details for each label

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Even though annotations already mark readOnlyHint=true, the description adds meaningful behavioral context: it is paginated, requires issue read permission, and returns issue records or GitLab errors for invalid identifiers, missing resources, or rate limits. This goes beyond the annotation and helps the agent anticipate failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences with no wasted words. It front-loads the core purpose, immediately covers the default behavior, then adds alternative routing and safety/error context in a tight structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 22-parameter tool with no output schema, the description covers the essential context: what it lists, how scope works, when to use siblings, pagination, permissions, and expected return/error behavior. The rich schema fills in the remaining parameter details, so nothing critical is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and every parameter already has a meaningful description. The tool description adds only light semantic value by mentioning the default scope and optional project_id filtering, but it does not need to explain the many other parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific verb and resource: 'List issues' and 'list GitLab issues, optionally scoped with project_id'. It also gives the default scope and explicitly distinguishes itself from get_issue and my_issues, so an agent can confidently select it over sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage guidance is explicit: it says to use get_issue when the issue iid is already known and my_issues for issues assigned to the current user. It also clarifies the default behavior (created by current user) and how to broaden it with scope='all'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_labelsA
Read-only

List labels for a project. Use this for a collection of resources; choose the corresponding get tool when you already know the single resource to inspect. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
searchNoKeyword to filter labels by
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (max: 100, default: 20)
project_idYesProject ID or URL-encoded path
with_countsNoWhether to include issue and merge request counts
include_ancestor_groupsNoInclude ancestor groups

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds that the tool is read-only and does not mutate GitLab data, which aligns with readOnlyHint=true. It goes beyond annotations by disclosing that missing resources, invalid identifiers, insufficient permission, and rate limits are surfaced as errors, which is useful behavioral context. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the purpose and usage guidance, but the third sentence mixes generic identifier advice with pagination and includes a conditional about group_id that does not apply to this schema. It is relatively concise but could be tightened by removing the irrelevant group_id clause.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool is a simple read-only list with all parameters documented in schema, the description covers the key distinctions and error behavior. It doesn't describe the return format, but for a list tool that may be acceptable. The advice about projection and pagination is present, so an agent has enough to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

All 7 parameters already have descriptions in the schema (100% coverage), so the description's role is supplementary. It reiterates that project_id accepts a numeric ID or URL-encoded path (already in schema) and advises using pagination fields as documented, adding little new meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names the action ('List labels') and the resource ('for a project'), which is specific. It also distinguishes this collection-oriented tool from the get tool for single resources, differentiating it from siblings like get_label. The mention of group_id is slightly tangential because the schema only accepts project_id.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly states when to use this tool ('for a collection of resources') and when to choose the alternative ('when you already know the single resource to inspect'). This is direct usage guidance versus siblings. It also instructs to use required identifiers and pagination fields as documented, reinforcing correct invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_merge_request_changed_files
Read-only

List changed file paths in a merge request without diff content (merge_request_iid or source_branch required). Use this for a collection of resources; choose the corresponding get tool when you already know the single resource to inspect. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project
source_branchNoSource branch name
merge_request_iidNoThe IID of a merge request
excluded_file_patternsNoArray of regex patterns to exclude files. Examples: ["^vendor/", "\.pb\.go$"]
list_merge_request_diffs
Read-only

List merge request diffs with pagination (merge_request_iid or source_branch required). Use this for a collection of resources; choose the corresponding get tool when you already know the single resource to inspect. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
unidiffNoPresent diffs in the unified diff format. Default is false. Introduced in GitLab 16.5.
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (max: 100, default: 20)
project_idYesProject ID or complete URL-encoded path to project
source_branchNoSource branch name
merge_request_iidNoThe IID of a merge request
list_merge_requestsA
Read-only

List merge requests (without project_id: user's MRs; with project_id: project MRs). Use this for a collection of resources; choose the corresponding get tool when you already know the single resource to inspect. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
wipNoFilter merge requests against their wip status
pageNoPage number for pagination (default: 1)
sortNoReturn merge requests sorted in ascending or descending order
scopeNoReturn merge requests from a specific scope
stateNoReturn merge requests with a specific state
labelsNoArray of label names
searchNoSearch for specific terms
jmespathNoOptional JMESPath expression filtering the JSON result before return.
order_byNoReturn merge requests ordered by the given field
per_pageNoNumber of items per page (max: 100, default: 20)
author_idNoReturns merge requests created by the given user ID (integer). Mutually exclusive with author_username.
milestoneNoMilestone title
project_idNoProject ID or URL-encoded path (optional - if not provided, lists all merge requests the user has access to)
assignee_idNoReturn MRs assigned to the given user ID (integer), 'none', or 'any'. Mutually exclusive with assignee_username.
reviewer_idNoReturns merge requests which have the user as a reviewer. Must be an integer, 'none', or 'any'. Mutually exclusive with reviewer_username.
created_afterNoReturn merge requests created after the given time
source_branchNoReturn merge requests from a specific source branch
target_branchNoReturn merge requests targeting a specific branch
updated_afterNoReturn merge requests updated after the given time
created_beforeNoReturn merge requests created before the given time
updated_beforeNoReturn merge requests updated before the given time
author_usernameNoReturns merge requests created by the given username. Mutually exclusive with author_id.
assignee_usernameNoReturns merge requests assigned to the given username. Mutually exclusive with assignee_id.
reviewer_usernameNoReturns merge requests which have the user as a reviewer by username. Mutually exclusive with reviewer_id.
with_labels_detailsNoReturn more details for each label
approved_by_usernamesNoReturns merge requests approved by the given usernames (array).

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The read-only claim repeats what readOnlyHint already provides. The description does add some behavioral context by stating that missing resources, invalid identifiers, insufficient permissions, and rate limits are returned as errors, and by calling out pagination fields. However, these are generic API behaviors and no unexpected effects are disclosed beyond that; the added value over the annotations is modest.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is reasonably organized, leading with the main purpose and then giving usage context. However, the read-only sentence largely duplicates the existing annotation, and the closing instruction about identifiers and pagination is vague filler. The group_id mention also creates confusion without adding useful structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 26 documented parameters, full schema coverage, and no required parameters, the schema does most of the heavy lifting. The description covers the key decision point (project_id vs no project_id) and general error behavior, but it does not describe the return shape, which matters here because there is no output schema. It also omits any mention of the list_group_merge_requests alternative, so the overall context is adequate but not complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3 because the schema already documents all 26 parameters. The description adds only a high-level explanation of project_id's optional role and a generic instruction to follow documented identifiers and pagination fields. The mention of 'group_id' is misleading because group_id is not in the schema, slightly reducing the semantic value of the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: listing merge requests, with behavior depending on presence or absence of project_id. It also distinguishes this from single-resource 'get' tools via the collection-vs-single framing. However, it does not explicitly distinguish itself from the closely related sibling list_group_merge_requests, and the mention of group_id is confusing since group_id is not in the input schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives practical guidance: use this for a collection of resources and use the corresponding get tool when a single resource is already known. It also explains the project_id vs no-project_id scoping. It stops short of naming the specific alternative tool (get_merge_request) or addressing when list_group_merge_requests should be chosen, so guidance is good but not fully explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_project_membersA
Read-only

List members of a GitLab project. Use this for a collection of resources; choose the corresponding get tool when you already know the single resource to inspect. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
queryNoSearch for members by name or username
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (default: 20, max: 100)
user_idsNoFilter by user IDs
project_idYesProject ID or URL-encoded path
skip_usersNoUser IDs to exclude
include_inheritanceNoInclude inherited members. Defaults to false.

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare readOnlyHint=true, and the description reinforces the read-only/non-mutating nature. It adds useful behavioral context beyond the annotations by stating that missing resources, invalid identifiers, insufficient permission, and rate limits are surfaced as errors. No contradiction with annotations exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and usage guidance are front-loaded in three sentences, and the text avoids parameter-by-parameter repetition. The final sentence is somewhat generic ('exactly as documented') and the group_id mention adds slight noise, preventing a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 8 parameters and no output schema, the description supplies the safety profile, error behavior, and identifier formatting guidance while leaving field details to the high-coverage schema. The stray group_id reference and the unnamed single-resource alternative leave a small completeness gap, but the tool remains safely invocable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the description is not required to document each parameter and adds little beyond the schema. The identifier guidance largely restates the schema's project_id description, and the reference to group_id is potentially misleading because this schema only accepts project_id.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with 'List members of a GitLab project', a specific verb+resource statement that clearly states what the tool does. The collection-vs-single-resource contrast further distinguishes it from the get_* siblings before the schema is even considered.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use guidance: use it for a collection and prefer a get tool when a single resource is already known. However, the alternative is only named generically ('the corresponding get tool'), and it does not explicitly contrast this tool with the sibling list_group_members.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_projectsA
Read-only

List projects accessible by the current user. Use this for a collection of resources; choose the corresponding get tool when you already know the single resource to inspect. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
sortNoReturn projects sorted in ascending or descending order
ownedNoFilter for projects owned by current user
topicNoFilter by topic (projects tagged with this topic)
searchNoSearch term for projects
simpleNoReturn only limited fields
archivedNoFilter for archived projects
jmespathNoOptional JMESPath expression filtering the JSON result before return.
order_byNoReturn projects ordered by field
per_pageNoNumber of items per page (max: 100, default: 20)
membershipNoFilter for projects where current user is a member
visibilityNoFilter by project visibility
min_access_levelNoFilter by minimum access level
search_namespacesNoNeeds to be true if search is full path
with_issues_enabledNoFilter projects with issues feature enabled
with_merge_requests_enabledNoFilter projects with merge requests feature enabled

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description explicitly states it is read-only and does not mutate GitLab data, and enumerates error conditions: missing resources, invalid identifiers, insufficient permission, and rate limits. While annotations already convey readOnlyHint, the description adds concrete error semantics, which is valuable for an agent deciding how to handle failures.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with no filler. The core action, scope, usage guidance, safety note, and error behavior are all conveyed efficiently, with the most important information front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is complete enough for a list tool: it covers scope, read-only behavior, error semantics, and points to the schema for identifiers and pagination. It does not describe the return shape, but given no output schema and the obvious meaning of 'list projects,' the omission is minor.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3 even without additional parameter details in the description. The description's mention of project_id/group_id and URL-encoded paths is generic and not directly applicable to this tool's actual schema, so it adds little beyond the structured parameter descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb and resource: 'List projects accessible by the current user.' It also distinguishes the collection-oriented purpose from a single-resource get tool, saying to choose the 'corresponding get tool when you already know the single resource.' This makes the tool's intent unambiguous and separates it from siblings like get_project.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides clear context: use for a collection of resources, and choose a get tool for a known single resource. It also instructs to use required identifiers and pagination fields as documented. However, it does not explicitly differentiate when to use this over the sibling list_group_projects, so the guidance is good but not fully exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mr_discussionsA
Read-only

List discussion items for a merge request. Use this to list complete discussion threads for a merge request; use get_merge_request_notes when only flat notes are needed. It is read-only and returns threaded discussion items, while invalid merge request identifiers, missing resources, and permission failures are reported as errors.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (max: 100, default: 20)
project_idYesProject ID or complete URL-encoded path to project
merge_request_iidYesThe IID of a merge request

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description reinforces this while adding valuable context: it returns threaded discussion items and reports invalid IDs, missing resources, and permission failures as errors. This goes beyond the structured annotations and helps the agent anticipate failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and front-loads the core purpose, then adds usage guidance and behavioral context. There is minor redundancy between 'List discussion items' and 'list complete discussion threads,' but overall each sentence contributes useful information without excessive length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only list tool with a well-covered schema and no output schema, the description provides enough context: what it returns, when to use an alternative, and how errors surface. It does not describe response shape, but that is not required here given the tool's simplicity and the absence of side effects.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already has 100% description coverage for all five parameters, so the baseline is 3. The description does not add parameter-specific meaning beyond its general references to merge requests, but it also does not need to since the schema fully documents each parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb and resource: 'List discussion items for a merge request' and specifies that it returns 'complete discussion threads.' It distinguishes itself from the sibling tool `get_merge_request_notes` by contrasting flat notes with threaded discussions, making the purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly provides usage guidance: use this tool for complete discussion threads and use `get_merge_request_notes` when only flat notes are needed. This gives an agent a clear decision rule between two closely related tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

my_issues
Read-only

List issues assigned to the authenticated user. Use this for issue management: list issues assigned to the authenticated user. Use list_issues for project-wide or author-scoped listing and get_issue for one issue. Resolving the current user requires classic read_user or fine-grained User:Read. It is read-only and paginated, requires authentication, and returns assigned issue records or permission/rate-limit errors.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
stateNoReturn issues with a specific state (default: opened)
labelsNoArray of label names to filter by
searchNoSearch for specific terms in title and description
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (default: 20, max: 100)
milestoneNoMilestone title to filter by
project_idNoProject ID or URL-encoded path (optional to search across all accessible projects)
created_afterNoReturn issues created after the given time (ISO 8601)
updated_afterNoReturn issues updated after the given time (ISO 8601)
created_beforeNoReturn issues created before the given time (ISO 8601)
updated_beforeNoReturn issues updated before the given time (ISO 8601)
resolve_merge_request_threadA

Resolve a thread on a merge request. Use this to mark an existing merge request review thread resolved; use update_merge_request_discussion_note when the note text itself must change. The operation changes review state, requires permission to resolve discussions, and returns the updated discussion or a missing-thread/permission error.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.
resolvedYesWhether to resolve the thread
project_idYesProject ID or complete URL-encoded path to project
discussion_idYesThe ID of a thread
merge_request_iidYesThe IID of a merge request

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations provide only openWorldHint=true, so the description carries the burden. It clearly states the operation changes review state, requires permission to resolve discussions, and returns the updated discussion or a missing-thread/permission error. This discloses side effects, authorization needs, and failure modes. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, purpose first, then usage distinctioncomm and behavior/error summary. Every clause is informative with no filler. Front-loaded with the action and resource.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schemacorpor, the description explains the return value and error cases. It covers purpose, usage boundaries, permissions, state-change impact, and failure modes. Required parameters are all schema-documented, and optional jmespath needs no special explanation. Highly complete for a tool of this complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds general context (review thread, state change) but does not add parameter-level semantics beyond what the schema already provides for project_id, merge_request_iid, discussion_id, or resolved. It is adequate but not compensatory.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action (resolve), a precise resource (existing merge request review thread), and immediately distinguishes it from the sibling update_merge_request_discussion_note. An agent can tell exactly what this tool does without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use this tool (to mark a thread resolved) and when to use the alternative update_merge_request_discussion_note (when note text must change). This is direct when-to-use and when-not-to-use guidance, naming the exact sibling tool. No inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_repositoriesA
Read-only

Search for GitLab projects. Use this to discover matching content; choose a typed get or list tool when the target identifier is already known. It is read-only and does not mutate GitLab data; missing resources, invalid identifiers, insufficient permission, and rate limits are returned as errors. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number for pagination (default: 1)
queryNoSearch query (alias for 'search')
searchNoSearch query
jmespathNoOptional JMESPath expression filtering the JSON result before return.
per_pageNoNumber of items per page (max: 100, default: 20)

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint=true and openWorldHint=true, so the bar is lower. The description adds useful behavioral detail: it is read-only, does not mutate GitLab data, and returns errors for missing resources, invalid identifiers, insufficient permissions, and rate limits. This is solid but not exhaustive; for example, no detail on result ordering or empty searches is given.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose and includes routing, safety, and error semantics in a compact form. The last sentence is somewhat generic and mentions identifiers not present in the schema, so it is not perfectly tight, but overall every sentence contributes.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a search tool with readOnly/openWorld annotations and full schema coverage, the description covers purpose, routing, safety, and error behavior. It does not describe what fields are searched or how matches are ranked, and there is no output schema, so an agent may still need to infer some return semantics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all parameters and the baseline is 3. The description adds general guidance about numeric IDs/URL-encoded paths and pagination fields, but project_id/group_id are not actually present in the schema, so that guidance is somewhat detached from the real parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource ('Search for GitLab projects') and explicitly contrasts discovery with typed get/list tools when the identifier is already known. This clearly distinguishes search_repositories from siblings such as get_project and list_projects.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It says when to use the tool ('discover matching content') and when not to ('choose a typed get or list tool when the target identifier is already known'). This gives an explicit routing rule with no ambiguity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

update_issueA

Update an issue. Returns a slim confirmation by default; set full_response=true for the complete updated issue object. Use this to change fields on an existing issue; use update_issue_description_patch for a targeted description edit that avoids sending the full body, and use create_issue_note for discussion. The operation mutates issue state, requires issue-edit permission, and returns the updated issue or a validation/permission/conflict error.

ParametersJSON Schema
NameRequiredDescriptionDefault
titleNoThe title of the issue
labelsNoArray of label names
weightNoWeight of the issue (numeric, typically hours of work)
due_dateNoDate the issue is due (YYYY-MM-DD)
jmespathNoOptional JMESPath expression filtering the JSON result before return.
issue_iidYesThe internal ID of the project issue
issue_typeNoThe type of issue. One of issue, incident, test_case or task.
project_idYesProject ID or URL-encoded path
descriptionNoThe description of the issue
state_eventNoUpdate issue state (close/reopen)
assignee_idsNoArray of user IDs to assign issue to
confidentialNoSet the issue to be confidential
milestone_idNoMilestone ID to assign
full_responseNoIf true, return the complete updated issue object. Default returns a slim confirmation (iid, title, state, web_url, updated_at) to reduce token usage.
discussion_lockedNoFlag to lock discussions

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only carry `openWorldHint: true`, so the description carries the full behavioral disclosure burden. It discloses that the operation mutates issue state, requires issue-edit permission, returns the updated issue or validation/permission/conflict errors, and explains the slim vs. full response behavior. This substantially exceeds what annotations alone provide and contains no contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences and front-loads the primary action and response behavior before moving to usage distinctions and side effects. Every sentence earns its place: no filler, no repetition of schema details, and the most decision-relevant information appears first.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and sparse annotations, the description is thorough: it covers mutability, permission requirements, return values, error types, and response-shape options. It also provides enough usage context to route between related tools. Nothing an agent needs to call this correctly and safely is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 15 parameters. The description adds meaningful semantics for `full_response` by explaining the default slim confirmation and the specific fields it returns, which goes beyond the schema's one-line description. This warrants a 4 rather than a baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Update') and resource ('an issue'), and clearly identifies the tool's scope: changing fields on an existing issue. It also distinguishes itself from sibling tools like `update_issue_description_patch` and `create_issue_note`, so an agent can tell them apart without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says when to use this tool ('change fields on an existing issue') and names two alternatives with their use cases: `update_issue_description_patch` for targeted description edits avoiding full-body sends, and `create_issue_note` for discussion. This gives both positive and negative routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

update_issue_description_patchA

Apply a patch (search/replace or unified diff) to an issue description. Reduces token usage by allowing small changes without sending the full description. Supports dry_run to preview changes and create_note to summarize updates. Use this for a targeted search/replace or unified-diff change to an issue description; use dry_run before applying an uncertain patch and create_note when an audit summary is wanted. It changes the issue description when not dry-running, requires issue-edit permission, and returns the patch result or a mismatch/validation/permission error.

ParametersJSON Schema
NameRequiredDescriptionDefault
patchYesThe patch content to apply to the issue description
dry_runNoIf true, preview changes without updating the issue
jmespathNoOptional JMESPath expression filtering the JSON result before return.
issue_iidYesThe internal ID of the project issue
patch_typeYesType of patch format to apply
project_idYesProject ID or URL-encoded path
create_noteNoIf true, add a note summarizing the change after update
allow_multipleNoFor search_replace: allow multiple matches to all be replaced (default: false — fail on duplicate)

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With only openWorldHint in annotations, the description carries the transparency burden and does well: it discloses the side effect ('changes the issue description when not dry-running'), the permission requirement ('requires issue-edit permission'), and possible outcomes ('patch result or a mismatch/validation/permission error'). This goes well beyond the sparse annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core action and is generally efficient. However, the dry_run/create_note functionality is stated twice ('supports dry_run... create_note' and 'use dry_run... create_note'), creating slight redundancy without much added information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description adequately covers the return value ('returns the patch result or ... error') and the key side-effect/permission context. It relies on the thoroughly documented schema for parameter details, which is reasonable at 100% coverage, though a bit more detail on duplicate-match failure for allow_multiple could strengthen it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds mild value by explaining dry_run as 'preview changes' and create_note as 'summarize updates,' and by mapping patch_type to 'search/replace or unified diff,' but it does not substantially extend what the schema already documents.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'apply a patch ... to an issue description.' It also distinguishes itself from a full-description update by noting it 'reduces token usage by allowing small changes without sending the full description,' which differentiates it from sibling tools like update_issue.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says 'use this for a targeted search/replace or unified-diff change to an issue description' and gives conditional guidance for dry_run and create_note. It does not explicitly name the alternative full-update tool or state 'do not use for full rewrites,' but the targeted-change framing makes the intended use clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

update_merge_request

Update a merge request (merge_request_iid or source_branch required). Use this for an existing resource; choose the corresponding create tool for a new resource and a note tool for discussion-only text. It changes remote GitLab state and requires the necessary project or group permission; GitLab returns validation, conflict, permission, or rate-limit errors instead of silently applying an invalid request. When project_id or group_id is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.

ParametersJSON Schema
NameRequiredDescriptionDefault
draftNoWork in progress merge request
titleNoThe title of the merge request
labelsNoLabels for the MR
squashNoSquash commits into a single commit when merging
jmespathNoOptional JMESPath expression filtering the JSON result before return.
project_idYesProject ID or complete URL-encoded path to project
descriptionNoThe description of the merge request
state_eventNoNew state (close/reopen) for the MR
assignee_idsNoThe ID of the users to assign the MR to
milestone_idNoMilestone ID to assign. Set to 0 to unassign. Null is treated as omitted.
reviewer_idsNoThe ID of the users to assign as reviewers of the MR
source_branchNoSource branch name
target_branchNoThe target branch
merge_request_iidNoThe IID of a merge request
remove_source_branchNoFlag indicating if the source branch should be removed
whoami
Read-only

Get current authenticated user details. Use this to identify the authenticated GitLab user; use get_user or get_users when looking up another user. It requires classic read_user or fine-grained User:Read. It is read-only and returns the current user profile, while missing credentials or GitLab permission failures are reported as errors.

ParametersJSON Schema
NameRequiredDescriptionDefault
jmespathNoOptional JMESPath expression filtering the JSON result before return.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 80 tool updatesv2.2.6
    • Removedapprove_merge_request
    • Removedbulk_publish_draft_notes
    • Removedcreate_branch
    • Removedcreate_commit_status
    • Removedcreate_draft_note
    • Removedcreate_group
    • Removedcreate_issue_emoji_reaction
    • Removedcreate_issue_link
    • Removedcreate_issue_note_emoji_reaction
    • Removedcreate_label
    • Removedcreate_merge_request_discussion_note
    • Removedcreate_merge_request_emoji_reaction
    • Removedcreate_merge_request_note
    • Removedcreate_merge_request_note_emoji_reaction
    • Removedcreate_note
    • Removedcreate_or_update_file
    • Removedcreate_repository
    • Removeddelete_branch
    • Removeddelete_draft_note
    • Removeddelete_issue
    • Removeddelete_issue_emoji_reaction
    • Removeddelete_issue_link
    • Removeddelete_issue_note_emoji_reaction
    • Removeddelete_label
    • Removeddelete_merge_request_discussion_note
    • Removeddelete_merge_request_emoji_reaction
    • Removeddelete_merge_request_note
    • Removeddelete_merge_request_note_emoji_reaction
    • Removeddownload_attachment
    • Removedfork_repository
    • Removedget_branch_diffs
    • Removedget_ci_catalog_resource
    • Removedget_draft_note
    • Changedget_issue1 field changed
      • changedInput schema / properties / full_response / description
        Previous value: -"If true, return the complete issue object including the full milestone description. Default returns a slim milestone (id, iid, title, state, web_url) to reduce token usage."New value: +"If true, include the complete milestone object, including its description, on the returned issue. Default returns the issue with a slim milestone (id, iid, title, state, web_url) to reduce token usage."
    • Removedget_issue_link
    • Removedget_label
    • Removedget_merge_request_conflicts
    • Removedget_merge_request_version
    • Removedget_namespace
    • Removedget_project_events
    • Removedget_protected_branch
    • Removedget_user
    • Removedget_users
    • Removedlist_ci_catalog_resources
    • Removedlist_commit_statuses
    • Removedlist_draft_notes
    • Removedlist_events
    • Removedlist_group_iterations
    • Removedlist_group_members
    • Removedlist_group_merge_requests
    • Removedlist_group_projects
    • Removedlist_issue_emoji_reactions
    • Removedlist_issue_links
    • Removedlist_issue_note_emoji_reactions
    • Removedlist_merge_request_emoji_reactions
    • Removedlist_merge_request_note_emoji_reactions
    • Removedlist_merge_request_pipelines
    • Removedlist_merge_request_versions
    • Removedlist_namespaces
    • Removedlist_protected_branches
    • Removedlist_todos
    • Removedmark_all_todos_done
    • Removedmark_todo_done
    • Removedmerge_merge_request
    • Removedprotect_branch
    • Removedpublish_draft_note
    • Removedpush_files
    • Removedunapprove_merge_request
    • Removedunprotect_branch
    • Removedupdate_default_branch
    • Removedupdate_draft_note
    • Removedupdate_issue_note
    • Removedupdate_label
    • Removedupdate_merge_request_discussion_note
    • Removedupdate_merge_request_note
    • Removedupdate_project
    • Removedupload_markdown
    • Removedvalidate_ci_lint
    • Removedvalidate_project_ci_lint
    • Removedverify_namespace
  2. 118 tool updatesv2.1.66
    • Changedapprove_merge_request1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedbulk_publish_draft_notes1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_branch1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_commit_status1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_draft_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_group1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_issue1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_issue_emoji_reaction1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_issue_link1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_issue_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_issue_note_emoji_reaction1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_label1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_merge_request1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_merge_request_discussion_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_merge_request_emoji_reaction1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_merge_request_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_merge_request_note_emoji_reaction1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_merge_request_thread1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_or_update_file1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedcreate_repository1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_branch1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_draft_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_issue1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_issue_emoji_reaction1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_issue_link1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_issue_note_emoji_reaction1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_label1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_merge_request_discussion_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_merge_request_emoji_reaction1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_merge_request_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddelete_merge_request_note_emoji_reaction1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddiscover_tools1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changeddownload_attachment1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedfork_repository1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_branch1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_branch_diffs1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_ci_catalog_resource1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_commit1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_commit_diff1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_draft_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_file_blame1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_file_contents1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_issue1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_issue_link1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_label1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_merge_request1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_merge_request_approval_state1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_merge_request_conflicts1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_merge_request_diffs1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_merge_request_discussion1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_merge_request_file_diff1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_merge_request_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_merge_request_notes1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_merge_request_version1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_namespace1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_project1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_project_events1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_protected_branch1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_repository_tree1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_user1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedget_users1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedhealth_check1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_branches1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_ci_catalog_resources1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_commit_statuses1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_commits1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_draft_notes1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_events1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_group_iterations1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_group_members1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_group_merge_requests1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_group_projects1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_issue_discussions1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_issue_emoji_reactions1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_issue_links1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_issue_note_emoji_reactions1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_issues1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_labels1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_merge_request_changed_files1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_merge_request_diffs1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_merge_request_emoji_reactions1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_merge_request_note_emoji_reactions1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_merge_request_pipelines1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_merge_request_versions1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_merge_requests1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_namespaces1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_project_members1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_projects1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_protected_branches1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedlist_todos1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedmark_all_todos_done1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedmark_todo_done1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedmerge_merge_request1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedmr_discussions1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedmy_issues1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedprotect_branch1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedpublish_draft_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedpush_files1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedresolve_merge_request_thread1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedsearch_repositories1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedunapprove_merge_request1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedunprotect_branch1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_default_branch1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_draft_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_issue1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_issue_description_patch1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_issue_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_label1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_merge_request1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_merge_request_discussion_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_merge_request_note1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupdate_project1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedupload_markdown1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedvalidate_ci_lint1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedvalidate_project_ci_lint1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedverify_namespace1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
    • Changedwhoami1 field changed
      • addedInput schema / properties / jmespath
        Added value: +{
        +  "description": "Optional JMESPath expression filtering the JSON result before return.",
        +  "type": "string"
        +}
  3. 1 tool updatev2.1.63
    • Addedget_merge_request_discussion
  4. 37 tool updatesv2.1.62
    • Changedcreate_branch1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "branch",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "branch"
        +]
    • Changedcreate_commit_status1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "sha",
        -  "state",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "sha",
        +  "state"
        +]
    • Changedcreate_draft_note1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "body",
        -  "project_id",
        -  "merge_request_iid"
        -]New value: +[
        +  "project_id",
        +  "merge_request_iid",
        +  "body"
        +]
    • Changedcreate_issue1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "title",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "title"
        +]
    • Changedcreate_issue_emoji_reaction1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "name",
        -  "project_id",
        -  "issue_iid"
        -]New value: +[
        +  "project_id",
        +  "issue_iid",
        +  "name"
        +]
    • Changedcreate_issue_note1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "body",
        -  "project_id",
        -  "issue_iid"
        -]New value: +[
        +  "project_id",
        +  "issue_iid",
        +  "body"
        +]
    • Changedcreate_issue_note_emoji_reaction1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "name",
        -  "project_id",
        -  "issue_iid",
        -  "note_id"
        -]New value: +[
        +  "project_id",
        +  "issue_iid",
        +  "note_id",
        +  "name"
        +]
    • Changedcreate_label1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "name",
        -  "color",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "name",
        +  "color"
        +]
    • Changedcreate_merge_request1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "title",
        -  "source_branch",
        -  "target_branch",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "title",
        +  "source_branch",
        +  "target_branch"
        +]
    • Changedcreate_merge_request_discussion_note1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "body",
        -  "project_id",
        -  "merge_request_iid",
        -  "discussion_id"
        -]New value: +[
        +  "project_id",
        +  "merge_request_iid",
        +  "discussion_id",
        +  "body"
        +]
    • Changedcreate_merge_request_emoji_reaction1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "name",
        -  "project_id",
        -  "merge_request_iid"
        -]New value: +[
        +  "project_id",
        +  "merge_request_iid",
        +  "name"
        +]
    • Changedcreate_merge_request_note1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "body",
        -  "project_id",
        -  "merge_request_iid"
        -]New value: +[
        +  "project_id",
        +  "merge_request_iid",
        +  "body"
        +]
    • Changedcreate_merge_request_note_emoji_reaction1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "name",
        -  "project_id",
        -  "merge_request_iid",
        -  "note_id"
        -]New value: +[
        +  "project_id",
        +  "merge_request_iid",
        +  "note_id",
        +  "name"
        +]
    • Changedcreate_merge_request_thread1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "body",
        -  "project_id",
        -  "merge_request_iid"
        -]New value: +[
        +  "project_id",
        +  "merge_request_iid",
        +  "body"
        +]
    • Changedcreate_note1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "noteable_type",
        -  "body",
        -  "project_id",
        -  "noteable_iid"
        -]New value: +[
        +  "project_id",
        +  "noteable_type",
        +  "noteable_iid",
        +  "body"
        +]
    • Changedcreate_or_update_file1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "file_path",
        -  "content",
        -  "commit_message",
        -  "branch",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "file_path",
        +  "content",
        +  "commit_message",
        +  "branch"
        +]
    • Changedcreate_repository1 field changed
      • addedInput schema / properties / namespace_id / maximum
        Added value: +9007199254740991
    • Changeddelete_branch1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "branch_name",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "branch_name"
        +]
    • Changedget_branch1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "branch_name",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "branch_name"
        +]
    • Changedget_branch_diffs1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "from",
        -  "to",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "from",
        +  "to"
        +]
    • Changedget_commit1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "sha",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "sha"
        +]
    • Changedget_commit_diff1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "sha",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "sha"
        +]
    • Changedget_file_blame5 fields changed
      • addedInput schema / properties / range_end / maximum
        Added value: +9007199254740991
      • addedInput schema / properties / range_end / minimum
        Added value: +-9007199254740991
      • addedInput schema / properties / range_start / maximum
        Added value: +9007199254740991
      • addedInput schema / properties / range_start / minimum
        Added value: +-9007199254740991
      • changedInput schema / required
        Previous value: -[
        -  "file_path",
        -  "ref"
        -]New value: +[
        +  "project_id",
        +  "file_path",
        +  "ref"
        +]
    • Changedget_protected_branch1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "branch_name",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "branch_name"
        +]
    • Changedlist_commit_statuses1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "sha",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "sha"
        +]
    • Changedlist_merge_request_pipelines1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "merge_request_iid",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "merge_request_iid"
        +]
    • Changedprotect_branch7 fields changed
      • addedInput schema / properties / merge_access_level / maximum
        Added value: +9007199254740991
      • addedInput schema / properties / merge_access_level / minimum
        Added value: +-9007199254740991
      • addedInput schema / properties / push_access_level / maximum
        Added value: +9007199254740991
      • addedInput schema / properties / push_access_level / minimum
        Added value: +-9007199254740991
      • addedInput schema / properties / unprotect_access_level / maximum
        Added value: +9007199254740991
      • addedInput schema / properties / unprotect_access_level / minimum
        Added value: +-9007199254740991
      • changedInput schema / required
        Previous value: -[
        -  "branch_name"
        -]New value: +[
        +  "project_id",
        +  "branch_name"
        +]
    • Changedpush_files2 fields changed
      • removedInput schema / properties / files / items / additionalProperties
        Removed value: -false
      • changedInput schema / required
        Previous value: -[
        -  "branch",
        -  "files",
        -  "commit_message",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "branch",
        +  "files",
        +  "commit_message"
        +]
    • Changedunprotect_branch1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "branch_name",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "branch_name"
        +]
    • Changedupdate_default_branch1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "default_branch",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "default_branch"
        +]
    • Changedupdate_issue_description_patch1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "patch_type",
        -  "patch",
        -  "project_id",
        -  "issue_iid"
        -]New value: +[
        +  "project_id",
        +  "issue_iid",
        +  "patch_type",
        +  "patch"
        +]
    • Changedupdate_issue_note1 field changed
      • addedInput schema / required
        Added value: +[
        +  "project_id",
        +  "issue_iid",
        +  "discussion_id",
        +  "note_id"
        +]
    • Changedupdate_merge_request_discussion_note1 field changed
      • addedInput schema / required
        Added value: +[
        +  "project_id",
        +  "merge_request_iid",
        +  "discussion_id",
        +  "note_id"
        +]
    • Changedupdate_merge_request_note1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "body",
        -  "project_id",
        -  "merge_request_iid",
        -  "note_id"
        -]New value: +[
        +  "project_id",
        +  "merge_request_iid",
        +  "note_id",
        +  "body"
        +]
    • Changedupdate_project1 field changed
      • addedInput schema / required
        Added value: +[
        +  "project_id"
        +]
    • Changedvalidate_ci_lint1 field changed
      • changedInput schema / required
        Previous value: -[
        -  "content",
        -  "project_id"
        -]New value: +[
        +  "project_id",
        +  "content"
        +]
    • Changedverify_namespace2 fields changed
      • addedInput schema / properties / parent_id / maximum
        Added value: +9007199254740991
      • addedInput schema / properties / parent_id / minimum
        Added value: +-9007199254740991
  5. 1 tool updatev2.1.57
    • Addedlist_group_merge_requests
  6. 3 tool updatesv2.1.52
    • Changedcreate_or_update_file1 field changed
      • addedInput schema / properties / encoding
        Added value: +{
        +  "description": "Content encoding. Use 'base64' for binary files (content must already be base64-encoded). When omitted, GITLAB_REPO_FILE_ENCODING applies.",
        +  "enum": [
        +    "text",
        +    "base64"
        +  ],
        +  "type": "string"
        +}
    • Changedmerge_merge_request1 field changed
      • addedInput schema / properties / sha
        Added value: +{
        +  "description": "SHA of the source-branch HEAD from get_merge_request (`sha` or `diff_refs.head_sha`). If provided, GitLab merges only when HEAD still matches. GitLab 19.2+ groups may require this (Require a commit SHA on the merge requests API).",
        +  "type": "string"
        +}
    • Changedpush_files7 fields changed
      • changedInput schema / properties / files / description
        Previous value: -"Array of files to push"New value: +"Array of files to push. Each entry defaults to action 'create'. Per-file fields: action (create/update/delete/move), encoding (text/base64; omitted uses GITLAB_REPO_FILE_ENCODING), previous_path (required for move). Content is required for create and update; omit content for delete, or for a move that should keep the original file. GITLAB_PERMISSION_MODE=modify rejects delete and move."
      • addedInput schema / properties / files / items / properties / action
        Added value: +{
        +  "description": "Commit action for this file. Defaults to 'create'.",
        +  "enum": [
        +    "create",
        +    "update",
        +    "delete",
        +    "move"
        +  ],
        +  "type": "string"
        +}
      • changedInput schema / properties / files / items / properties / content / description
        Previous value: -"Content of the file"New value: +"File content. Required for create and update. Omit for delete, or for a move that should keep the original content. Base64-encoded when encoding is 'base64'."
      • addedInput schema / properties / files / items / properties / encoding
        Added value: +{
        +  "description": "Use 'base64' for binary files (content must already be base64-encoded). When omitted, GITLAB_REPO_FILE_ENCODING applies.",
        +  "enum": [
        +    "text",
        +    "base64"
        +  ],
        +  "type": "string"
        +}
      • changedInput schema / properties / files / items / properties / file_path / description
        Previous value: -"Path where to create the file"New value: +"Path of the file in the repo"
      • addedInput schema / properties / files / items / properties / previous_path
        Added value: +{
        +  "description": "Previous path of the file. Required when action is 'move'.",
        +  "type": "string"
        +}
      • changedInput schema / properties / files / items / required
        Previous value: -[
        -  "file_path",
        -  "content"
        -]New value: +[
        +  "file_path"
        +]
  7. 1 tool updatev2.1.46
    • Addedlist_group_members
  8. 35 tool updatesv2.1.45
    • Addedapprove_merge_request
    • Addedcreate_branch
    • Addedcreate_commit_status
    • Addedcreate_issue_emoji_reaction
    • Addedcreate_issue_link
    • Addedcreate_or_update_file
    • Addeddelete_issue_link
    • Addeddelete_label
    • Addeddiscover_tools
    • Addedfork_repository
    • Addedget_commit
    • Addedget_commit_diff
    • Addedget_file_blame
    • Addedget_issue_link
    • Addedget_merge_request_approval_state
    • Addedget_repository_tree
    • Addedget_user
    • Addedget_users
    • Addedlist_ci_catalog_resources
    • Addedlist_commit_statuses
    • Addedlist_commits
    • Addedlist_group_projects
    • Addedlist_issue_discussions
    • Addedlist_issue_links
    • Addedlist_merge_request_changed_files
    • Addedlist_merge_request_versions
    • Addedlist_protected_branches
    • Addedmark_all_todos_done
    • Addedmerge_merge_request
    • Addedpush_files
    • Addedupdate_label
    • Addedupload_markdown
    • Addedvalidate_ci_lint
    • Addedvalidate_project_ci_lint
    • Addedwhoami
  9. 37 tool updatesv2.1.43
    • Removedapprove_merge_request
    • Changedbulk_publish_draft_notes3 fields changed
      • addedInput schema / properties / internal
        Added value: +{
        +  "description": "If true, the summary note is internal (GitLab 19.2+, default false)",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / note
        Added value: +{
        +  "description": "Summary note body to post on the merge request (GitLab 19.2+)",
        +  "type": "string"
        +}
      • addedInput schema / properties / reviewer_state
        Added value: +{
        +  "description": "Set reviewer review state after publishing (GitLab 19.2+). Does not record a formal approval. Works even with no draft notes.",
        +  "enum": [
        +    "requested_changes",
        +    "reviewed"
        +  ],
        +  "type": "string"
        +}
    • Removedcreate_branch
    • Removedcreate_commit_status
    • Removedcreate_issue_emoji_reaction
    • Removedcreate_issue_link
    • Removedcreate_or_update_file
    • Removeddelete_issue_link
    • Removeddelete_label
    • Removeddiscover_tools
    • Removedfork_repository
    • Removedget_commit
    • Removedget_commit_diff
    • Removedget_file_blame
    • Removedget_issue_link
    • Removedget_merge_request_approval_state
    • Removedget_repository_tree
    • Removedget_user
    • Removedget_users
    • Removedlist_ci_catalog_resources
    • Removedlist_commit_statuses
    • Removedlist_commits
    • Removedlist_group_projects
    • Removedlist_issue_discussions
    • Removedlist_issue_links
    • Removedlist_merge_request_changed_files
    • Removedlist_merge_request_versions
    • Removedlist_protected_branches
    • Removedmark_all_todos_done
    • Removedmerge_merge_request
    • Removedpush_files
    • Removedupdate_label
    • Changedupdate_merge_request1 field changed
      • addedInput schema / properties / milestone_id
        Added value: +{
        +  "description": "Milestone ID to assign. Set to 0 to unassign. Null is treated as omitted.",
        +  "type": "string"
        +}
    • Removedupload_markdown
    • Removedvalidate_ci_lint
    • Removedvalidate_project_ci_lint
    • Removedwhoami
  10. 3 tool updatesv2.1.30
    • Changedget_issue1 field changed
      • addedInput schema / properties / full_response
        Added value: +{
        +  "description": "If true, return the complete issue object including the full milestone description. Default returns a slim milestone (id, iid, title, state, web_url) to reduce token usage.",
        +  "type": "boolean"
        +}
    • Changedget_merge_request1 field changed
      • addedInput schema / properties / include_summaries
        Added value: +{
        +  "description": "If true, include deployment_summary, commit_addition_summary and approval_summary (extra API calls, larger response). Default false to reduce token usage.",
        +  "type": "boolean"
        +}
    • Changedupdate_issue1 field changed
      • addedInput schema / properties / full_response
        Added value: +{
        +  "description": "If true, return the complete updated issue object. Default returns a slim confirmation (iid, title, state, web_url, updated_at) to reduce token usage.",
        +  "type": "boolean"
        +}
  11. 1 tool updatev2.1.28
    • Changedget_ci_catalog_resource1 field changed
      • removedInput schema / anyOf
        Removed value: -[
        -  {
        -    "properties": {
        -      "component_limit": {
        -        "description": "Number of components per version to include (default: 20, max: 50)",
        -        "maximum": 50,
        -        "minimum": 1,
        -        "type": "integer"
        -      },
        -      "component_name": {
        -        "description": "Filter returned components by component name",
        -        "type": "string"
        -      },
        -      "full_path": {
        -        "description": "CI/CD Catalog resource full project path. Required when id is omitted.",
        -        "minLength": 1,
        -        "type": "string"
        -      },
        -      "id": {
        -        "description": "CI/CD Catalog resource global ID. Required when full_path is omitted.",
        -        "minLength": 1,
        -        "type": "string"
        -      },
        -      "include_readme": {
        -        "description": "Include version README content",
        -        "type": "boolean"
        -      },
        -      "version_limit": {
        -        "description": "Number of versions to include (default: 5, max: 20)",
        -        "maximum": 20,
        -        "minimum": 1,
        -        "type": "integer"
        -      }
        -    },
        -    "required": [
        -      "id"
        -    ],
        -    "type": "object"
        -  },
        -  {
        -    "properties": {
        -      "component_limit": {
        -        "description": "Number of components per version to include (default: 20, max: 50)",
        -        "maximum": 50,
        -        "minimum": 1,
        -        "type": "integer"
        -      },
        -      "component_name": {
        -        "description": "Filter returned components by component name",
        -        "type": "string"
        -      },
        -      "full_path": {
        -        "description": "CI/CD Catalog resource full project path. Required when id is omitted.",
        -        "minLength": 1,
        -        "type": "string"
        -      },
        -      "id": {
        -        "description": "CI/CD Catalog resource global ID. Required when full_path is omitted.",
        -        "minLength": 1,
        -        "type": "string"
        -      },
        -      "include_readme": {
        -        "description": "Include version README content",
        -        "type": "boolean"
        -      },
        -      "version_limit": {
        -        "description": "Number of versions to include (default: 5, max: 20)",
        -        "maximum": 20,
        -        "minimum": 1,
        -        "type": "integer"
        -      }
        -    },
        -    "required": [
        -      "full_path"
        -    ],
        -    "type": "object"
        -  }
        -]

TDQS

A3.6/5.0

Scored across 118 tools

Disambiguation3/5

Most tools target distinct resource+action pairs, and descriptions often cross-reference alternatives. However, the sheer volume creates overlap, e.g. get_merge_request_diffs vs list_merge_request_diffs, and the many note/discussion/thread tools (create_note, create_issue_note, create_merge_request_note, create_merge_request_thread, create_merge_request_discussion_note) can confuse an agent choosing the right one.

Naming Consistency4/5

Predominantly consistent snake_case verb_noun pattern (e.g. list_issues, create_branch, delete_label). Minor deviations like mr_discussions (noun-only), whoami, and health_check exist, but the convention is largely predictable.

Tool Count1/5

118 tools is an extreme mismatch for a well-scoped MCP server. Even with a discover_tools category mechanism, exposing this many tools at once overwhelms an agent's selection process and violates the typical 3-15 tool sweet spot.

Completeness4/5

The surface covers a broad range of GitLab resources: projects, groups, branches, commits, files, merge requests, issues, labels, notes, emoji reactions, to-dos, users, namespaces, CI lint, and catalog. Some lifecycle gaps remain (e.g. no delete_project, delete_group, or update_group), but core workflows are mostly covered.

Maintenance

ActivityActive
ResponsivenessWithin a week

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    MCP server for GitLab CI/CD — pipelines, jobs, schedules, branches, tags, merge requests and repository files. Works with any GitLab (SaaS gitlab.com or self-hosted) via python-gitlab.
    23
    61 PyPI
    2
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server for interacting with GitLab API, supporting both self-hosted instances and gitlab.com. Provides tools for managing issues, merge requests, code review, pipelines, milestones, releases, search, and file access.
    368 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Model Context Protocol (MCP) server for GitLab — exposes 1006 GitLab REST & GraphQL API operations as MCP tools (42 meta-tools / 57 enterprise), 24 resources, 38 prompts, and 17 completion types for AI assistants. Written in Go, single static binary, stdio and HTTP transport.
    2
    45
    MIT