Check authentication: returns the current authenticated user (id, username, email, fullName). Use this first to verify the token works.

Validate a GitFlic API token against /user/me, then store it in the OS keychain (macOS Keychain / Linux libsecret) or chmod-0600 file. Refuses to store an invalid token. Use --as to store under a named account; --stdin to read the token from stdin.

Remove a stored token. Default removes the active account. Pass --as to remove a specific named account. Pass --all to remove every token (and all per-project bindings).

List all known accounts (default + named) with masked token values. Marks the active account with '*'. Use before switching or binding to confirm available identities.

Make the active account. Subsequent tool calls without a per-project binding resolve to this account's token. Refuses if no token is stored for the named account.

Bind (owner/alias) to . All subsequent commands scoped to that project resolve to 's token, overriding the active account. Refuses if has no token stored. Use to route different repos to different identities (work vs personal).

Remove the binding for . Falls back to active-account token resolution for that project afterwards.

List all current project → account bindings. Sorted alphabetically by project.

Resolve a project owner/alias to its UUID + defaultBranch. Cached locally; needed before most other calls.

List merge requests in a project. Returns array with localId, title, status, author, source/target branches.

Get one merge request by its localId. Returns full MR object including description, status, conflicts, canMerge.

Get the file-level diff for a merge request (hunks + per-line annotations).

Create a new merge request. description is required (GitFlic rejects empty MR descriptions). If from is omitted, uses current git branch; if to is omitted, uses project default branch.

Toggle approve on a merge request (calling twice removes the approval).

Merge a merge request. May fail with MergeCheckException if branch protection requires more approvals.

Close a merge request.

Add a comment to a merge request. For inline-anchored comments, pass new_path/new_line and old_path/old_line.

List discussions (with replies) on a merge request.

Reply to a discussion thread on a merge request.

Resolve a discussion thread on a merge request.

List issues. Filter by --status if needed.

Get one issue by localId.

Create a new issue.

Close an issue (shortcut: edit with --status CLOSED).

Add a comment to an issue.

List branches in a project.

Create a new branch from an existing one.

Delete a branch.

List tags.

Create a new tag (lightweight or annotated).

List releases.

Create a new release.

List commits (default branch or --branch).

Get the current authenticated user (id, username, email, name, fullName).

Search users by username substring.

List accessible projects, including team projects. Defaults to scope shared; filter by owner alias.

List projects owned by the current user. Use gitflic_project_list with scope shared for team and member projects.

List webhooks for a project.

List branch protection rules.

Edit MR title/description/target. Source branch cannot change.

Cancel a merge request.

Find MR(s) containing a specific commit hash. Optionally filter by status.

Delete a discussion thread on a merge request.

Edit an issue's title, description, status, assignee, or labels.

Reopen a closed issue.

Delete an issue. Irreversible.

List comments on an issue.

Edit an existing issue comment.

Delete an issue comment.

List issue relations (linked/related/blocks).

Get a single branch by name.

Get the project's default branch.

Get a branch-protection rule by uuid.

Create a branch-protection rule.

Edit a branch-protection rule.

Delete a branch-protection rule.

Get a tag by name. NOTE: GitFlic returns 400 for project-scoped tag get; prefer tag list.

Get one release by uuid.

Get the most recent release.

Edit release metadata.

Delete a release.

Get one commit by hash.

List files touched by a commit.

Compare two commits.

Get one webhook by uuid.

Create a webhook. Pass one or more event names.

Delete a webhook by uuid.

Reveal the raw signing secret of a webhook. SENSITIVE: by default the MCP masks secrets (returns secretSet:true/false). This tool returns the actual secret value and is marked destructive so the MCP host prompts for approval before it runs. Use only when the user explicitly needs the secret value.

Resolve an owner/alias to its UUID + metadata.

Create a new project.

Edit project title, description, or language (via change-setting). Visibility and default branch are not editable over the REST API.

List project members.

Invite a user to a project with a role.

Get a file's text content. Binary files are base64-encoded by the server.

List files in the repo (optionally under a sub-path).

Get a user by alias.

List public projects of a user.

List a user's followers.