← The evidence ledger
Evidence row 39395
Observed , by baseline/1.
- Kind
- listing
- About
- source_record mcp_registry:io.github.jmrplens/gitlab-mcp-server
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- e247f465fb35918ea4e3f269caf351791a4dfc3f3d5ee7a18a343e86357bafbb
- Leaf
- 0x48f924e3fad64994ec84f2918fe96f89e7a60cac89e7c317c4421507396eb5a2
What was observed
{
"endpoints": [
[
"mcp",
"https://mcp.jmrp.io/gitlab"
],
[
"web",
"https://docs.jmrp.io/gitlab-mcp-server"
]
],
"name": "GitLab MCP Server",
"owner_address": null,
"raw": {
"_meta": {
"io.modelcontextprotocol.registry/official": {
"isLatest": true,
"publishedAt": "2026-10-20T06:59:57.285403Z",
"status": "active",
"statusChangedAt": "2026-10-20T06:59:57.285403Z",
"updatedAt": "2026-10-20T06:59:57.285403Z"
}
},
"server": {
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"description": "Go MCP server for GitLab: 2 dynamic tools reach ~876 actions on Free/CE, up to ~1103 on Ultimate.",
"icons": [
{
"mimeType": "image/svg+xml",
"sizes": [
"any"
],
"src": "https://raw.githubusercontent.com/jmrplens/gitlab-mcp-server/main/site/public/favicon.svg"
},
{
"mimeType": "image/png",
"sizes": [
"400x400"
],
"src": "https://raw.githubusercontent.com/jmrplens/gitlab-mcp-server/main/site/public/logo-400.png"
}
],
"name": "io.github.jmrplens/gitlab-mcp-server",
"packages": [
{
"environmentVariables": [
{
"default": "https://gitlab.com",
"description": "GitLab instance URL (default: https://gitlab.com; set for self-managed instances)",
"name": "GITLAB_URL",
"placeholder": "https://gitlab.com"
},
{
"description": "GitLab Personal Access Token (glpat-...)",
"isRequired": true,
"isSecret": true,
"name": "GITLAB_TOKEN",
"placeholder": "glpat-xxxxxxxxxxxxxxxxxxxx"
},
{
"default": "false",
"description": "Skip TLS certificate verification for self-signed certs (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SKIP_TLS_VERIFY"
},
{
"choices": [
"meta",
"individual",
"dynamic"
],
"default": "dynamic",
"description": "Tool catalog selector: dynamic, meta, or individual (default: dynamic)",
"name": "GITLAB_MCP_TOOL_SURFACE"
},
{
"choices": [
"free",
"ce",
"premium",
"ultimate"
],
"description": "GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools",
"name": "GITLAB_MCP_TIER"
},
{
"default": "false",
"description": "Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_READ_ONLY"
},
{
"default": "false",
"description": "Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SAFE_MODE"
},
{
"choices": [
"debug",
"info",
"warn",
"error"
],
"default": "info",
"description": "Logging verbosity (default: info)",
"name": "GITLAB_MCP_LOG_LEVEL"
}
],
"fileSha256": "dc326734177056761e058d6e7ec739c20f4e76e4ee3a3f789a4ce7b7650d4225",
"identifier": "https://github.com/jmrplens/gitlab-mcp-server/releases/download/v3.3.0/gitlab-mcp-server-darwin.mcpb",
"registryType": "mcpb",
"transport": {
"type": "stdio"
},
"version": "3.3.0"
},
{
"environmentVariables": [
{
"default": "https://gitlab.com",
"description": "GitLab instance URL (default: https://gitlab.com; set for self-managed instances)",
"name": "GITLAB_URL",
"placeholder": "https://gitlab.com"
},
{
"description": "GitLab Personal Access Token (glpat-...)",
"isRequired": true,
"isSecret": true,
"name": "GITLAB_TOKEN",
"placeholder": "glpat-xxxxxxxxxxxxxxxxxxxx"
},
{
"default": "false",
"description": "Skip TLS certificate verification for self-signed certs (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SKIP_TLS_VERIFY"
},
{
"choices": [
"meta",
"individual",
"dynamic"
],
"default": "dynamic",
"description": "Tool catalog selector: dynamic, meta, or individual (default: dynamic)",
"name": "GITLAB_MCP_TOOL_SURFACE"
},
{
"choices": [
"free",
"ce",
"premium",
"ultimate"
],
"description": "GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools",
"name": "GITLAB_MCP_TIER"
},
{
"default": "false",
"description": "Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_READ_ONLY"
},
{
"default": "false",
"description": "Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SAFE_MODE"
},
{
"choices": [
"debug",
"info",
"warn",
"error"
],
"default": "info",
"description": "Logging verbosity (default: info)",
"name": "GITLAB_MCP_LOG_LEVEL"
}
],
"fileSha256": "09ab3a46c88b10e5d09f3ab4bb89edf525a3d355cecd772c9f8a5b3d1ca1885d",
"identifier": "https://github.com/jmrplens/gitlab-mcp-server/releases/download/v3.3.0/gitlab-mcp-server-windows.mcpb",
"registryType": "mcpb",
"transport": {
"type": "stdio"
},
"version": "3.3.0"
},
{
"environmentVariables": [
{
"default": "https://gitlab.com",
"description": "GitLab instance URL (default: https://gitlab.com; set for self-managed instances)",
"name": "GITLAB_URL",
"placeholder": "https://gitlab.com"
},
{
"description": "GitLab Personal Access Token (glpat-...)",
"isRequired": true,
"isSecret": true,
"name": "GITLAB_TOKEN",
"placeholder": "glpat-xxxxxxxxxxxxxxxxxxxx"
},
{
"default": "false",
"description": "Skip TLS certificate verification for self-signed certs (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SKIP_TLS_VERIFY"
},
{
"choices": [
"meta",
"individual",
"dynamic"
],
"default": "dynamic",
"description": "Tool catalog selector: dynamic, meta, or individual (default: dynamic)",
"name": "GITLAB_MCP_TOOL_SURFACE"
},
{
"choices": [
"free",
"ce",
"premium",
"ultimate"
],
"description": "GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools",
"name": "GITLAB_MCP_TIER"
},
{
"default": "false",
"description": "Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_READ_ONLY"
},
{
"default": "false",
"description": "Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SAFE_MODE"
},
{
"choices": [
"debug",
"info",
"warn",
"error"
],
"default": "info",
"description": "Logging verbosity (default: info)",
"name": "GITLAB_MCP_LOG_LEVEL"
}
],
"fileSha256": "d47b1be9a37bd5d76f862aeab77b036e25e142de13847d31f0342921fb7ae60f",
"identifier": "https://github.com/jmrplens/gitlab-mcp-server/releases/download/v3.3.0/gitlab-mcp-server-linux.mcpb",
"registryType": "mcpb",
"transport": {
"type": "stdio"
},
"version": "3.3.0"
},
{
"environmentVariables": [
{
"default": "https://gitlab.com",
"description": "GitLab instance URL (default: https://gitlab.com; set for self-managed instances)",
"name": "GITLAB_URL",
"placeholder": "https://gitlab.com"
},
{
"description": "GitLab Personal Access Token (glpat-...)",
"isRequired": true,
"isSecret": true,
"name": "GITLAB_TOKEN",
"placeholder": "glpat-xxxxxxxxxxxxxxxxxxxx"
},
{
"default": "false",
"description": "Skip TLS certificate verification for self-signed certs (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SKIP_TLS_VERIFY"
},
{
"choices": [
"meta",
"individual",
"dynamic"
],
"default": "dynamic",
"description": "Tool catalog selector: dynamic, meta, or individual (default: dynamic)",
"name": "GITLAB_MCP_TOOL_SURFACE"
},
{
"choices": [
"full",
"minimal"
],
"default": "full",
"description": "Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full",
"name": "GITLAB_MCP_CAPABILITY_SURFACE"
},
{
"choices": [
"opaque",
"compact",
"full"
],
"default": "opaque",
"description": "Meta-tool input schema detail: opaque, compact, or full (default: opaque)",
"name": "GITLAB_MCP_META_PARAM_SCHEMA"
},
{
"choices": [
"free",
"ce",
"premium",
"ultimate"
],
"description": "GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools",
"name": "GITLAB_MCP_TIER"
},
{
"default": "false",
"description": "Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_READ_ONLY"
},
{
"default": "false",
"description": "Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SAFE_MODE"
},
{
"default": "true",
"description": "Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)",
"format": "boolean",
"name": "GITLAB_MCP_EMBEDDED_RESOURCES"
},
{
"description": "Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner)",
"name": "GITLAB_MCP_EXCLUDE_TOOLS",
"placeholder": "gitlab_admin,gitlab_runner"
},
{
"default": "false",
"description": "Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_IGNORE_SCOPES"
},
{
"default": "2147483648",
"description": "Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB)",
"name": "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE"
},
{
"description": "Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_UPLOAD_DIRS",
"placeholder": "/path/to/files:/another/path/to/files"
},
{
"description": "Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS",
"placeholder": "/path/to/downloads:/another/path/to/downloads"
},
{
"description": "Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_IMPORT_DIRS",
"placeholder": "/path/to/exports:/another/path/to/exports"
},
{
"default": "0",
"description": "Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_RPS"
},
{
"default": "40",
"description": "Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_BURST"
},
{
"choices": [
"debug",
"info",
"warn",
"error"
],
"default": "info",
"description": "Logging verbosity (default: info)",
"name": "GITLAB_MCP_LOG_LEVEL"
}
],
"identifier": "ghcr.io/jmrplens/gitlab-mcp-server:3.3.0@sha256:88784f176a65d934c4a181eb832a525e94f106f49189cb9c6fde907dd00cf19c",
"registryType": "oci",
"transport": {
"type": "stdio"
}
},
{
"environmentVariables": [
{
"default": "https://gitlab.com",
"description": "GitLab instance URL (default: https://gitlab.com; set for self-managed instances)",
"name": "GITLAB_URL",
"placeholder": "https://gitlab.com"
},
{
"description": "GitLab Personal Access Token (glpat-...)",
"isRequired": true,
"isSecret": true,
"name": "GITLAB_TOKEN",
"placeholder": "glpat-xxxxxxxxxxxxxxxxxxxx"
},
{
"default": "false",
"description": "Skip TLS certificate verification for self-signed certs (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SKIP_TLS_VERIFY"
},
{
"choices": [
"meta",
"individual",
"dynamic"
],
"default": "dynamic",
"description": "Tool catalog selector: dynamic, meta, or individual (default: dynamic)",
"name": "GITLAB_MCP_TOOL_SURFACE"
},
{
"choices": [
"full",
"minimal"
],
"default": "full",
"description": "Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full",
"name": "GITLAB_MCP_CAPABILITY_SURFACE"
},
{
"choices": [
"opaque",
"compact",
"full"
],
"default": "opaque",
"description": "Meta-tool input schema detail: opaque, compact, or full (default: opaque)",
"name": "GITLAB_MCP_META_PARAM_SCHEMA"
},
{
"choices": [
"free",
"ce",
"premium",
"ultimate"
],
"description": "GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools",
"name": "GITLAB_MCP_TIER"
},
{
"default": "false",
"description": "Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_READ_ONLY"
},
{
"default": "false",
"description": "Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SAFE_MODE"
},
{
"default": "true",
"description": "Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)",
"format": "boolean",
"name": "GITLAB_MCP_EMBEDDED_RESOURCES"
},
{
"description": "Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner)",
"name": "GITLAB_MCP_EXCLUDE_TOOLS",
"placeholder": "gitlab_admin,gitlab_runner"
},
{
"default": "false",
"description": "Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_IGNORE_SCOPES"
},
{
"default": "2147483648",
"description": "Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB)",
"name": "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE"
},
{
"description": "Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_UPLOAD_DIRS",
"placeholder": "/path/to/files:/another/path/to/files"
},
{
"description": "Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS",
"placeholder": "/path/to/downloads:/another/path/to/downloads"
},
{
"description": "Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_IMPORT_DIRS",
"placeholder": "/path/to/exports:/another/path/to/exports"
},
{
"default": "0",
"description": "Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_RPS"
},
{
"default": "40",
"description": "Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_BURST"
},
{
"choices": [
"debug",
"info",
"warn",
"error"
],
"default": "info",
"description": "Logging verbosity (default: info)",
"name": "GITLAB_MCP_LOG_LEVEL"
}
],
"identifier": "docker.io/jmrplens/gitlab-mcp-server:3.3.0@sha256:88784f176a65d934c4a181eb832a525e94f106f49189cb9c6fde907dd00cf19c",
"registryType": "oci",
"transport": {
"type": "stdio"
}
},
{
"environmentVariables": [
{
"default": "https://gitlab.com",
"description": "GitLab instance URL (default: https://gitlab.com; set for self-managed instances)",
"name": "GITLAB_URL",
"placeholder": "https://gitlab.com"
},
{
"description": "GitLab Personal Access Token (glpat-...)",
"isRequired": true,
"isSecret": true,
"name": "GITLAB_TOKEN",
"placeholder": "glpat-xxxxxxxxxxxxxxxxxxxx"
},
{
"default": "false",
"description": "Skip TLS certificate verification for self-signed certs (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SKIP_TLS_VERIFY"
},
{
"choices": [
"meta",
"individual",
"dynamic"
],
"default": "dynamic",
"description": "Tool catalog selector: dynamic, meta, or individual (default: dynamic)",
"name": "GITLAB_MCP_TOOL_SURFACE"
},
{
"choices": [
"full",
"minimal"
],
"default": "full",
"description": "Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full",
"name": "GITLAB_MCP_CAPABILITY_SURFACE"
},
{
"choices": [
"opaque",
"compact",
"full"
],
"default": "opaque",
"description": "Meta-tool input schema detail: opaque, compact, or full (default: opaque)",
"name": "GITLAB_MCP_META_PARAM_SCHEMA"
},
{
"choices": [
"free",
"ce",
"premium",
"ultimate"
],
"description": "GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools",
"name": "GITLAB_MCP_TIER"
},
{
"default": "false",
"description": "Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_READ_ONLY"
},
{
"default": "false",
"description": "Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SAFE_MODE"
},
{
"default": "true",
"description": "Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)",
"format": "boolean",
"name": "GITLAB_MCP_EMBEDDED_RESOURCES"
},
{
"description": "Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner)",
"name": "GITLAB_MCP_EXCLUDE_TOOLS",
"placeholder": "gitlab_admin,gitlab_runner"
},
{
"default": "false",
"description": "Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_IGNORE_SCOPES"
},
{
"default": "2147483648",
"description": "Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB)",
"name": "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE"
},
{
"description": "Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_UPLOAD_DIRS",
"placeholder": "/path/to/files:/another/path/to/files"
},
{
"description": "Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS",
"placeholder": "/path/to/downloads:/another/path/to/downloads"
},
{
"description": "Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_IMPORT_DIRS",
"placeholder": "/path/to/exports:/another/path/to/exports"
},
{
"default": "0",
"description": "Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_RPS"
},
{
"default": "40",
"description": "Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_BURST"
},
{
"choices": [
"debug",
"info",
"warn",
"error"
],
"default": "info",
"description": "Logging verbosity (default: info)",
"name": "GITLAB_MCP_LOG_LEVEL"
}
],
"identifier": "@jmrp.io/gitlab-mcp-server",
"registryType": "npm",
"runtimeHint": "npx",
"transport": {
"type": "stdio"
},
"version": "3.3.0"
},
{
"environmentVariables": [
{
"default": "https://gitlab.com",
"description": "GitLab instance URL (default: https://gitlab.com; set for self-managed instances)",
"name": "GITLAB_URL",
"placeholder": "https://gitlab.com"
},
{
"description": "GitLab Personal Access Token (glpat-...)",
"isRequired": true,
"isSecret": true,
"name": "GITLAB_TOKEN",
"placeholder": "glpat-xxxxxxxxxxxxxxxxxxxx"
},
{
"default": "false",
"description": "Skip TLS certificate verification for self-signed certs (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SKIP_TLS_VERIFY"
},
{
"choices": [
"meta",
"individual",
"dynamic"
],
"default": "dynamic",
"description": "Tool catalog selector: dynamic, meta, or individual (default: dynamic)",
"name": "GITLAB_MCP_TOOL_SURFACE"
},
{
"choices": [
"full",
"minimal"
],
"default": "full",
"description": "Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full",
"name": "GITLAB_MCP_CAPABILITY_SURFACE"
},
{
"choices": [
"opaque",
"compact",
"full"
],
"default": "opaque",
"description": "Meta-tool input schema detail: opaque, compact, or full (default: opaque)",
"name": "GITLAB_MCP_META_PARAM_SCHEMA"
},
{
"choices": [
"free",
"ce",
"premium",
"ultimate"
],
"description": "GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools",
"name": "GITLAB_MCP_TIER"
},
{
"default": "false",
"description": "Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_READ_ONLY"
},
{
"default": "false",
"description": "Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SAFE_MODE"
},
{
"default": "true",
"description": "Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)",
"format": "boolean",
"name": "GITLAB_MCP_EMBEDDED_RESOURCES"
},
{
"description": "Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner)",
"name": "GITLAB_MCP_EXCLUDE_TOOLS",
"placeholder": "gitlab_admin,gitlab_runner"
},
{
"default": "false",
"description": "Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_IGNORE_SCOPES"
},
{
"default": "2147483648",
"description": "Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB)",
"name": "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE"
},
{
"description": "Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_UPLOAD_DIRS",
"placeholder": "/path/to/files:/another/path/to/files"
},
{
"description": "Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS",
"placeholder": "/path/to/downloads:/another/path/to/downloads"
},
{
"description": "Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_IMPORT_DIRS",
"placeholder": "/path/to/exports:/another/path/to/exports"
},
{
"default": "0",
"description": "Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_RPS"
},
{
"default": "40",
"description": "Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_BURST"
},
{
"choices": [
"debug",
"info",
"warn",
"error"
],
"default": "info",
"description": "Logging verbosity (default: info)",
"name": "GITLAB_MCP_LOG_LEVEL"
}
],
"identifier": "jmrplens-gitlab-mcp-server",
"registryBaseUrl": "https://pypi.org",
"registryType": "pypi",
"runtimeHint": "uvx",
"transport": {
"type": "stdio"
},
"version": "3.3.0"
},
{
"environmentVariables": [
{
"default": "https://gitlab.com",
"description": "GitLab instance URL (default: https://gitlab.com; set for self-managed instances)",
"name": "GITLAB_URL",
"placeholder": "https://gitlab.com"
},
{
"description": "GitLab Personal Access Token (glpat-...)",
"isRequired": true,
"isSecret": true,
"name": "GITLAB_TOKEN",
"placeholder": "glpat-xxxxxxxxxxxxxxxxxxxx"
},
{
"default": "false",
"description": "Skip TLS certificate verification for self-signed certs (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SKIP_TLS_VERIFY"
},
{
"choices": [
"meta",
"individual",
"dynamic"
],
"default": "dynamic",
"description": "Tool catalog selector: dynamic, meta, or individual (default: dynamic)",
"name": "GITLAB_MCP_TOOL_SURFACE"
},
{
"choices": [
"full",
"minimal"
],
"default": "full",
"description": "Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full",
"name": "GITLAB_MCP_CAPABILITY_SURFACE"
},
{
"choices": [
"opaque",
"compact",
"full"
],
"default": "opaque",
"description": "Meta-tool input schema detail: opaque, compact, or full (default: opaque)",
"name": "GITLAB_MCP_META_PARAM_SCHEMA"
},
{
"choices": [
"free",
"ce",
"premium",
"ultimate"
],
"description": "GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, then, on GitLab.com, from the top-level groups the token is a member of, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools",
"name": "GITLAB_MCP_TIER"
},
{
"default": "false",
"description": "Read-only mode: removes every mutating action from the served surface; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_READ_ONLY"
},
{
"default": "false",
"description": "Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_SAFE_MODE"
},
{
"default": "true",
"description": "Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true)",
"format": "boolean",
"name": "GITLAB_MCP_EMBEDDED_RESOURCES"
},
{
"description": "Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner)",
"name": "GITLAB_MCP_EXCLUDE_TOOLS",
"placeholder": "gitlab_admin,gitlab_runner"
},
{
"default": "false",
"description": "Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false)",
"format": "boolean",
"name": "GITLAB_MCP_IGNORE_SCOPES"
},
{
"default": "2147483648",
"description": "Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB)",
"name": "GITLAB_MCP_UPLOAD_MAX_FILE_SIZE"
},
{
"description": "Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_UPLOAD_DIRS",
"placeholder": "/path/to/files:/another/path/to/files"
},
{
"description": "Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS",
"placeholder": "/path/to/downloads:/another/path/to/downloads"
},
{
"description": "Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths",
"name": "GITLAB_MCP_ALLOWED_IMPORT_DIRS",
"placeholder": "/path/to/exports:/another/path/to/exports"
},
{
"default": "0",
"description": "Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_RPS"
},
{
"default": "40",
"description": "Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40)",
"format": "number",
"name": "GITLAB_MCP_RATE_LIMIT_BURST"
},
{
"choices": [
"debug",
"info",
"warn",
"error"
],
"default": "info",
"description": "Logging verbosity (default: info)",
"name": "GITLAB_MCP_LOG_LEVEL"
}
],
"identifier": "gitlab-mcp-server",
"registryBaseUrl": "https://api.nuget.org/v3/index.json",
"registryType": "nuget",
"runtimeHint": "dnx",
"transport": {
"type": "stdio"
},
"version": "3.3.0"
}
],
"remotes": [
{
"headers": [
{
"description": "Bearer <token>. The endpoint runs in OAuth mode: a client that speaks the OAuth flow needs no header at all and discovers the authorization server from the 401 challenge. A GitLab personal access token also works here, sent as 'Bearer glpat-...', which keeps clients with no OAuth flow working. It travels per request and is never stored server-side.",
"isSecret": true,
"name": "Authorization",
"placeholder": "Bearer glpat-xxxxxxxxxxxxxxxxxxxx"
}
],
"type": "streamable-http",
"url": "https://mcp.jmrp.io/gitlab"
}
],
"repository": {
"id": "1208139072",
"source": "github",
"url": "https://github.com/jmrplens/gitlab-mcp-server"
},
"title": "GitLab MCP Server",
"version": "3.3.0",
"websiteUrl": "https://docs.jmrp.io/gitlab-mcp-server"
}
},
"source": "mcp_registry",
"summary": "Go MCP server for GitLab: 2 dynamic tools reach ~876 actions on Free/CE, up to ~1103 on Ultimate."
}What the leaf hashes
{"body":"e247f465fb35918ea4e3f269caf351791a4dfc3f3d5ee7a18a343e86357bafbb","id":39395,"kind":"listing","method":"baseline/1","observed_us":1793025395744721,"prev":null,"subject":"mcp_registry:io.github.jmrplens/gitlab-mcp-server","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x48f89a19daa052e28d23236769ae3fc03c575a000aa389d536e2f1563c27873d
- 0x9fa3fd2e693d177ebb9ae5cbe8c93c03f52614239f63bd1833a09d74813b0e9f
- 0x2370f333257a1ea9e10b910c1d665bd87b517ef4e7e56c12b174666f61f19011
- 0x79623b3154c70b37fcc8f2bf3d607a73e18fdb4863cb5757541ba0fbcc57e69d
- 0x1f09467fbc418c771626555453a3d33a210fe2b4a7e7a136fff8e78bb646b3fd
- 0x1d11259e76c931d266264c2fc892459db3da318bcb4dbd2ebae9adbc4df91629
- 0x59bf64e15ae195795020cae3775c6c3e61460a1bea96678692c894445f71ace7
- 0x21df990b180946a41b9f9064a1a6934b7297ff770c1375f2a8cbea05e074eb12
- 0xdc98eed29ed428130021b2bf80d7939b8396e0d04b1a16de2d1d0c0406cc6079
- 0x1c31b9fd609755e3d960fab27bd2b1eb3a2104f15e3f9261a56d30e3613f4c01
- 0xa40c09a143bc388ccac821ec3854902941c513470a57a806c98060a6d63aedf9
- 0xee7d5711cd2515f4b08f3e4041d3d56304f9db6bffd82d82746f0f4ea43b8f26
- 0xb86fa861d04737cb507e721eefbb066d26528fdb6017b1145c18d1223b93ee21
- 0x88e326a39b26e2c125306c9d3805d14398ace088bba9a2a0aa376b811cfb201a
- 0x2be1e80e065dd6b2cc75a7142be22225acd144ac975d70bf24b4f01fd76dc497
- 0x2e6a32eb32761c210560e852405e2f865f958ddbe01027894f8b9c1b3433b9f0
- 0x9a83be955a206deb65b995adfd92c58fa31c95fbbf926bd199d300e70b08b26d
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae