Report this installed MCP runtime's versions, deployment mode, and deterministic registered-tool inventory fingerprint without exposing credentials or general environment values.

Discover the connected GitLab instance, identity, token metadata, API support, permissions, licensing, and configuration evidence using read-only probes.

Return the profile and identity associated with the connected GitLab token.

List groups visible to the connected user, including membership, ownership, access-level, and search filters.

Get one GitLab group or namespace with visibility, project, sharing, and permission metadata.

List projects in a GitLab group with subgroup, membership, visibility, archive, search, and ordering filters.

List direct, inherited, and invited members of a GitLab group.

Get one direct or inherited group member and their effective access level.

Search globally, within a group, or within a project. Supported scopes include projects, issues, merge requests, users, commits, blobs, notes, milestones, and work items; availability depends on GitLab tier and search configuration.

Search accessible GitLab projects by name, path, or description. Use this to resolve an ambiguous project before other calls.

Get repository, namespace, default branch, visibility, permissions, and feature metadata for one GitLab project.

List direct and inherited project members, optionally filtering by username or name.

List labels available in a GitLab project.

Get one direct or inherited project member and their effective access level.

List recent issues across all projects visible to the connected user, with account-wide triage filters.

List or search issues in one GitLab project with common triage filters.

Get one GitLab issue with labels, assignees, milestone, task status, and links.

Create a GitLab issue with optional description, assignees, labels, milestone, due date, and confidentiality.

Update issue metadata, assignees, labels, milestone, confidentiality, or open/closed state.

List user and system notes on one GitLab issue in chronological or reverse order.

Add a top-level comment to a GitLab issue as the authenticated user.

Replace the body of an existing GitLab issue comment.

Permanently delete a GitLab issue comment.

List emoji reactions on a GitLab issue or one of its comments.

Add an emoji reaction to a GitLab issue or to one of its comments.

Remove an emoji reaction from a GitLab issue or issue comment by award ID.

List or search merge requests in one GitLab project with common review and triage filters.

Get merge request metadata, branches, participants, mergeability, pipeline, approvals, and discussion status.

Open a GitLab merge request from an existing source branch. Draft merge requests are supported.

Update merge request metadata, branches, assignees, reviewers, labels, draft/ready title state, or open/closed state.

Merge a GitLab merge request now or when its pipeline succeeds. This changes the target branch.

Enqueue a GitLab rebase for the merge request source branch. Use get_merge_request with include_rebase_in_progress to poll the result. Only available when the source branch is a fast-forward of the target.

Get approval rules, approvals received, approvals still required, and eligible approvers.

Submit the authenticated user's approval for a GitLab merge request.

Remove the authenticated user's approval from a GitLab merge request.

Return changed files and patch hunks for a GitLab merge request.

Find one exact changed path across paginated merge-request diffs and return its patch metadata and hunks.

List commits contained in a GitLab merge request.

List pipelines associated with a GitLab merge request.

List complete GitLab merge request discussion threads, including resolution state and diff positions.

Create a top-level or inline review thread on a GitLab merge request. Inline comments require the latest diff version SHAs and file position.

Reply to an existing GitLab merge request review thread.

Resolve or reopen a GitLab merge request review thread.

Replace the body of a note or reply inside a GitLab merge request discussion.

Permanently delete a note or reply from a GitLab merge request discussion.

Apply a single GitLab code suggestion by its suggestion ID. Performs preflight validation: confirms the suggestion belongs to the specified project/MR, is still applicable, has not already been applied, and that the MR head SHA matches the caller's expected value. Uses the Suggestions API at PUT /suggestions/:id/apply. Returns the suggestion state including applicable and applied flags. An explicit acknowledgement is required to apply. Note: GitLab's apply endpoint does not accept an expected-head parameter, so a TOCTOU race is possible between preflight and mutation; the server remains authoritative at mutation time.

Apply multiple GitLab code suggestions in a single commit using the batch Suggestions API at PUT /suggestions/batch_apply. Performs preflight validation on every suggestion before any mutation: confirms each belongs to the specified project/MR, is still applicable, has not already been applied, and that the MR head SHA matches the caller's expected value. If any suggestion is invalid the entire batch is rejected before calling GitLab's batch-apply endpoint. Returns an array of suggestion states. An explicit acknowledgement is required. Note: GitLab's batch-apply endpoint does not accept an expected-head parameter, so a TOCTOU race is possible between preflight and mutation; the server remains authoritative at mutation time.

List emoji reactions on a GitLab merge request or one of its notes.

Add an emoji reaction to a GitLab merge request or one of its notes.

Remove an emoji reaction from a GitLab merge request or note by award ID.

List files and directories in a GitLab repository at a branch, tag, or commit.

Search blobs in a specific GitLab project. Use plain code terms, filenames, symbols, or error text.

Fetch repository blob content by Git object SHA. UTF-8 text is decoded by default; binary content remains bounded base64.

Fetch one repository file at a ref. Text is decoded from base64 by default; binary or unusually large content stays base64.

Fetch bounded UTF-8 repository-file content from a same-instance GitLab blob, raw, or repository-files API URL.

Download a same-instance GitLab issue or merge-request upload as bounded base64 data. Only GitLab upload paths are accepted.

Create a new UTF-8 or base64 repository file and commit it to an existing branch.

Replace a repository file and commit the change. Supply last_commit_id to prevent overwriting a concurrent edit.

Delete a repository file and commit the deletion. Supply last_commit_id to guard against concurrent edits.

List or search branches in a GitLab project.

Create a branch from an existing branch, tag, or commit SHA.

Delete a GitLab repository branch. Protected branches cannot be deleted through this operation.

List commits for a project, optionally scoped to a ref, path, or time range.

Fetch a GitLab commit and its optional diff statistics.

Compare two branches, tags, or commits and return commits plus per-file diffs.

Return the files and patch hunks changed by one GitLab commit.

Create one GitLab commit containing non-destructive atomic create, update, move, or chmod actions. update and move require a per-file last_commit_id to guard against concurrent overwrites. Do not supply both start_branch and start_sha; use start_branch for new-branch creation only.

Create one GitLab commit that can delete files or force a branch update. For ordinary updates, the branch tip must match start_sha before the commit is submitted; forced updates use start_sha as GitLab's explicit replacement parent. Delete actions also require last_commit_id.

List project pipelines by status, ref, source, user, or update time.

Create a GitLab pipeline for a ref with bounded structured inputs or variables. Variable values are sent only to GitLab and are omitted from the normalized response. Input values may be strings, numbers, booleans, arrays, or objects — bounded by depth, length, and size limits.

Get the latest pipeline for a project ref.

Get bounded test-suite and test-case results for one pipeline.

Get aggregate test-report counts and pass/fail/error totals for one pipeline.

List bridge jobs for a pipeline to discover downstream child or multi-project pipelines.

Get one pipeline with status, duration, coverage, ref, user, and timestamps.

List jobs in a GitLab pipeline, including stages, status, runner, artifacts, and failure reason.

Get detailed status, runner, artifacts, timestamps, commit, and pipeline information for one CI job.

List recent jobs across all pipelines in a GitLab project.

Retrieve the plain-text trace for a GitLab CI job, up to the configured response safety limit.

Download one file from a GitLab job artifact archive as base64, subject to a strict size limit.

Download a GitLab job's complete artifact ZIP archive as bounded base64 data.

Retry failed or canceled jobs in a GitLab pipeline.

Cancel all cancelable jobs in a running GitLab pipeline.

Retry a failed or canceled GitLab CI job.

Cancel a pending or running GitLab CI job.

Start a manual GitLab CI job.

List runners available to a project without returning runner authentication tokens or CI variables.

Validate GitLab CI YAML in project context and return status, errors, warnings, and jobs without returning merged YAML or protected variables.

List CI and external status checks attached to a GitLab commit.

Create or update an external GitLab commit status for a ref.

Inspect protected-branch access policy for a GitLab project.

Inspect one protected branch and its push, merge, unprotect, and code-owner approval policy.

Create protected-branch policy after a capability preflight. An explicit acknowledgement and unprotect rule are required to avoid accidental lockout.

Update protected-branch policy only after reading the current policy. An explicit acknowledgement and unprotect rule are required.

Remove protected-branch policy only after reading the current policy and explicitly acknowledging the destructive governance change.

Inspect protected-tag create-access policy for a GitLab project.

Inspect one protected tag and its create-access policy.

Create a protected-tag policy after a capability preflight. An explicit acknowledgement is required to prevent accidental governance changes.

Remove a protected-tag policy only after reading the current policy and explicitly acknowledging the destructive governance change.

List project-level merge-request approval rules and eligible approvers.

Get one project-level merge-request approval rule by ID.

Create a merge-request approval rule after a capability preflight. The explicit acknowledgement prevents accidental governance changes.

Update a project approval rule only after reading the current rule and explicitly acknowledging the governance change.

Delete a project approval rule only after reading it and explicitly acknowledging the destructive governance change.

List Git tags and release metadata for a project.

Get one Git tag and its associated release metadata.

Create a Git tag from a branch, ref, or commit SHA.

Delete a Git tag. This does not delete a release with the same tag name.

List GitLab releases for a project.

Get one GitLab release by tag name.

Create a GitLab release and optionally create its tag from a ref.

Update the metadata or assets of an existing GitLab release.

Delete release metadata without deleting the Git tag with the same name.

List external asset links attached to a GitLab release.

Get one external asset link attached to a GitLab release.

Attach an external asset link to a GitLab release.

Update an external asset link attached to a GitLab release.

Delete an external asset link from a GitLab release.

List project pipeline schedules without exposing schedule variable values.

Get one pipeline schedule without exposing schedule variable values.

Create a project pipeline schedule.

Update a project pipeline schedule.

Create a pipeline schedule variable without returning its value.

Update a pipeline schedule variable without returning its value.

Delete a pipeline schedule variable without returning its former value.

Delete a project pipeline schedule.

Run a project pipeline schedule immediately.

Make the current GitLab user the owner of a pipeline schedule.

List project CI/CD variable metadata without exposing variable values.

Get project CI/CD variable metadata without exposing its value.

Create a project CI/CD variable without returning its value.

Update a project CI/CD variable without returning its value.

Delete a project CI/CD variable without returning its former value.

List group CI/CD variable metadata without exposing variable values.

Get group CI/CD variable metadata without exposing its value.

Create a group CI/CD variable without returning its value.

Update a group CI/CD variable without returning its value.

Delete a group CI/CD variable without returning its former value.

List all environments for a project, optionally filtered by name, search term, or state (available, stopping, stopped).

Retrieve a single environment by its numeric ID.

List deployments for a project with status, environment, ordering, and time-range filters. Pagination is bounded to 100 per page.

Retrieve a single deployment with status, environment, deployable, pipeline, and (on Premium/Ultimate) approval summary information.

Retrieve the approval status for a deployment, including approval rules and individual approval decisions. Requires GitLab Premium or Ultimate with protected-environment approval rules configured. On Free or non-protected environments the approval fields may be absent.

List project webhook configurations. Secret tokens and secret custom headers are never exposed.

Get one project webhook configuration by ID. Secret tokens and secret custom headers are never exposed.

List recent delivery events for a specific project webhook. Response body contents are never exposed; only presence and size metadata are returned. Header secrets are redacted.

Get one webhook delivery event by ID. Searches through GitLab's documented event-list endpoint (events from the past 7 days only). Inspects at most 10 pages (1,000 events). Not a direct event lookup — the event must appear in the paginated list. Response body contents are never exposed; only presence and size metadata are returned. Header secrets are redacted.