Model Context Protocol moderate risk

GitLab Mr

GitLab MR MCP enables AI agents to interact with GitLab merge requests and issues, offering tools for reading, commenting, and modifying MRs.

Connections & Capabilities

Connects To

GitHubGitLab

Capabilities

readwrite

Quickstart

Install

npx -y @smithery/cli@latest install @kopfrechner/gitlab-mr-mcp --client claude --config '"{\"gitlabMrMcpToken\":\"YOUR_GITLAB_TOKEN\", \"gitlabMrMcpHost\": \"YOUR_GITLAB_HOST\"}"'

Config

{
  "mcpServers": {
    "gitlab-mr-mcp": {
      "command": "node",
      "args": ["/path/to/gitlab-mr-mcp/index.js"],
      "env": {
        "MR_MCP_GITLAB_TOKEN": "your_gitlab_token",
        "MR_MCP_GITLAB_HOST": "your_gitlab_host"
      }
    }
  }
}

Exposed MCP Tools (10)

safe

get_projects

Retrieves a list of GitLab projects accessible with the provided token.

Read-only operation, no modification of data.

safe

list_open_merge_requests

Lists all open merge requests in a specified GitLab project.

Read-only operation, no modification of data.

safe

get_merge_request_details

Retrieves detailed information about a specific merge request.

Read-only operation, no modification of data.

safe

get_merge_request_comments

Retrieves comments from a specific merge request.

Read-only operation, no modification of data.

moderate

add_merge_request_comment

Adds a general comment to a merge request.

Adds data to the merge request, but does not modify existing code or settings.

moderate

add_merge_request_diff_comment

Adds a comment to a specific line in a file within a merge request.

Adds data to the merge request, but does not modify existing code or settings.

safe

get_merge_request_diff

Retrieves the diff for a merge request.

Read-only operation, no modification of data.

safe

get_issue_details

Retrieves detailed information about a specific issue.

Read-only operation, no modification of data.

moderate

set_merge_request_title

Sets the title of a merge request.

Modifies the title of the merge request.

moderate

set_merge_request_description

Sets the description of a merge request.

Modifies the description of the merge request.

Safety Assessment

This server offers a balance of read and write capabilities for GitLab merge requests. It is relatively safe if the GitLab token is properly scoped and the AI agent using it is well-behaved. However, a compromised token or a poorly designed agent could lead to unwanted modifications of merge requests.

Requires a GitLab access token, limiting access to the token's permissions.
No inherent code execution capabilities within the server itself.
Granular tools allow for controlled interaction with GitLab resources.
Provides tools for both read and write operations, enabling a balance of functionality and risk.

Write operations can modify merge requests and add comments.
Improperly configured GitLab token could grant excessive permissions.
Potential for abuse if the AI agent is compromised or poorly designed.
Relies on the security of the GitLab instance and the access token.