VERIFIED

GitLab Mr

Safety: 55/100

4.0(1)

GitLab MR MCP enables AI agents to interact with GitLab merge requests and issues, offering tools for reading, commenting, and modifying MRs.

MCP ServersDevelopmentUtilitiesSearch & WebProductivityAI & LLMFreemium

Boost this tool

Subscribe to listing upgrades or segmented pushes.

Overview

GitLab MR MCP enables AI agents to interact with GitLab merge requests and issues, offering tools for reading, commenting, and modifying MRs.

This server offers a balance of read and write capabilities for GitLab merge requests. It is relatively safe if the GitLab token is properly scoped and the AI agent using it is well-behaved. However, a compromised token or a poorly designed agent could lead to unwanted modifications of merge requests.

Performance will be affected by the size of the merge requests and the number of API calls made. Consider optimizing the AI agent's logic to minimize API calls.

Cost is primarily determined by the number of API calls made to GitLab. Monitor API usage to avoid unexpected charges.

CloudJavaScript80 starsMITCI/CD

Connections & Capabilities

Connects To

GitHubGitLab

Capabilities

ReadWrite

Client Compatibility

Claude Desktop

full

Cursor

untested

Windsurf

untested

VS Code (Copilot)

untested

Quickstart

Install

npx -y @smithery/cli@latest install @kopfrechner/gitlab-mr-mcp --client claude --config '"{\"gitlabMrMcpToken\":\"YOUR_GITLAB_TOKEN\", \"gitlabMrMcpHost\": \"YOUR_GITLAB_HOST\"}"'

Claude Desktop Config

{
  "mcpServers": {
    "gitlab-mr-mcp": {
      "command": "node",
      "args": ["/path/to/gitlab-mr-mcp/index.js"],
      "env": {
        "MR_MCP_GITLAB_TOKEN": "your_gitlab_token",
        "MR_MCP_GITLAB_HOST": "your_gitlab_host"
      }
    }
  }
}

Environment Variables

MR_MCP_GITLAB_TOKENMR_MCP_GITLAB_HOSTMR_MCP_MIN_ACCESS_LEVELMR_MCP_PROJECT_SEARCH_TERM

Tools (10)

safe

get_projects

Retrieves a list of GitLab projects accessible with the provided token.

Read-only operation, no modification of data.

safe

list_open_merge_requests

Lists all open merge requests in a specified GitLab project.

Read-only operation, no modification of data.

safe

get_merge_request_details

Retrieves detailed information about a specific merge request.

Read-only operation, no modification of data.

safe

get_merge_request_comments

Retrieves comments from a specific merge request.

Read-only operation, no modification of data.

moderate

add_merge_request_comment

Adds a general comment to a merge request.

Adds data to the merge request, but does not modify existing code or settings.

moderate

add_merge_request_diff_comment

Adds a comment to a specific line in a file within a merge request.

Adds data to the merge request, but does not modify existing code or settings.

safe

get_merge_request_diff

Retrieves the diff for a merge request.

Read-only operation, no modification of data.

safe

get_issue_details

Retrieves detailed information about a specific issue.

Read-only operation, no modification of data.

moderate

set_merge_request_title

Sets the title of a merge request.

Modifies the title of the merge request.

moderate

set_merge_request_description

Sets the description of a merge request.

Modifies the description of the merge request.

Security

Auth Method

Token

Data Locality

cloud

Scopes

apiread_api

Known Risks

!Exposure of the GitLab token if not properly secured.
!Potential for unauthorized modifications to merge requests if the token is compromised.
!Rate limiting by the GitLab API if the AI agent makes too many requests.
!Incorrect project IDs could lead to actions on the wrong repositories.
!Vulnerabilities in the server code could be exploited to gain unauthorized access.

Safety Score

moderate risk

Positive

+Requires a GitLab access token, limiting access to the token's permissions.
+No inherent code execution capabilities within the server itself.
+Granular tools allow for controlled interaction with GitLab resources.
+Provides tools for both read and write operations, enabling a balance of functionality and risk.

Risks

-Write operations can modify merge requests and add comments.
-Improperly configured GitLab token could grant excessive permissions.
-Potential for abuse if the AI agent is compromised or poorly designed.
-Relies on the security of the GitLab instance and the access token.

Use Cases

Code Review Automation

-Automatically identify potential issues in merge requests.
-Suggest improvements to code based on style guides and best practices.
-Add comments to merge requests with suggestions for improvement.

Merge Request Management

-Automatically update merge request titles and descriptions based on content.
-List open merge requests for a project.
-Fetch details of a specific merge request.

Issue Tracking

-Fetch details of a specific issue.
-Add comments to issues.
-Automatically close issues based on merge request status.

Documentation Generation

-Generate documentation from merge request diffs.
-Automatically update documentation based on code changes.
-Extract code examples from merge requests.

Who Is This For?

Best For

Automating code review processes.
Managing merge requests and issues in GitLab.
Generating documentation from code changes.
Integrating GitLab with other AI-powered tools.

Not Ideal For

Tasks requiring real-time interaction with GitLab.
Highly sensitive operations where human oversight is critical.
Environments with strict security requirements that prohibit the use of external tools.

Autonomy & Execution

Default ModeRead and Write enabled

The level of autonomy depends on how the AI agent is configured and the permissions granted to the GitLab token. Exercise caution when granting write access.

StatelessYes

Retry LogicNot documented

ConcurrencySingle-threaded

Production Tip

Monitor the rate of API calls to avoid exceeding GitLab's rate limits.

FAQ

What permissions does the GitLab token need?

The token requires 'api' and 'read_api' scopes. Additional scopes may be needed depending on the specific tasks the AI agent will perform.

How do I install this server?

You can install it manually by cloning the repository, installing dependencies, and configuring your MCP client, or automatically using Smithery.

What happens if I exceed the GitLab API rate limit?

GitLab will return an error, and the AI agent will need to handle the error and potentially retry the request later.

Can I use this server with multiple GitLab projects?

Yes, you can use it with multiple projects as long as the GitLab token has access to those projects.

Is this server secure?

The security of the server depends on the security of the GitLab token and the AI agent using it. Ensure the token is properly secured and the agent is well-behaved.

How do I troubleshoot permission issues?

Check that your GitLab token has the proper scopes, the token user has access to the projects, and the project IDs are correct.

Does this server support webhooks?

No, this server does not appear to have explicit webhook support based on the documentation.

Key Features

Development Utilities Search & Web Productivity AI & LLM

Metrics

Discovered2/14/2026

Reviews1

Saved By0 users

Related Tools

GitLab Mr | AI Builder Hub Review & Alternatives | Flaex AI