1.26+ | | MCP SDK | `github.com/modelcontextprotocol/go-sdk` v1.6.0 | | GitLab Client | `gitlab.com/gitlab-org/api/client-go/v2` v2.24.1 | | Transport | stdio (default), HTTP (Streamable HTTP) | ## Building from Source ```bash git clone https://github.com/jmrplens/gitlab-mcp-server.git cd gitlab-mcp-server make build ``` See the [Development Guide](docs/development/development.md) for cross-compilation and contributing guidelines. ## Container Image The published image is `ghcr.io/jmrplens/gitlab-mcp-server:latest`. Runtime examples live in [Quick Start](#quick-start) next to MCP client configuration, and Docker Compose/source-build details live in the [Development Guide](docs/development/development.md#docker). ## FAQ

Does it work with self-hosted GitLab?

Yes. Set `GITLAB_URL` to your instance URL. When `GITLAB_URL` is omitted, stdio mode uses `https://gitlab.com`. Self-signed TLS certificates are supported via `GITLAB_SKIP_TLS_VERIFY=true`.

Is my data safe?

The server runs locally on your machine (stdio mode) or on your own infrastructure (HTTP mode). No data is sent to third parties — all API calls go directly to your GitLab instance. See SECURITY.md for details.

Can I use it in read-only mode?

Yes. Set `GITLAB_READ_ONLY=true` to disable all mutating tools (create, update, delete). Only read operations will be available. Alternatively, set `GITLAB_SAFE_MODE=true` for a dry-run mode: mutating tools remain visible but return a structured JSON preview instead of executing. Useful for auditing, training, or reviewing what an AI assistant would do.

What GitLab editions are supported?

Both Community Edition (CE) and Enterprise Edition (EE). Set `GITLAB_ENTERPRISE=true` in stdio mode to enable additional tools for Premium/Ultimate features (DORA metrics, vulnerabilities, compliance, etc.). In HTTP mode, `--enterprise` can force the Enterprise/Premium catalog, otherwise CE/EE is detected per token+URL pool entry when GitLab reports edition.

How does it handle rate limiting?

The server includes retry logic with backoff for GitLab API rate limits. Errors are classified as transient (retryable) or permanent, with actionable hints in error messages.

Which AI clients are supported?

Any MCP-compatible client: VS Code + GitHub Copilot, Claude Desktop, Cursor, Claude Code, Windsurf, JetBrains IDEs, Zed, Kiro, and others. The built-in setup wizard can auto-configure most clients.

## Contributing See [CONTRIBUTING.md](CONTRIBUTING.md) for development guidelines, branch naming, commit conventions, and pull request process. ## Security See [SECURITY.md](SECURITY.md) for the security policy and vulnerability reporting. ## Code of Conduct See [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md). This project follows the [Contributor Covenant v2.1](https://www.contributor-covenant.org/version/2/1/code_of_conduct/). ## Unnecessary Statistics Numbers nobody asked for, but here they are anyway. ### File counts | Category | Files | Lines | | --- | ---: | ---: | | Source (`.go`, non-test) | 655 | 138,992 | | Unit tests (`_test.go`) | 418 | 223,956 | | End-to-end tests | 111 | 24,022 | | **Total** | **1,184** | **386,970** | ### Functions | Category | Count | | --- | ---: | | Source functions | 4,199 | | — exported (public) | 2,265 | | — unexported (private) | 1,934 | | Unit test functions (`TestXxx`) | 9,264 | | Subtests (`t.Run(...)`) | 2,012 | | End-to-end test functions | 248 | ### Ratios worth noting | Observation | Value | | --- | ---: | | Test lines vs source lines | 1.61× more tests than code | | Average source file length | ~21

Gitlab Mcp Server

Comments