Version Control MCP Server

MCP Gitlab

Name: MCP Gitlab
Author: crunchtools

Secure MCP server for GitLab projects, merge requests, issues, and pipelines

Scan found nothing by crunchtools0AGPL-3.0PythonIntermediatestdio

Install

Claude Code

claude mcp add crunchtools-mcp-gitlab -- uvx gitlab

Cursor

{
  "mcpServers": {
    "crunchtools-mcp-gitlab": {
      "command": "uvx",
      "args": [
        "gitlab"
      ]
    }
  }
}

VS Code

{
  "mcp": {
    "servers": {
      "crunchtools-mcp-gitlab": {
        "command": "uvx",
        "args": [
          "gitlab"
        ]
      }
    }
  }
}

Windsurf

{
  "mcpServers": {
    "crunchtools-mcp-gitlab": {
      "command": "uvx",
      "args": [
        "gitlab"
      ]
    }
  }
}

Claude Desktop

{
  "mcpServers": {
    "crunchtools-mcp-gitlab": {
      "command": "uvx",
      "args": [
        "gitlab"
      ]
    }
  }
}

Safety Report

71% Scan found nothing

Scanned 5 months ago

5 passed 2 warnings

Security

Authentication

details

Weak auth signals: env_required

Warning

CORS Policy

details

No CORS-relevant transport detected (likely stdio)

N/A

Rate Limiting

details

Rate limiting detected: rate_limit_middleware

Pass

Known CVEs

details

No known CVEs in dependencies

Pass

Code Quality

Dependency Audit

details

No known vulnerable dependencies detected

Pass

Dangerous Patterns

details

No dangerous code patterns detected

Pass

License

details

License: AGPL-3.0

Pass

Community

Maintenance Status

details

Last commit 5 months ago

Warning

Learn about our security methodology →

Compatibility

Claude CodeFull support

Tested

CursorFull support

Tested

VS CodeFull support via Copilot

Tested

WindsurfFull support

Tested

Claude DesktopFull support

Tested

Frequently Asked Questions

What is MCP Gitlab?

Secure MCP server for GitLab projects, merge requests, issues, and pipelines

Is MCP Gitlab safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone MCP Gitlab and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. None of them matched. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to MCP Gitlab?

Similar MCP servers include Github MCP Server, MCP Server Azure Devops, Gitlab Mr MCP. Each serves a similar purpose but may differ in features, language, and compatibility.

Similar MCP Servers

Github MCP Server

Scan found nothing

by github

Official GitHub server for integration with repository management, PRs, issues, and more.

version control Go stdiostreamable-http

27.9k 6 tools

View

MCP Server Azure Devops

Scan found nothing

by Tiberriver256

Azure DevOps integration for repository management, work items, and pipelines.

version control TypeScript stdio

347

View

Gitlab Mr MCP

Scan found nothing

by kopfrechner

Interact seamlessly with issues and merge requests of your GitLab projects.

version control JavaScript stdio

View

Was this helpful?

Free AI writing tools

Check a draft for AI tells, then fix what the check finds.

AI Humanizer

make the text read naturally

AI Detector

Free, unlimited

Stay Updated on MCP Servers

New servers, safety alerts, and install guides — weekly.