Is io.github.vish288/mcp-gitlab safe to use?

io.github.vish288/mcp-gitlab has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.vish288/mcp-gitlab?

io.github.vish288/mcp-gitlab supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.vish288/mcp-gitlab?

io.github.vish288/mcp-gitlab is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

io.github.vish288/mcp-gitlab

mcp-gitlab

MCP server for GitLab API — projects, MRs, pipelines, CI/CD, approvals, issues, code review.

GitHub PyPI

No known CVEs

No license

Maintenance unknown

No commit data

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Developer Tools DevOps

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "gitlab": {
      "env": {
        "GITLAB_URL": "https://gitlab.example.com",
        "GITLAB_TOKEN": "glpat-xxxxxxxxxxxxxxxxxxxx"
      },
      "args": [
        "mcp-gitlab"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-vish288-mcp-gitlab-vish288)](https://mcppedia.org/s/io-github-vish288-mcp-gitlab-vish288)

Read me

What io.github.vish288/mcp-gitlab does

mcp-gitlab is a Model Context Protocol (MCP) server for the GitLab REST API that provides 83 tools, 7 resources, and 6 prompts for AI assistants to manage projects, merge requests, pipelines, CI/CD variables, approvals, issues, code reviews, and more. Works with Claude Desktop, Claude Code, Cursor, Windsurf, VS Code Copilot, and any MCP-compatible client.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'mcp-gitlab' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

23/100across 5 weighted dimensions

How we score →

0255075100

−77

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked mcp-gitlab against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.vish288/mcp-gitlab safe to use?: io.github.vish288/mcp-gitlab has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.vish288/mcp-gitlab?: io.github.vish288/mcp-gitlab supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.vish288/mcp-gitlab?: io.github.vish288/mcp-gitlab is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Similar servers

Others in developer-tools / devops

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.1k 2

Context797

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

59.5k 2

Supabase MCP Server97

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

Mcp Gitlab96

MCP server for using the GitLab API

1.8k 12

MCP Security Weekly

Get CVE alerts and security updates for io.github.vish288/mcp-gitlab and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools DevOps

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "gitlab": {
      "env": {
        "GITLAB_URL": "https://gitlab.example.com",
        "GITLAB_TOKEN": "glpat-xxxxxxxxxxxxxxxxxxxx"
      },
      "args": [
        "mcp-gitlab"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-vish288-mcp-gitlab-vish288)](https://mcppedia.org/s/io-github-vish288-mcp-gitlab-vish288)

Read me

What io.github.vish288/mcp-gitlab does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'mcp-gitlab' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

mcp-gitlab

mcp-gitlab is a Model Context Protocol (MCP) server for the GitLab REST API that provides 83 tools, 7 resources, and 6 prompts for AI assistants to manage projects, merge requests, pipelines, CI/CD variables, approvals, issues, code reviews, and more. Works with Claude Desktop, Claude Code, Cursor, Windsurf, VS Code Copilot, and any MCP-compatible client.

Supports GitLab.com and self-hosted GitLab instances (CE/EE). No GitLab Duo or Premium required.

Built with FastMCP, httpx, and Pydantic.

Install: uvx mcp-gitlab | PyPI | MCP Registry | Changelog

1-Click Installation

💡 Tip: For other AI assistants (Claude Code, Windsurf, IntelliJ, Gemini CLI), visit the GitLab MCP Installation Gateway.

Manual Setup Guides (Click to expand)

Prerequisite: Install uv first (required for all uvx install flows). Install uv.

Claude Code

claude mcp add gitlab -- uvx mcp-gitlab

Windsurf & IntelliJ

Windsurf: Add to ~/.codeium/windsurf/mcp_config.json IntelliJ: Add to Settings | Tools | MCP Servers

Note: The actual server config starts at gitlab inside the mcpServers object.

{
  "mcpServers": {
    "gitlab": {
      "command": "uvx",
      "args": ["mcp-gitlab"],
      "env": {
        "GITLAB_URL": "https://gitlab.example.com",
        "GITLAB_TOKEN": "glpat-xxxxxxxxxxxxxxxxxxxx"
      }
    }
  }
}

Gemini CLI

gemini mcp add -e GITLAB_URL=https://gitlab.example.com -e GITLAB_TOKEN=glpat-xxxxxxxxxxxxxxxxxxxx gitlab uvx mcp-gitlab

pip / uv

uv pip install mcp-gitlab

Configuration

Variable	Required	Default	Description
`GITLAB_URL`	Yes	-	GitLab instance URL (e.g. `https://gitlab.example.com`)
`GITLAB_TOKEN`	Yes	-	Authentication token (see below)
`GITLAB_READ_ONLY`	No	`false`	Set to `true` to disable write operations
`GITLAB_TIMEOUT`	No	`30`	Request timeout in seconds
`GITLAB_SSL_VERIFY`	No	`true`	Set to `false` to skip SSL verification

Supported Token Types

The server checks these environment variables in order — first match wins:

GITLAB_TOKEN

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

23/100across 5 weighted dimensions

How we score →

0255075100

−77

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked mcp-gitlab against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.vish288/mcp-gitlab safe to use?: io.github.vish288/mcp-gitlab has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.vish288/mcp-gitlab?: io.github.vish288/mcp-gitlab supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.vish288/mcp-gitlab?: io.github.vish288/mcp-gitlab is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.