@Yoda.Digital/Gitlab Mcp Server

Name: @Yoda.Digital/Gitlab Mcp Server
Author: nalyk

@yoda.digital/gitlab-mcp-server · by nalyk

GitLab MCP Server - A Model Context Protocol server for GitLab integration

50 1.4k/wk 0 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 0d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "gitlab": {
      "env": {
        "GITLAB_API_URL": "https://gitlab.com/api/v4",
        "GITLAB_PERSONAL_ACCESS_TOKEN": "your-token-here"
      },
      "args": [
        "-y",
        "@yoda.digital/gitlab-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/yoda-digital-gitlab-mcp-server)](https://mcppedia.org/s/yoda-digital-gitlab-mcp-server)

Read me

What @Yoda.Digital/Gitlab Mcp Server does

See Full Product Vision & Roadmap

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@yoda.digital/gitlab-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

57/100across 5 weighted dimensions

How we score →

0255075100

−43

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-44895medium · fixedCVSS 4

@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

## SSE Transport Has No Authentication and Wildcard CORS, Exposing All 86 GitLab Tools Including Destructive Operations A review of `mcp-gitlab-server` at commit `80a7b4cf3fba6b55389c0ef491a48190f7c8996a` uncovered that the SSE HTTP transport — advertised in the README and comparison table as a differentiating feature — runs with no authentication and wildcard CORS on every endpoint. The maintainers' own roadmap confirms auth is a known gap. When `USE_SSE=true`, the HTTP server in `src/transpo

Affected: >= 0Fixed in 0.6.0source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is @Yoda.Digital/Gitlab Mcp Server safe to use?: @Yoda.Digital/Gitlab Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install @Yoda.Digital/Gitlab Mcp Server?: @Yoda.Digital/Gitlab Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with @Yoda.Digital/Gitlab Mcp Server?: @Yoda.Digital/Gitlab Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is @Yoda.Digital/Gitlab Mcp Server actively maintained?: @Yoda.Digital/Gitlab Mcp Server is actively maintained — last commit was 0 days ago. It has 50 GitHub stars.

Similar servers

Others in developer-tools

View all →

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

5.6k 1

Supabase MCP Server97

Manage Supabase projects — databases, auth, storage, and edge functions

2.7k 4

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.6k 2

Mcp Gitlab96

MCP server for using the GitLab API

1.5k 12

MCP Security Weekly

Get CVE alerts and security updates for @Yoda.Digital/Gitlab Mcp Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

{ "mcpServers": { "gitlab": { "env": { "GITLAB_API_URL": "https://gitlab.com/api/v4", "GITLAB_PERSONAL_ACCESS_TOKEN": "your-token-here" }, "args": [ "-y", "@yoda.digital/gitlab-mcp-server" ], "command": "npx" } } }

Frequently Asked Questions

Is @Yoda.Digital/Gitlab Mcp Server safe to use?

@Yoda.Digital/Gitlab Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install @Yoda.Digital/Gitlab Mcp Server?

@Yoda.Digital/Gitlab Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with @Yoda.Digital/Gitlab Mcp Server?

@Yoda.Digital/Gitlab Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is @Yoda.Digital/Gitlab Mcp Server actively maintained?

@Yoda.Digital/Gitlab Mcp Server is actively maintained — last commit was 0 days ago. It has 50 GitHub stars.