agentmods.dev

gitlab-mcp

A local MCP (Model Context Protocol) server that connects a coding agent to GitLab, a platform for hosting code and managing software projects. It exposes GitLab operations for 26 kinds of records, such as projects or issues.

In plain words
What is it for?
Use it for GitLab tasks such as working with projects, issues, and other supported records. The description does not specify the individual operations.
Why use it?
It lets the agent work with GitLab through a single local connection instead of requiring separate integrations for each operation. It can be configured with a GitLab token, server address, and read-only setting.

MCP server for Claude CodeCodexCursorGemini CLIOpenCode

6 4d ago A scan tokens not measured fork Apache-2.0
View the source file structured-world/gitlab-mcp
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add mcp/structured-world/gitlab-mcp/gitlab-mcp-gitlab-mcp
Clone the repo
git clone --depth 1 https://github.com/structured-world/gitlab-mcp

Made for: Claude Code, Codex, Cursor, Gemini CLI, OpenCode.

Per session not measured What this adds to a session before it is invoked.
When invoked not measured Not applicable: nothing here is loaded into a session.
Security scan A 0 findings. Scan, not verified.
Origin fork From a forked repository.
Security

Grade A, and why

gitlab-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

packages/gitlab-mcp/server.json · 14 lines

What it actually says

{
  "gitlab-mcp": {
    "command": "npx",
    "args": [
      "-y",
      "@structured-world/gitlab-mcp"
    ],
    "env": {
      "GITLAB_TOKEN": "",
      "GITLAB_API_URL": "",
      "GITLAB_READ_ONLY_MODE": ""
    }
  }
}
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 14 lines scan A 3e8185779c68

Subscribe to this mod's changes

gitlab-mcp is an MCP server published in the GitHub repository structured-world/gitlab-mcp (6 stars, last pushed 4d ago), licensed Apache-2.0. Its token cost is not measured: an MCP server costs its tool schemas, not its config file. A static security scan graded it A with 0 findings. It comes from a forked repository.

Data and AILanguagesgitlabmcpmcp-servermodel-context-protocoltypescript
Related

Other mcp servers, from other repositories

gitlab-mcp

MCP server (stdio) — proxy fino sobre a REST API v4 de um GitLab CE self-hosted, focado em navegar MRs e deixar review inline. Runs locally from the @vinihcrosa/gitlab-mcp npm package.

vinihcrosa/gitlab-mcp · not measured

charlotte

Renders web pages into structured, agent-readable representations using headless Chromium. Runs locally from the @ticktockbent/charlotte npm package.

TickTockBent/charlotte · not measured

better-godot-mcp

MCP server for Godot Engine 4.x with 17 tools for scenes, scripts, and shaders. Runs locally from the @n24q02m/better-godot-mcp npm package. Needs 2 environment variables to run.

n24q02m/better-godot-mcp · not measured

mcp-server

MCP server for Zooza — class scheduling, attendance, and booking for activity businesses. Remote server at mcp.zooza.app.

zooza-dev/zooza-mcp-server · not measured

hudu-mcp

MCP server "hudu-mcp" as configured in WYRE-AI/hudu-mcp. Runs in Docker (ghcr.io/wyre-ai/hudu-mcp:v1.3.9). Needs 5 environment variables to run.

WYRE-AI/hudu-mcp · not measured

google-ai-search-mcp

Google AI search and documentation tools for MCP clients using Vertex AI or the Gemini API. Runs locally from the google-ai-search-mcp npm package. Needs 4 environment variables to run.

shariqriazz/google-ai-search-mcp · not measured