← Back to search

gitlab-mcp

GitHub Actions Scanned 13d ago

A MCP server for GitLab

npm ↗
C
66 / 100

Versions

1.6.1latest
Jul 11, 2026
1.6.0
Jul 10, 2026
1.5.1
May 28, 2026
1.5.0
May 25, 2026
1.4.1
Apr 25, 2026
+ show 13 moreshow less
1.4.0
Apr 11, 2026
1.3.0
Mar 31, 2026
1.2.1
Feb 26, 2026
1.2.0
Feb 24, 2026
1.1.0
Feb 13, 2026
1.0.0
Feb 13, 2026
0.1.5
May 14, 2025
0.1.4
Apr 14, 2025
0.1.3
Apr 13, 2025
0.1.2
Apr 13, 2025
0.1.1
Apr 13, 2025
0.1.0
Apr 13, 2025
0.0.1
Mar 26, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

health_check
annotations: none low

Return server liveness and current timestamp.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 28

low
Tool 'health_check' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in mcpland-gitlab-mcp-a5a3fd2/tests/mcp-oauth-provider.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in mcpland-gitlab-mcp-a5a3fd2/tests/oauth.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Buffer.from base64 in mcpland-gitlab-mcp-a5a3fd2/tests/gitlab-client.test.ts:804 entropy_analyzer · 75%
medium
Buffer.from base64 in mcpland-gitlab-mcp-a5a3fd2/tests/gitlab-client.test.ts:1766 entropy_analyzer · 75%
medium
Buffer.from base64 in mcpland-gitlab-mcp-a5a3fd2/tests/gitlab-client.test.ts:2013 entropy_analyzer · 75%
medium
Buffer.from base64 in mcpland-gitlab-mcp-a5a3fd2/src/tools/mr-code-context.ts:402 entropy_analyzer · 75%
medium
Buffer.from base64 in mcpland-gitlab-mcp-a5a3fd2/src/tools/gitlab.ts:8194 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: health_check manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
high
High-risk OAuth scope: sudo oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 28 components sbom_generator · 100%
high
Authorization Bearer Token found in mcpland-gitlab-mcp-a5a3fd2/README.md secret_scanner · 70%
high
Authorization Bearer Token found in mcpland-gitlab-mcp-a5a3fd2/docs/deployment.md secret_scanner · 70%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%