← Back to search Server uses network capabilities via: fetch(), net Server uses filesystem capabilities via: fs, fs sync ops, path Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync() Server uses env_vars capabilities via: process.env
@structured-world/gitlab-mcp
Advanced GitLab MCP server
? Not scanned yet
Versions
@structured-world/gitlab-mcp9.1.1latestJun 22, 2026
9.1.0Jun 7, 2026
9.0.1Jun 7, 2026
9.0.0Jun 7, 2026
8.0.0Jun 5, 2026
+ show 132 moreshow less
7.7.0Jun 4, 2026
7.6.0Jun 3, 2026
7.5.0Jun 2, 2026
7.4.0Jun 2, 2026
7.3.0May 23, 2026
7.2.0Apr 11, 2026
7.1.0Apr 7, 2026
7.0.2Apr 7, 2026
7.0.1Apr 6, 2026
6.62.2Mar 29, 2026
6.62.1Mar 1, 2026
6.62.0Feb 16, 2026
6.61.0Feb 13, 2026
6.60.3Feb 7, 2026
6.60.2Feb 6, 2026
6.60.1Feb 6, 2026
6.60.0Feb 6, 2026
6.59.2Feb 6, 2026
6.59.1Feb 5, 2026
6.59.0Feb 5, 2026
6.58.1Feb 5, 2026
6.58.0Feb 5, 2026
6.57.0Feb 5, 2026
6.56.0Feb 4, 2026
6.55.1Feb 4, 2026
6.55.0Feb 4, 2026
6.54.0Feb 4, 2026
6.53.1Feb 4, 2026
6.53.0Feb 4, 2026
6.52.0Feb 4, 2026
6.51.0Feb 2, 2026
6.50.0Jan 27, 2026
6.49.0Jan 26, 2026
6.48.2Jan 26, 2026
6.48.1Jan 25, 2026
6.48.0Jan 25, 2026
6.47.1Jan 25, 2026
6.47.0Jan 25, 2026
6.46.1Jan 25, 2026
6.46.0Jan 25, 2026
6.45.1Jan 25, 2026
6.45.0Jan 25, 2026
6.44.0Jan 25, 2026
6.43.1Jan 25, 2026
6.43.0Jan 25, 2026
6.42.1Jan 25, 2026
6.42.0Jan 25, 2026
6.41.4Jan 24, 2026
6.41.3Jan 24, 2026
6.41.2Jan 24, 2026
6.41.1Jan 24, 2026
6.41.0Jan 24, 2026
6.40.0Jan 24, 2026
6.39.0Jan 24, 2026
6.38.1Jan 24, 2026
6.38.0Jan 24, 2026
6.37.0Jan 24, 2026
6.36.0Jan 23, 2026
6.35.0Jan 23, 2026
6.34.1Jan 23, 2026
6.34.0Jan 23, 2026
6.33.3Jan 23, 2026
6.33.2Jan 23, 2026
6.33.1Jan 23, 2026
6.33.0Jan 23, 2026
6.32.0Jan 23, 2026
6.31.2Jan 23, 2026
6.31.1Jan 23, 2026
6.31.0Jan 23, 2026
6.30.1Jan 23, 2026
6.30.0Jan 22, 2026
6.29.1Jan 22, 2026
6.29.0Jan 22, 2026
6.28.0Jan 22, 2026
6.27.1Jan 22, 2026
6.27.0Jan 22, 2026
6.26.1Jan 22, 2026
6.26.0Jan 22, 2026
6.25.0Jan 22, 2026
6.24.1Jan 21, 2026
6.24.0Jan 21, 2026
6.23.2Jan 21, 2026
6.23.1Jan 21, 2026
6.23.0Jan 21, 2026
6.22.0Jan 21, 2026
6.21.0Jan 21, 2026
6.20.0Jan 21, 2026
6.19.0Jan 21, 2026
6.18.0Jan 21, 2026
6.17.0Jan 20, 2026
6.16.0Jan 20, 2026
6.15.0Jan 20, 2026
6.14.0Jan 20, 2026
6.13.0Jan 20, 2026
6.12.0Jan 20, 2026
6.11.0Jan 20, 2026
6.10.0Jan 20, 2026
6.9.0Jan 19, 2026
6.8.0Jan 19, 2026
6.7.0Jan 19, 2026
6.6.0Jan 19, 2026
6.5.0Jan 19, 2026
6.4.1Jan 19, 2026
6.4.0Jan 19, 2026
6.3.1Jan 19, 2026
6.3.0Jan 19, 2026
6.2.3Jan 19, 2026
6.2.2Jan 19, 2026
6.2.1Jan 19, 2026
6.2.0Jan 19, 2026
6.1.0Jan 19, 2026
6.0.0Jan 19, 2026
5.8.0Nov 26, 2025
5.7.0Sep 23, 2025
5.6.1Sep 23, 2025
5.6.0Sep 21, 2025
5.5.0Sep 21, 2025
5.4.0Sep 21, 2025
5.3.0Sep 21, 2025
5.2.0Sep 19, 2025
5.1.0Sep 19, 2025
4.5.0Sep 19, 2025
4.4.0Sep 18, 2025
4.3.3Sep 18, 2025
4.3.2Sep 18, 2025
4.3.1Sep 17, 2025
4.3.0Sep 17, 2025
4.2.1Sep 17, 2025
4.2.0Sep 17, 2025
4.1.1Sep 17, 2025
4.1.0Sep 17, 2025
4.0.0Sep 16, 2025
gitlab-core-mcp6.62.2latestApr 9, 2026
6.62.1Mar 29, 2026
gitlab-mcp-test6.62.1latestMar 28, 2026
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 27
info
Transport: streamable-http
high
Hardcoded OAuth client secret in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/src/config/instances-loader.ts
high
Hardcoded OAuth client secret in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/tests/unit/config/instances-schema.test.ts
high
Hardcoded OAuth client secret in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/tests/unit/cli/instances/instances-command.test.ts
info
Sandbox failed to start for behavioral verification
medium
Buffer.from base64 in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/src/entities/files/registry.ts:284
medium
Buffer.from base64 in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/tests/unit/cli/init/config-generator.test.ts:220
info
package.json metadata
info
Required env vars (174)
high
Deprecated implicit grant flow in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/tests/unit/oauth/endpoints/authorize.test.ts
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 39 components
high
Hardcoded Password found in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/src/utils/fetch.ts
critical
Database URL with Password found in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/src/cli/docker/docker-utils.ts
critical
Database URL with Password found in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/docs/deployment/docker-postgres.md
critical
Database URL with Password found in structured-world-gitlab-mcp-496a31d/packages/gitlab-mcp/docs/deployment/docker-compose.md
critical
AWS Access Key ID found in structured-world-gitlab-mcp-496a31d/.yarn/releases/yarn-4.12.0.cjs
high
Generic API Key Assignment found in structured-world-gitlab-mcp-496a31d/.yarn/releases/yarn-4.12.0.cjs
high
Hardcoded Password found in structured-world-gitlab-mcp-496a31d/.yarn/releases/yarn-4.12.0.cjs
critical
AWS Access Key ID found in structured-world-gitlab-mcp-496a31d/.yarn/releases/yarn-4.13.0.cjs
high
Generic API Key Assignment found in structured-world-gitlab-mcp-496a31d/.yarn/releases/yarn-4.13.0.cjs
high
Hardcoded Password found in structured-world-gitlab-mcp-496a31d/.yarn/releases/yarn-4.13.0.cjs
medium
No build provenance detected (SLSA L0)