← Back to search

@yoda.digital/gitlab-mcp-server

GitHub Actions Scanned 9d ago

GitLab MCP Server - A Model Context Protocol server for GitLab integration

npm ↗
? Not scanned yet

Versions

0.9.1latest
May 27, 2026
0.9.0
May 27, 2026
0.8.1
May 20, 2026
0.8.0
May 18, 2026
0.7.2
May 18, 2026
+ show 35 moreshow less
0.7.1
May 18, 2026
0.7.0
May 6, 2026
0.6.0
May 6, 2026
0.5.1
May 5, 2026
0.5.0
May 4, 2026
0.4.0
May 4, 2026
0.3.2
May 4, 2026
0.3.1
Apr 24, 2026
0.3.0
Feb 12, 2026
0.2.10
Apr 10, 2025
0.2.9
Apr 9, 2025
0.2.8
Apr 6, 2025
0.2.7
Apr 3, 2025
0.2.6
Mar 31, 2025
0.2.5
Mar 28, 2025
0.2.4
Mar 24, 2025
0.2.3
Mar 24, 2025
0.2.2
Mar 24, 2025
0.2.0
Mar 24, 2025
0.1.16
Mar 19, 2025
0.1.15
Mar 19, 2025
0.1.13
Mar 19, 2025
0.1.12
Mar 18, 2025
0.1.11
Mar 18, 2025
0.1.10
Mar 18, 2025
0.1.9
Mar 18, 2025
0.1.8
Mar 18, 2025
0.1.7
Mar 18, 2025
0.1.6
Mar 18, 2025
0.1.5
Mar 18, 2025
0.1.4
Mar 18, 2025
0.1.3
Mar 18, 2025
0.1.2
Mar 18, 2025
0.1.1
Mar 18, 2025
0.1.0
Mar 18, 2025

Tools 0

No tools indexed yet.

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 22

medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.9.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.16 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.9.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Buffer.from base64 in yoda-digital-mcp-gitlab-server-177adc8/src/gitlab-api.ts:351 entropy_analyzer · 75%
medium
Buffer.from base64 in yoda-digital-mcp-gitlab-server-177adc8/src/gitlab-api.ts:1188 entropy_analyzer · 75%
medium
Buffer.from base64 in yoda-digital-mcp-gitlab-server-177adc8/src/gitlab-api.ts:1458 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (14) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 279 components sbom_generator · 100%
high
Hardcoded Password found in yoda-digital-mcp-gitlab-server-177adc8/CONTRIBUTING.md secret_scanner · 65%
high
Hardcoded Password found in yoda-digital-mcp-gitlab-server-177adc8/e2e/Dockerfile secret_scanner · 65%
high
Hardcoded Password found in yoda-digital-mcp-gitlab-server-177adc8/e2e/docker-compose.yml secret_scanner · 65%
high
Hardcoded Password found in yoda-digital-mcp-gitlab-server-177adc8/e2e/README.md secret_scanner · 65%
high
Hardcoded Password found in yoda-digital-mcp-gitlab-server-177adc8/docs/plans/2026-05-18-full-resolution-megasession.md secret_scanner · 65%
high
Hardcoded Password found in yoda-digital-mcp-gitlab-server-177adc8/.github/workflows/e2e.yml secret_scanner · 65%