← Back to search

@zereight/mcp-gitlab

GitHub Actions Scanned 7d ago

GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more

npm ↗
D
53.8 / 100

Versions

@zereight/mcp-gitlab
2.1.45latest
Jul 29, 2026
2.1.44
Jul 29, 2026
2.1.43
Jul 26, 2026
2.1.42
Jul 19, 2026
2.1.41
Jul 19, 2026
+ show 135 moreshow less
2.1.40
Jul 16, 2026
2.1.39
Jul 16, 2026
2.1.38
Jul 14, 2026
2.1.30
Jul 5, 2026
2.1.29
Jul 3, 2026
2.1.28
Jun 29, 2026
2.1.27
Jun 22, 2026
2.1.26
Jun 21, 2026
2.1.25
Jun 20, 2026
2.1.24
Jun 18, 2026
2.1.23
Jun 17, 2026
2.1.22
Jun 15, 2026
2.1.21
Jun 14, 2026
2.1.20
Jun 12, 2026
2.1.19
Jun 11, 2026
2.1.18
May 30, 2026
2.1.17
May 30, 2026
2.1.16
May 25, 2026
2.1.15
May 24, 2026
2.1.14
May 21, 2026
2.1.13
May 20, 2026
2.1.12
May 17, 2026
2.1.11
May 13, 2026
2.1.10
May 9, 2026
2.1.9
May 7, 2026
2.1.8
May 5, 2026
2.1.7
May 5, 2026
2.1.6
May 4, 2026
2.1.5
May 3, 2026
2.1.4
Apr 26, 2026
2.1.3
Apr 24, 2026
2.1.2
Apr 18, 2026
2.1.1
Apr 18, 2026
2.1.0
Apr 12, 2026
2.0.36
Apr 5, 2026
2.0.35
Mar 31, 2026
2.0.34
Mar 22, 2026
2.0.33
Mar 17, 2026
2.0.32
Mar 15, 2026
2.0.30
Feb 18, 2026
2.0.28
Feb 17, 2026
2.0.25
Feb 8, 2026
2.0.24
Jan 18, 2026
2.0.23
Jan 14, 2026
2.0.22
Jan 4, 2026
2.0.21
Dec 20, 2025
2.0.20
Dec 20, 2025
2.0.19
Dec 20, 2025
2.0.18
Dec 20, 2025
2.0.13
Nov 24, 2025
2.0.11
Nov 6, 2025
2.0.9
Nov 4, 2025
2.0.8
Oct 26, 2025
2.0.7
Oct 11, 2025
2.0.6
Oct 7, 2025
2.0.5
Sep 9, 2025
2.0.4
Aug 30, 2025
2.0.3
Aug 17, 2025
2.0.2
Aug 15, 2025
1.0.77
Aug 15, 2025
2.0.0-beta.0
Aug 13, 2025
1.0.76
Jul 25, 2025
1.0.75
Jul 18, 2025
1.0.74
Jul 17, 2025
1.0.72
Jul 9, 2025
1.0.71
Jul 9, 2025
1.0.70
Jul 8, 2025
1.0.69
Jul 2, 2025
1.0.68
Jun 25, 2025
1.0.67
Jun 24, 2025
1.0.66
Jun 21, 2025
1.0.65
Jun 16, 2025
1.0.64
Jun 16, 2025
1.0.63
Jun 12, 2025
1.0.62
Jun 10, 2025
1.0.61
Jun 9, 2025
1.0.60
Jun 6, 2025
1.0.59
Jun 4, 2025
1.0.58
Jun 3, 2025
1.0.57
Jun 3, 2025
1.0.56
Jun 2, 2025
1.0.55
Jun 2, 2025
1.0.54
May 31, 2025
1.0.53
May 30, 2025
1.0.52
May 29, 2025
1.0.51
May 29, 2025
1.0.50
May 29, 2025
1.0.49
May 29, 2025
1.0.48
May 29, 2025
1.0.47
May 29, 2025
1.0.46
May 27, 2025
1.0.45
May 24, 2025
1.0.43
May 22, 2025
1.0.42
May 22, 2025
1.0.41
May 22, 2025
1.0.40
May 20, 2025
1.0.39
May 20, 2025
1.0.38
May 17, 2025
1.0.37
May 15, 2025
1.0.36
May 12, 2025
1.0.35
May 12, 2025
1.0.34
May 7, 2025
1.0.33
Apr 30, 2025
1.0.32
Apr 24, 2025
1.0.31
Apr 24, 2025
1.0.30
Apr 6, 2025
1.0.29
Apr 5, 2025
1.0.28
Apr 5, 2025
1.0.27
Apr 5, 2025
1.0.26
Apr 5, 2025
1.0.25
Apr 2, 2025
1.0.24
Apr 1, 2025
1.0.23
Mar 31, 2025
1.0.22
Mar 31, 2025
1.0.21
Mar 20, 2025
1.0.20
Mar 18, 2025
1.0.19
Mar 18, 2025
1.0.18
Mar 18, 2025
1.0.17
Mar 18, 2025
1.0.16
Mar 18, 2025
1.0.15
Mar 18, 2025
1.0.14
Mar 18, 2025
1.0.13
Mar 18, 2025
1.0.12
Mar 18, 2025
1.0.11
Mar 18, 2025
1.0.9
Mar 18, 2025
1.0.8
Mar 18, 2025
1.0.7
Mar 18, 2025
1.0.6
Mar 17, 2025
1.0.5
Feb 21, 2025
1.0.4
Feb 19, 2025
1.0.3
Feb 12, 2025
1.0.2
Feb 11, 2025
1.0.1
Feb 11, 2025
1.0.0
Feb 11, 2025
@rokrokss/mcp-gitlab
2.0.35latest
Mar 25, 2026
2.0.34
Mar 25, 2026
2.0.13
Mar 24, 2026
2.0.12
Mar 24, 2026
2.0.11
Nov 20, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 15

omg_select_model
annotations: none low

Recommend the best model for a task based on complexity analysis. Maps OMC model tiers (HIGH/MEDIUM/LOW) to available VS Code Copilot models.

task string
omg_next_phase
annotations: none low

Advance the omg-autopilot workflow to the next phase. Returns the new phase details.

current_phase number
omg_check_completion
annotations: none low

Check if the current workflow has incomplete tasks. Returns whether the agent should continue or can stop.

omg_get_phase_info
annotations: none low

Get information about omg-autopilot phases

phase number
omg_read_memory
annotations: none low

Read project memory entries. Optionally filter by category or key.

key string category string
omg_write_memory
annotations: none low

Write or update a project memory entry

key string value string
omg_delete_memory
annotations: none low

Delete a project memory entry by key

key string
omg_read_state
annotations: none low

Read the current state for a given OMG mode (omg-autopilot, ralph, ultrawork, ultraqa, team, self-improve)

mode string
omg_write_state
annotations: none low

Write or update state for a given OMG mode. Merges with existing state.

mode string state string
omg_clear_state
annotations: none low

Clear state for a given OMG mode or all modes

omg_list_active
annotations: none low

List all currently active OMG modes

omg_read_prd
annotations: none low

Read the current PRD (Product Requirements Document) with all stories and their status

omg_create_prd
annotations: none low

Create a new PRD with title, description, and stories

id string title string priority number description string
omg_update_story
annotations: none low

Update a story

passes boolean evidence string story_id string
omg_verify_story
annotations: none low

Get the next unverified story and its acceptance criteria for verification

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, net, node-fetch, urllib
filesystem low
Server uses filesystem capabilities via: fs sync ops, fs.promises, os, pathlib
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 53

low
Tool 'omg_select_model' has no annotations annotation_checker · 100%
low
Tool 'omg_next_phase' has no annotations annotation_checker · 100%
low
Tool 'omg_check_completion' has no annotations annotation_checker · 100%
low
Tool 'omg_get_phase_info' has no annotations annotation_checker · 100%
low
Tool 'omg_read_memory' has no annotations annotation_checker · 100%
low
Tool 'omg_write_memory' has no annotations annotation_checker · 100%
low
Tool 'omg_delete_memory' has no annotations annotation_checker · 100%
low
Tool 'omg_read_state' has no annotations annotation_checker · 100%
low
Tool 'omg_write_state' has no annotations annotation_checker · 100%
low
Tool 'omg_clear_state' has no annotations annotation_checker · 100%
low
Tool 'omg_list_active' has no annotations annotation_checker · 100%
low
Tool 'omg_read_prd' has no annotations annotation_checker · 100%
low
Tool 'omg_create_prd' has no annotations annotation_checker · 100%
low
Tool 'omg_update_story' has no annotations annotation_checker · 100%
low
Tool 'omg_verify_story' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client ID in zereight-gitlab-mcp-182ac82/test/mcp-oauth-tests.ts auth_checker · 85%
high
Hardcoded OAuth client ID in zereight-gitlab-mcp-182ac82/test/test-oauth-proxy-rate-limit.ts auth_checker · 85%
high
Hardcoded OAuth client ID in zereight-gitlab-mcp-182ac82/test/stateless/session-id-integration.test.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: form-data@4.0.0 (GHSA-fjxv-7rqg-78g4) dependency_analyzer · 95%
medium
Vulnerable dependency: form-data@4.0.0 (GHSA-hmw2-7cc7-3qxx) dependency_analyzer · 95%
medium
Buffer.from base64 in zereight-gitlab-mcp-182ac82/index.ts:2068 entropy_analyzer · 75%
medium
Buffer.from base64 in zereight-gitlab-mcp-182ac82/index.ts:9419 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in zereight-gitlab-mcp-182ac82/Formula/zereight-mcp-gitlab.rb:5 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: omg_select_model manifest_parser · 70%
info
Tool: omg_next_phase manifest_parser · 70%
info
Tool: omg_check_completion manifest_parser · 70%
info
Tool: omg_get_phase_info manifest_parser · 70%
info
Tool: omg_read_memory manifest_parser · 70%
info
Tool: omg_write_memory manifest_parser · 70%
info
Tool: omg_delete_memory manifest_parser · 70%
info
Tool: omg_read_state manifest_parser · 70%
info
Tool: omg_write_state manifest_parser · 70%
info
Tool: omg_clear_state manifest_parser · 70%
info
Tool: omg_list_active manifest_parser · 70%
info
Tool: omg_read_prd manifest_parser · 70%
info
Tool: omg_create_prd manifest_parser · 70%
info
Tool: omg_update_story manifest_parser · 70%
info
Tool: omg_verify_story manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (39) manifest_parser · 80%
medium
Hardcoded OAuth client ID in zereight-gitlab-mcp-182ac82/test/mcp-oauth-tests.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in zereight-gitlab-mcp-182ac82/test/test-oauth-proxy-rate-limit.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in zereight-gitlab-mcp-182ac82/test/stateless/session-id-integration.test.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 359 components sbom_generator · 100%
high
Authorization Bearer Token found in zereight-gitlab-mcp-182ac82/docs/configuration/dynamic-api-url.md secret_scanner · 70%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%