ドキュメントに関する現在のご利用体験についてお聞かせください。アンケートにご協力ください。

GitLab Orbit MCP endpoint

Tier: Premium, Ultimate
Offering: GitLab.com, GitLab Self-Managed, GitLab Dedicated

The GitLab Orbit MCP endpoint is a Model Context Protocol (MCP) server. It gives your agent the GitLab data and code of the groups where GitLab Orbit is turned on. If your agent can run shell commands, use the CLI and the GitLab Orbit skill instead.

GitLab Orbit MCP endpoint

The endpoint is https://gitlab.com/api/v4/orbit/mcp. On GitLab Self-Managed and GitLab Dedicated, replace gitlab.com with the hostname of your instance.

Prerequisites:

GitLab Orbit is turned on for a group where you have the Reporter, Security Manager, Developer, Maintainer, or Owner role.
Your client signs in with OAuth. The endpoint asks native HTTP clients for the mcp_orbit scope. It also accepts OAuth tokens with the mcp, api, read_api, or ai_workflows scope. You can also use a personal access token.

Connect a client to the endpoint

glab orbit setup does not configure the endpoint. Add the endpoint to your client manually. Clients that support only local stdio servers connect through mcp-remote, which needs Node.js.

shell

claude mcp add --transport http gitlab-orbit https://gitlab.com/api/v4/orbit/mcp

Do not use npx mcp-remote with Claude Code. It conflicts with the built-in HTTP transport and causes Failed to connect errors. To fix a registration that uses mcp-remote, run claude mcp remove gitlab-orbit, then add the endpoint again.

shell

codex mcp add gitlab-orbit -- npx mcp-remote https://gitlab.com/api/v4/orbit/mcp

Add the endpoint to ~/.gemini/settings.json:

json
{
  "mcpServers": {
    "gitlab-orbit": {
      "url": "https://gitlab.com/api/v4/orbit/mcp",
      "type": "http",
      "timeout": 5000,
      "oauth": {
        "enabled": true,
        "scopes": ["mcp_orbit"]
      }
    }
  }
}

Without "scopes": ["mcp_orbit"], authentication fails, even when you are signed in to GitLab.

Add the endpoint to ~/.config/opencode/opencode.json:

json
{
  "mcp": {
    "gitlab-orbit": {
      "type": "local",
      "command": ["npx", "mcp-remote", "https://gitlab.com/api/v4/orbit/mcp"]
    }
  }
}

OpenCode needs "type": "local" and one array for the command and its arguments. Otherwise, it fails with ConfigInvalidError.

Add the endpoint to the MCP configuration of your client. Cursor reads ~/.cursor/mcp.json. Antigravity reads ~/.gemini/config/mcp_config.json.

json
{
  "mcpServers": {
    "gitlab-orbit": {
      "command": "npx",
      "args": ["mcp-remote", "https://gitlab.com/api/v4/orbit/mcp"]
    }
  }
}

Antigravity does not run the MCP OAuth flow for remote servers, so it needs mcp-remote. A native serverUrl entry sends no token and fails with Unauthorized. Do not add an oauth block. mcp-remote gets the mcp_orbit scope from the endpoint.

Connect with a personal access token

Clients that send custom HTTP headers can skip the OAuth sign-in. Send a personal access token with the read_api scope, or a fine-grained personal access token with the GitLab Orbit resource, in the Authorization header.

For example, in Claude Code:

shell
claude mcp add --transport http gitlab-orbit https://gitlab.com/api/v4/orbit/mcp \
  --header "Authorization: Bearer <your_access_token>"

In Codex, put the token in the GITLAB_TOKEN environment variable, then run:

shell

codex mcp add gitlab-orbit --url "https://gitlab.com/api/v4/orbit/mcp" --bearer-token-env-var GITLAB_TOKEN

Test the connection

In your agent, ask:

Use GitLab Orbit to list the 5 most recently updated projects in my group.

If your client uses OAuth, the first call opens your browser to sign in. Until you sign in, the client shows Needs authentication. Then the agent returns project names and paths.

If the browser does not open, sign in again from your client. For example, remove the gitlab-orbit server and add it again. Your client uses its own OAuth sign-in, not your glab session. For other errors, see troubleshooting.

Endpoint tools

The endpoint has two tools. list_commands lists the GitLab Orbit commands with their input schemas. invoke_command runs one of them by name:

Command	Description
`query_graph`	Runs a GQL query.
`get_graph_schema`	Returns the node types and relationship types, and the properties of the node types you pass in `expand_nodes`.
`get_response_format`	Returns the response JSON Schema of `query_graph` and its version.

Each query_graph call counts toward the GitLab Orbit query rate limit. By default, the limit is 60 requests per minute for each user, and GitLab Orbit API requests count toward the same limit. Over the limit, the endpoint returns 429 Too Many Requests with a Retry-After header.

To get the properties and relationships of a node type, pass its name in expand_nodes, for example ["MergeRequest"], or run CALL db.schema('MergeRequest') with query_graph.

Your agent writes the queries for you. For precise control, give it a complete query to run with {"command_name": "query_graph", "parameters": {"query": "<query>"}}, for example:

gql
MATCH (mr:MergeRequest)-[:IN_PROJECT]->(p:Project)
WHERE mr.state = 'opened' AND p.full_path STARTS WITH 'my-group/'
RETURN p.name, p.full_path, count(mr) AS open_mrs
ORDER BY open_mrs DESC
LIMIT 10

Replace my-group with the full path of your group.

For query recipes and the query language reference, install the GitLab Orbit skill.

GitLab Orbit tools in the GitLab MCP server

If your agent already connects to the GitLab MCP server, you can add the GitLab Orbit commands to that connection instead of a second server. The orbit toolset of the GitLab MCP server has one tool for each command, for example query_graph.

The toolset is off by default. To turn it on, add orbit to the X-Gitlab-Enabled-Mcp-Server-Toolsets header. For the header format, see select tool groups.

Was this page helpful?

GitLab Orbit MCP endpoint