GitLab MCP server

With the GitLab Model Context Protocol (MCP) server, you can securely connect AI tools and applications to your GitLab instance. AI assistants like Claude Desktop, Claude Code, Cursor, and other MCP-compatible tools can then access your GitLab data and perform actions on your behalf.

The GitLab MCP server provides a standardized way for AI tools to:

• Access GitLab project information.
• Retrieve issue and merge request data.
• Interact with GitLab APIs securely.
• Perform GitLab-specific operations through AI assistants.

The GitLab MCP server supports OAuth 2.0 Dynamic Client Registration, which enables AI tools to register themselves with your GitLab instance. When an AI tool connects to your GitLab MCP server for the first time, it:

1. Registers itself as an OAuth application.
2. Requests authorization to access your GitLab data.
3. Receives an access token for secure API access.

For a click-through demo, see GitLab Duo Agent Platform - GitLab MCP server.

Prerequisites

• Allow access to the MCP server:
  • On GitLab.com, for the top-level group.
  • On GitLab Self-Managed and GitLab Dedicated, for the instance.

Connect a client to the GitLab MCP server

The GitLab MCP server supports two transport types:

• HTTP transport (recommended): Direct connection without additional dependencies.
• stdio transport with mcp-remote: Connection through a proxy (requires Node.js).

Common AI tools support the JSON configuration format for the mcpServers key and provide different methods to configure the GitLab MCP server settings.

To limit which tools the server returns, see Select tool groups (toolsets).

HTTP transport (recommended)

To configure the GitLab MCP server by using HTTP transport, use this format:

• Replace <gitlab.example.com> with:
  • On GitLab Self-Managed, your GitLab instance URL.
  • On GitLab.com, gitlab.com.

{
  "mcpServers": {
    "GitLab": {
      "type": "http",
      "url": "https://<gitlab.example.com>/api/v4/mcp"
    }
  }
}

You can add a prefix to tool names by configuring an X-Gitlab-Mcp-Server-Tool-Name-Prefix HTTP header. Prefixing can help you avoid tool name conflicts with other MCP servers or with multiple GitLab instances in your configuration.

The prefix is truncated to the first 32 characters if it exceeds this limit.

{
  "mcpServers": {
    "GitLab": {
      "type": "http",
      "url": "https://<gitlab.example.com>/api/v4/mcp",
      "headers": {
        "X-Gitlab-Mcp-Server-Tool-Name-Prefix": "gitlab_"
      }
    }
  }
}

Select tool groups (toolsets)

To limit the tools returned by the GitLab MCP server to specific groups, configure the X-Gitlab-Enabled-Mcp-Server-Toolsets HTTP header with a comma-separated list of toolset names.

Available toolsets:

To include an opt-in toolset, add it to the header value explicitly. To request every toolset, including all opt-in toolsets, set the header to all.

When you omit both headers, the server returns the default toolsets. If you omit the toolsets header but set X-Gitlab-Enabled-Mcp-Server-Tools, the server returns only the tools you named, without any default toolsets or meta tools.

Toolset names in the X-Gitlab-Enabled-Mcp-Server-Toolsets header are matched without regard to case, so ci, CI, and Ci are all accepted.

An unrecognized toolset name in the header returns a 400 error.

If you also set X-Gitlab-Enabled-Mcp-Server-Tools, the server returns the union of both lists, not the intersection. Setting both headers never returns fewer tools than either header alone.

{
  "mcpServers": {
    "GitLab": {
      "type": "http",
      "url": "https://<gitlab.example.com>/api/v4/mcp",
      "headers": {
        "X-Gitlab-Enabled-Mcp-Server-Toolsets": "core,work_items"
      }
    }
  }
}

The way you set this header depends on how your client is configured. Check your client’s section on this page for its configuration format.

• Clients configured with a JSON object that accepts a headers key, including Cursor and Kiro: use the previous example.

• opencode uses a top-level mcp key and "type": "remote", so add a headers key to the server definition in Connect opencode to the GitLab MCP server.

• Claude Code, which is configured from the command line: pass --header.

  shell

  claude mcp add -s user --transport http GitLab https://<gitlab.example.com>/api/v4/mcp \
    --header "X-Gitlab-Enabled-Mcp-Server-Toolsets: core,work_items"

• Clients that connect through mcp-remote, including Claude Desktop and Zed: pass --header as an argument.

  json

  {
    "mcpServers": {
      "GitLab": {
        "command": "npx",
        "args": [
          "-y", "mcp-remote", "https://<gitlab.example.com>/api/v4/mcp",
          "--header", "X-Gitlab-Enabled-Mcp-Server-Toolsets: core,work_items"
        ]
      }
    }
  }

  On Windows, spaces inside args are not escaped when npx is invoked, which corrupts the header value. Put the value in an environment variable and omit the space after the colon:

  json

  {
    "mcpServers": {
      "GitLab": {
        "command": "npx",
        "args": [
          "-y", "mcp-remote", "https://<gitlab.example.com>/api/v4/mcp",
          "--header", "X-Gitlab-Enabled-Mcp-Server-Toolsets:${GITLAB_TOOLSETS}"
        ],
        "env": {
          "GITLAB_TOOLSETS": "core,work_items"
        }
      }
    }
  }

Other clients, including Gemini Code Assist and Gemini CLI, GitHub Copilot in VS Code, and OpenAI Codex, use their own configuration formats. Check your client’s documentation for how to send a custom HTTP header.

stdio transport with mcp-remote

Prerequisites:

• Install Node.js version 20 or later.

To configure the GitLab MCP server by using stdio transport, use this format:

• For the "command": parameter, if npx is installed locally instead of globally, provide the full path to npx.
• Replace <gitlab.example.com> with:
  • On GitLab Self-Managed, your GitLab instance URL.
  • On GitLab.com, gitlab.com.

{
  "mcpServers": {
    "GitLab": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://<gitlab.example.com>/api/v4/mcp"
      ]
    }
  }
}

Connect Cursor to the GitLab MCP server

Cursor uses HTTP transport for direct connection without additional dependencies. To configure the GitLab MCP server in Cursor:

1. In Cursor, go to Settings > Cursor Settings > Tools & MCP.

2. Under Installed MCP Servers, select New MCP Server.

3. Add this definition to the mcpServers key in the opened mcp.json file:

   • Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, gitlab.com.
   json

   {
     "mcpServers": {
       "GitLab": {
          "type": "http",
          "url": "https://<gitlab.example.com>/api/v4/mcp"
       }
     }
   }

4. Save the file, and wait for your browser to open the OAuth authorization page.

   If this does not happen, close and restart Cursor.

5. In your browser, review and approve the authorization request.

You can now start a new chat and ask a question depending on the available tools.

Connect Amazon Q Developer to the GitLab MCP server

Amazon Q Developer uses stdio transport through the mcp-remote proxy. You configure the server in a form rather than in a JSON file.

Prerequisites:

• Install Node.js version 20 or later.

To configure the GitLab MCP server in Amazon Q Developer:

1. In the Amazon Q panel, go to the MCP server settings and add a server.
2. Complete the form:
   • For Scope, select Global to use the server everywhere, or This workspace to limit it to one workspace.
   • For Name, enter gitlab.
   • For Transport, select stdio.
   • For Command, enter npx. If npx is installed locally instead of globally, provide the full path to npx.
   • For Arguments, add three separate arguments: -y, mcp-remote, and https://<gitlab.example.com>/api/v4/mcp. Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, gitlab.com.
   • For Timeout, enter 60.
3. Save the configuration.
4. In your browser, review and approve the authorization request.

Do not pin mcp-remote to a specific version. Pinning was a workaround for how the OAuth scope was requested, and the server now defaults that scope during dynamic client registration. A pinned proxy also misses upstream fixes.

You can now start a new chat and ask a question depending on the available tools.

Connect Claude Code to the GitLab MCP server

Claude Code uses HTTP transport for direct connection without additional dependencies. To configure the GitLab MCP server in Claude Code:

1. In your terminal, add the GitLab MCP server with the CLI:

   • Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, gitlab.com.
   shell

   claude mcp add -s user --transport http GitLab https://<gitlab.example.com>/api/v4/mcp

   The -s user scope makes the server available in every project. Without it, the server is added at local scope and is available only in the directory where you ran the command.

   If you have already configured a GitLab MCP server, claude mcp add does not overwrite it. List your existing servers and check which scope the GitLab entry uses:

   shell

   claude mcp list

   Remove the existing entry at that scope, then add it again. Entries added by following earlier versions of these instructions are at local scope, because no -s flag was given, and a local entry takes precedence over a user entry with the same name.

   shell

   claude mcp remove GitLab -s local

2. Start Claude Code:

   shell

   claude

3. Authenticate with the GitLab MCP server:

   • In the chat, type /mcp.
   • From the list, select your GitLab server.
   • In your browser, review and approve the authorization request.

4. Optional. To verify the connection, type /mcp again. Your GitLab server should appear as connected.

You can now start a new chat and ask a question depending on the available tools.

Connect Claude Desktop to the GitLab MCP server

Prerequisites:

• Install Node.js version 20 or later.
• Have Node.js available globally in the PATH environment variable (which -a node).

To configure the GitLab MCP server in Claude Desktop:

1. Open Claude Desktop.

2. Edit the configuration file. You can do either of the following:

   • In Claude Desktop, go to Settings > Developer > Edit Config.
   • On macOS, open the ~/Library/Application Support/Claude/claude_desktop_config.json file.

3. Add this entry for the GitLab MCP server, editing as needed:

   • For the "command": parameter, if npx is installed locally instead of globally, provide the full path to npx.
   • Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, GitLab.com.
   json

   {
     "mcpServers": {
       "GitLab": {
         "command": "npx",
         "args": [
           "-y",
           "mcp-remote",
           "https://<gitlab.example.com>/api/v4/mcp"
         ]
       }
     }
   }

4. Save the configuration and restart Claude Desktop.

5. On first connect, Claude Desktop opens a browser window for OAuth. Review and approve the request.

6. Go to Settings > Developer and verify the new GitLab MCP configuration.

7. Go to Settings > Connectors and inspect the connected GitLab MCP server.

You can now start a new chat and ask a question depending on the available tools.

Connect Gemini Code Assist and Gemini CLI to the GitLab MCP server

Gemini Code Assist and Gemini CLI use HTTP transport for direct connection without additional dependencies. To configure the GitLab MCP server in Gemini Code Assist or Gemini CLI:

1. Edit ~/.gemini/settings.json and add the GitLab MCP server.

   • Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, gitlab.com.
   json

   {
     "mcpServers": {
       "GitLab": {
         "httpUrl": "https://<gitlab.example.com>/api/v4/mcp"
       }
     }
   }

2. In Gemini Code Assist or Gemini CLI, run the /mcp auth GitLab command.

   The OAuth authorization page should appear. Otherwise, restart Gemini Code Assist or Gemini CLI.

3. In your browser, review and approve the authorization request.

You can now start a new chat and ask a question depending on the available tools.

Connect GitHub Copilot in VS Code to the GitLab MCP server

GitHub Copilot uses HTTP transport for direct connection without additional dependencies. To configure the GitLab MCP server in GitHub Copilot in VS Code:

1. In VS Code, open the Command Palette:

   • On macOS, press Command+Shift+P.
   • On Windows or Linux, press Control+Shift+P.

2. Type MCP: Add Server and press Enter.

3. For the server type, select HTTP.

4. For the server URL, enter https://<gitlab.example.com>/api/v4/mcp.

   • Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, gitlab.com.

5. For the server ID, enter GitLab.

6. Save the configuration globally or in the vscode/mcp.json workspace.

   The OAuth authorization page should appear. Otherwise, open the Command Palette and search for MCP: List Servers to check the status or restart the server.

7. In your browser, review and approve the authorization request.

You can now start a new chat and ask a question depending on the available tools.

Connect Kiro IDE and CLI to the GitLab MCP server

Kiro IDE and CLI use HTTP transport for direct connection without additional dependencies. To configure the GitLab MCP server in Kiro IDE or CLI:

1. Edit ~/.kiro/settings/mcp.json and add the GitLab MCP server.

   • Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, gitlab.com.
   json

   {
     "mcpServers": {
       "GitLab": {
         "type": "http",
         "url": "https://<gitlab.example.com>/api/v4/mcp"
       }
     }
   }

2. Save the configuration.

   The OAuth authorization page should appear. Otherwise, open Kiro CLI and run the /mcp command.

3. In your browser, review and approve the authorization request.

You can now start a new chat and ask a question depending on the available tools.

Connect OpenCode to the GitLab MCP server

OpenCode uses HTTP transport for direct connection without additional dependencies. To configure the GitLab MCP server in OpenCode:

1. Add this definition to the mcp key in your ~/.config/opencode/opencode.json file:

   • Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, gitlab.com.
   json

   {
     "mcp": {
       "gitlab-mcp": {
         "type": "remote",
         "url": "https://<gitlab.example.com>/api/v4/mcp",
         "enabled": true
       }
     }
   }

2. Save the file.

3. Authenticate with the GitLab MCP server:

   shell

   opencode mcp auth gitlab-mcp

4. In your browser, review and approve the authorization request.

You can now start a new chat and ask a question depending on the available tools.

Connect OpenAI Codex to the GitLab MCP server

OpenAI Codex uses HTTP transport for direct connection without additional dependencies. To configure the GitLab MCP server in OpenAI Codex:

1. In your terminal, add the GitLab MCP server with the CLI:

   • Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, gitlab.com.
   shell

   codex mcp add GitLab --url "https://<gitlab.example.com>/api/v4/mcp"

2. Edit ~/.codex/config.toml and, in the [features] section, enable the rmcp_client feature flag.

   toml

   [features]
   "rmcp_client" = true
   
   [mcp_servers.GitLab]
   url = "https://<gitlab.example.com>/api/v4/mcp"

3. Run the login flow and authenticate with the GitLab instance.

   shell

   codex mcp login GitLab

4. In your browser, review and approve the authorization request.

You can now start a new chat and ask a question depending on the available tools.

Connect Zed to the GitLab MCP server

Prerequisites:

• Install Node.js version 20 or later.
• Have Node.js available globally in the PATH environment variable (which -a node).

To configure the GitLab MCP server in Zed:

1. In Zed, open the Command Palette:

   • On macOS, press Command+Shift+P.
   • On Windows or Linux, press Control+Shift+P.

2. Type agent: open settings and press Enter.

3. In the Model Context Protocol (MCP) Servers section, select Add Server.

4. For the server URL in args, use https://<gitlab.example.com>/api/v4/mcp.

   • Replace <gitlab.example.com> with:
     • On GitLab Self-Managed, your GitLab instance URL.
     • On GitLab.com, gitlab.com.
   json

   {
     /// The name of your MCP server
     "GitLab": {
       /// The command which runs the MCP server
       "command": "npx",
       /// The arguments to pass to the MCP server
       "args": ["-y","mcp-remote@latest","https://<gitlab.example.com>/api/v4/mcp"],
       /// The environment variables to set
       "env": {}
     }
   }

5. Save the configuration.

   The OAuth authorization page should appear. If not, turn the GitLab toggle off and on again.

6. In your browser, review and approve the authorization request.

You can now start a new chat and ask a question depending on the available tools.

Reuse a single OAuth application

When an MCP client connects to the GitLab MCP server, it uses OAuth 2.0 Dynamic Client Registration (DCR) to create a new OAuth application on your GitLab instance.

Whether you must reuse a single pre-registered OAuth application depends on the instance:

• On instances where an administrator turns off DCR, you must reuse a pre-registered OAuth application, because MCP clients cannot register applications automatically. For more information, see Turn off OAuth dynamic client registration.
• On all other instances, reusing a pre-registered OAuth application is optional. Reuse one to avoid the following issues with DCR:
  • On GitLab Self-Managed and GitLab Dedicated, many users, or clients that connect repeatedly, can create a large number of OAuth applications on the instance.
  • IP addresses rate-limit DCR requests to 10 registrations per hour. Users who share an egress IP address, such as a corporate network or VPN, can exceed this limit and fail to authenticate to the MCP server.

Every user still authorizes with OAuth and receives their own access token. A shared application is the OAuth client identity, not a shared credential.

Create the OAuth application for one of the following scopes, depending on who reuses it:

• Instance: Shared by all users on the instance.
• Group: Shared by members of a group.
• User: For a user’s own account.

Prerequisites:

• An MCP client that supports the following:
  • Pre-configured OAuth credentials
  • The clientId field in its configuration
• Have administrator access, if you create the application for the instance.
• Have the Owner role for the group, if you create the application for a group.

To create the OAuth application:

1. Create an OAuth application for an instance, group, or user.
2. For the scopes, select mcp and clear the Confidential checkbox.
3. Save the application.
4. Configure your MCP client with the application ID, or give the application ID to the users who reuse the application. The application ID is the clientId. The configuration key varies by client, but is typically named clientId or client_id in the OAuth configuration of the GitLab MCP server, usually in an mcp.json file.

For instance and user applications, you can also use the REST API to create the application. No REST API exists for group-owned applications, so you must use the group UI.

Security considerations

Users who authenticate with the client ID must still complete the OAuth authorization with their own GitLab credentials. They can access only the data they are permitted to.

GitLab does not verify which MCP client application presents the clientId. If you create an OAuth application for a specific MCP client, any other MCP client that supports pre-registration could use the same clientId to authenticate. The clientId controls which OAuth application is used, not which client software is allowed.

Pre-registered applications created with the REST API do not enforce Proof Key for Code Exchange (PKCE). PKCE defends against authorization code interception for public clients.

To enforce PKCE, verify that your MCP client sends code_challenge and code_challenge_method parameters during the OAuth flow. GitLab accepts PKCE parameters for pre-registered applications, but does not require them.

Rate limits

Requests to the MCP server endpoint, POST /api/v4/mcp, are limited for each user by the plan of their namespace:

These limits apply for each user, not for each client or token. A user who connects several MCP clients shares one allowance across all of them.

MCP server requests also count toward the GitLab.com rate limits that apply to all traffic, so a request can reach either limit. The MCP server limit is the lower of the two for every plan.

When you exceed the limit, GitLab returns 429 Too Many Requests with the standard rate limit headers, including Retry-After and RateLimit-Reset. RateLimit-Name identifies which limit you reached.

A rate limit on the GitLab API endpoint behind a tool is reported differently. For that case, see the rate_limited tool result.

On GitLab Self-Managed and GitLab Dedicated, an administrator sets a single MCP server limit for the instance. For more information, see authenticated MCP server request rate limit.

Supported MCP protocol versions

The GitLab MCP server negotiates the protocol version in the initialize request. If the client requests a version that the server does not support, the server returns a JSON-RPC error that lists the supported versions.

GitLab continues to support a protocol version after the MCP specification deprecates it. The removal of a protocol version is a breaking change. GitLab announces the removal in the deprecations and removals page before the version is removed.

Related topics

• MCP servers in the AI Catalog