package gitlab-mcp
No known issues
Grade A (Few risk signals). Use --ignore-scripts and pin exact version.
- Latest version
- 2.3.16
- First published
- 21 months ago
- Maintainers
- 1
- Catalog grade
- A — Few risk signals
- Est. context load
- ~850 tokens / turn (~5 tool schemas, 0.43% of 200k context)
Threat reports
- Reported@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS
- Reported@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
- Compromised@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
- Reported@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
- Reported@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport
Install it pinned and without install scripts:
npm install --ignore-scripts --save-exact "@zereight/mcp-gitlab@2.3.16"Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee. Answers change through the day.