@zereight/mcp-gitlab 2.0.19 → 2.0.21

package/README.md

@@ -228,7 +228,7 @@ stdio_gitlab_mcp_client = MCPClient(
         "USE_MILESTONE",
         "-e",
         "USE_PIPELINE",
-        "iwakitakuma/gitlab-mcp"
+        "zereight050/gitlab-mcp"
       ],
       "env": {
         "GITLAB_PERSONAL_ACCESS_TOKEN": "your_gitlab_token",
@@ -247,6 +247,7 @@ stdio_gitlab_mcp_client = MCPClient(
 
 ```shell
 docker run -i --rm \
+  -e HOST=0.0.0.0 \
   -e GITLAB_PERSONAL_ACCESS_TOKEN=your_gitlab_token \
   -e GITLAB_API_URL="https://gitlab.com/api/v4" \
   -e GITLAB_READ_ONLY_MODE=true \
@@ -255,7 +256,7 @@ docker run -i --rm \
   -e USE_PIPELINE=true \
   -e SSE=true \
   -p 3333:3002 \
-  iwakitakuma/gitlab-mcp
+  zereight050/gitlab-mcp
 ```
 
 ```json
@@ -273,6 +274,7 @@ docker run -i --rm \
 
 ```shell
 docker run -i --rm \
+  -e HOST=0.0.0.0 \
   -e GITLAB_PERSONAL_ACCESS_TOKEN=your_gitlab_token \
   -e GITLAB_API_URL="https://gitlab.com/api/v4" \
   -e GITLAB_READ_ONLY_MODE=true \
@@ -281,7 +283,7 @@ docker run -i --rm \
   -e USE_PIPELINE=true \
   -e STREAMABLE_HTTP=true \
   -p 3333:3002 \
-  iwakitakuma/gitlab-mcp
+  zereight050/gitlab-mcp
 ```
 
 ```json
@@ -333,6 +335,7 @@ docker run -i --rm \
 
 #### Performance & Security Configuration
 
+- `HOST`: Server host address. Default: `127.0.0.1` (localhost only). Set to `0.0.0.0` to allow external connections (required for Docker with port forwarding).
 - `MAX_SESSIONS`: Maximum number of concurrent sessions allowed. Default: `1000`. Valid range: 1-10000. When limit is reached, new connections are rejected with HTTP 503.
 - `MAX_REQUESTS_PER_MINUTE`: Rate limit per session in requests per minute. Default: `60`. Valid range: 1-1000. Exceeded requests return HTTP 429.
 - `PORT`: Server port. Default: `3002`. Valid range: 1-65535.
@@ -361,13 +364,14 @@ When using `REMOTE_AUTHORIZATION=true`, the MCP server can support multiple user
 ```bash
 # Start server with remote authorization
 docker run -d \
+  -e HOST=0.0.0.0 \
   -e STREAMABLE_HTTP=true \
   -e REMOTE_AUTHORIZATION=true \
   -e GITLAB_API_URL="https://gitlab.com/api/v4" \
   -e GITLAB_READ_ONLY_MODE=true \
   -e SESSION_TIMEOUT_SECONDS=3600 \
   -p 3333:3002 \
-  iwakitakuma/gitlab-mcp
+  zereight050/gitlab-mcp
 ```
 
 **Client Configuration:**

package/build/index.js

@@ -165,7 +165,7 @@ const STREAMABLE_HTTP = process.env.STREAMABLE_HTTP === "true";
 const REMOTE_AUTHORIZATION = process.env.REMOTE_AUTHORIZATION === "true";
 const ENABLE_DYNAMIC_API_URL = process.env.ENABLE_DYNAMIC_API_URL === "true";
 const SESSION_TIMEOUT_SECONDS = process.env.SESSION_TIMEOUT_SECONDS ? parseInt(process.env.SESSION_TIMEOUT_SECONDS) : 3600;
-const HOST = process.env.HOST || "0.0.0.0";
+const HOST = process.env.HOST || "127.0.0.1";
 const PORT = process.env.PORT || 3002;
 // Add proxy configuration
 const HTTP_PROXY = process.env.HTTP_PROXY;
@@ -5166,6 +5166,14 @@ async function startStreamableHTTPServer() {
             await handleRequest();
         }
     });
+    // Reject unsupported methods on /mcp
+    app.get("/mcp", (_req, res) => {
+        res.setHeader("Allow", "POST, DELETE");
+        res.status(405).json({
+            error: "Method Not Allowed",
+            message: "GET /mcp is not supported when STREAMABLE_HTTP is enabled. Use POST to communicate with the MCP server."
+        });
+    });
     // Metrics endpoint
     app.get("/metrics", (_req, res) => {
         res.json({

package/build/test/test-all-transport-server.js

@@ -216,6 +216,12 @@ describe('GitLab MCP Server - Streamable HTTP Transport', () => {
         cleanup();
         console.log('Client disconnected from Streamable HTTP server');
     });
+    test('should return 405 for GET /mcp', async () => {
+        const response = await fetch(`http://${HOST}:${port}/mcp`);
+        assert.strictEqual(response.status, 405, 'GET /mcp should respond with 405');
+        const body = await response.json();
+        assert.strictEqual(body?.error, 'Method Not Allowed');
+    });
     test('should list tools via Streamable HTTP', async () => {
         const tools = await client.listTools();
         assert.ok(tools !== null && tools !== undefined, 'Tools response should be defined');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.0.19",
+  "version": "2.0.21",
   "description": "MCP server for using the GitLab API",
   "license": "MIT",
   "author": "zereight",
@@ -17,7 +17,8 @@
     "access": "public"
   },
   "engines": {
-    "node": ">=14"
+    "node": ">=18.0.0",
+    "npm": ">=9.0.0"
   },
   "scripts": {
     "build": "tsc && node -e \"require('fs').chmodSync('build/index.js', '755')\"",