@zereight/mcp-gitlab 2.0.20 → 2.0.22

package/README.md

@@ -247,6 +247,7 @@ stdio_gitlab_mcp_client = MCPClient(
 
 ```shell
 docker run -i --rm \
+  -e HOST=0.0.0.0 \
   -e GITLAB_PERSONAL_ACCESS_TOKEN=your_gitlab_token \
   -e GITLAB_API_URL="https://gitlab.com/api/v4" \
   -e GITLAB_READ_ONLY_MODE=true \
@@ -273,6 +274,7 @@ docker run -i --rm \
 
 ```shell
 docker run -i --rm \
+  -e HOST=0.0.0.0 \
   -e GITLAB_PERSONAL_ACCESS_TOKEN=your_gitlab_token \
   -e GITLAB_API_URL="https://gitlab.com/api/v4" \
   -e GITLAB_READ_ONLY_MODE=true \
@@ -333,6 +335,7 @@ docker run -i --rm \
 
 #### Performance & Security Configuration
 
+- `HOST`: Server host address. Default: `127.0.0.1` (localhost only). Set to `0.0.0.0` to allow external connections (required for Docker with port forwarding).
 - `MAX_SESSIONS`: Maximum number of concurrent sessions allowed. Default: `1000`. Valid range: 1-10000. When limit is reached, new connections are rejected with HTTP 503.
 - `MAX_REQUESTS_PER_MINUTE`: Rate limit per session in requests per minute. Default: `60`. Valid range: 1-1000. Exceeded requests return HTTP 429.
 - `PORT`: Server port. Default: `3002`. Valid range: 1-65535.
@@ -361,6 +364,7 @@ When using `REMOTE_AUTHORIZATION=true`, the MCP server can support multiple user
 ```bash
 # Start server with remote authorization
 docker run -d \
+  -e HOST=0.0.0.0 \
   -e STREAMABLE_HTTP=true \
   -e REMOTE_AUTHORIZATION=true \
   -e GITLAB_API_URL="https://gitlab.com/api/v4" \
@@ -487,7 +491,7 @@ The token is stored per session (identified by `mcp-session-id` header) and reus
 67. `play_pipeline_job` - Run a manual pipeline job
 68. `retry_pipeline_job` - Retry a failed or canceled pipeline job
 69. `cancel_pipeline_job` - Cancel a running pipeline job
-70. `list_merge_requests` - List merge requests in a GitLab project with filtering options
+70. `list_merge_requests` - List merge requests globally or in a specific GitLab project with filtering options (project_id is now optional)
 71. `list_milestones` - List milestones in a GitLab project with filtering options
 72. `get_milestone` - Get details of a specific milestone
 73. `create_milestone` - Create a new milestone in a GitLab project

package/build/index.js

@@ -165,7 +165,7 @@ const STREAMABLE_HTTP = process.env.STREAMABLE_HTTP === "true";
 const REMOTE_AUTHORIZATION = process.env.REMOTE_AUTHORIZATION === "true";
 const ENABLE_DYNAMIC_API_URL = process.env.ENABLE_DYNAMIC_API_URL === "true";
 const SESSION_TIMEOUT_SECONDS = process.env.SESSION_TIMEOUT_SECONDS ? parseInt(process.env.SESSION_TIMEOUT_SECONDS) : 3600;
-const HOST = process.env.HOST || "0.0.0.0";
+const HOST = process.env.HOST || "127.0.0.1";
 const PORT = process.env.PORT || 3002;
 // Add proxy configuration
 const HTTP_PROXY = process.env.HTTP_PROXY;
@@ -739,7 +739,7 @@ const allTools = [
     },
     {
         name: "list_merge_requests",
-        description: "List merge requests in a GitLab project with filtering options",
+        description: "List merge requests. Without project_id, lists MRs assigned to the authenticated user by default (use scope='all' for all accessible MRs). With project_id, lists MRs for that specific project.",
         inputSchema: toJSONSchema(ListMergeRequestsSchema),
     },
     {
@@ -1229,15 +1229,19 @@ async function listIssues(projectId, options = {}) {
     return z.array(GitLabIssueSchema).parse(data);
 }
 /**
- * List merge requests in a GitLab project with optional filtering
+ * List merge requests globally or for a specific GitLab project
  *
- * @param {string} projectId - The ID or URL-encoded path of the project
+ * @param {string} [projectId] - The ID or URL-encoded path of the project.
+ *                               If omitted, lists MRs assigned to the authenticated user by default.
  * @param {Object} options - Optional filtering parameters
  * @returns {Promise<GitLabMergeRequest[]>} List of merge requests
  */
 async function listMergeRequests(projectId, options = {}) {
-    projectId = decodeURIComponent(projectId); // Decode project ID
-    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/merge_requests`);
+    const decodedProjectId = projectId ? decodeURIComponent(projectId) : undefined;
+    const endpoint = decodedProjectId
+        ? `${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(decodedProjectId))}/merge_requests`
+        : `${getEffectiveApiUrl()}/merge_requests`;
+    const url = new URL(endpoint);
     // Add all query parameters
     Object.entries(options).forEach(([key, value]) => {
         if (value !== undefined) {

package/build/schemas.js

@@ -1105,7 +1105,7 @@ export const ListIssuesSchema = z
 // Merge Requests API operation schemas
 export const ListMergeRequestsSchema = z
     .object({
-    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    project_id: z.coerce.string().optional().describe("Project ID or URL-encoded path (optional - if not provided, lists all merge requests the user has access to)"),
     assignee_id: z.coerce
         .string()
         .optional()

package/build/test/test-list-merge-requests.js

@@ -0,0 +1,106 @@
+import { describe, test, before, after } from 'node:test';
+import assert from 'node:assert';
+import { spawn } from 'child_process';
+import { MockGitLabServer, findMockServerPort } from './utils/mock-gitlab-server.js';
+const MOCK_TOKEN = 'glpat-mock-token-12345';
+const TEST_PROJECT_ID = '123';
+// Helper to run the MCP tool
+async function callListMergeRequests(args = {}, env) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn('node', ['build/index.js'], {
+            stdio: ['pipe', 'pipe', 'pipe'],
+            env: {
+                ...process.env,
+                ...env,
+                GITLAB_READ_ONLY_MODE: 'true'
+            }
+        });
+        let output = '';
+        let errorOutput = '';
+        proc.stdout?.on('data', d => output += d);
+        proc.stderr?.on('data', d => errorOutput += d);
+        proc.on('close', (code) => {
+            if (code !== 0)
+                return reject(new Error(`Process exited with code ${code}: ${errorOutput}`));
+            // Find the JSON line in stdout
+            const line = output.split('\n').find(l => l.startsWith('{'));
+            if (!line)
+                return reject(new Error('No JSON output found'));
+            try {
+                const response = JSON.parse(line);
+                if (response.error) {
+                    reject(response.error);
+                }
+                else {
+                    // Parse the tool result content
+                    const content = response.result?.content?.[0]?.text;
+                    if (content) {
+                        try {
+                            resolve(JSON.parse(content));
+                        }
+                        catch (e) {
+                            reject(new Error(`Failed to parse tool output JSON: ${content}`));
+                        }
+                    }
+                    else {
+                        // Fallback for direct result (if changed in future) or empty
+                        resolve(response.result);
+                    }
+                }
+            }
+            catch (e) {
+                reject(e);
+            }
+        });
+        proc.stdin?.end(JSON.stringify({
+            jsonrpc: "2.0", id: 1, method: "tools/call",
+            params: { name: "list_merge_requests", arguments: args }
+        }) + '\n');
+    });
+}
+describe('list_merge_requests', () => {
+    let mockGitLab;
+    let mockGitLabUrl;
+    before(async () => {
+        const mockPort = await findMockServerPort(9000);
+        mockGitLab = new MockGitLabServer({
+            port: mockPort,
+            validTokens: [MOCK_TOKEN]
+        });
+        await mockGitLab.start();
+        mockGitLabUrl = mockGitLab.getUrl();
+    });
+    after(async () => {
+        await mockGitLab.stop();
+    });
+    test('lists global merge requests (no project_id)', async () => {
+        const mrs = await callListMergeRequests({}, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN
+        });
+        assert.ok(Array.isArray(mrs), 'Response should be an array');
+        assert.strictEqual(mrs.length, 2, 'Should return 2 mock MRs');
+        // Schema coerces project_id to string
+        assert.strictEqual(String(mrs[0].project_id), '123', 'MR should have correct project_id');
+    });
+    test('lists project-specific merge requests', async () => {
+        const mrs = await callListMergeRequests({ project_id: TEST_PROJECT_ID }, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN
+        });
+        assert.ok(Array.isArray(mrs), 'Response should be an array');
+        assert.strictEqual(mrs.length, 2, 'Should return 2 mock MRs');
+        assert.strictEqual(mrs[0].title, 'Test MR 1');
+    });
+    test('filters global merge requests', async () => {
+        // Note: The mock server returns static data, so filtering won't actually filter the results
+        // unless we implement filtering logic in the mock.
+        // But we can verify the call succeeds.
+        const mrs = await callListMergeRequests({ state: 'opened' }, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN
+        });
+        assert.ok(Array.isArray(mrs), 'Response should be an array');
+        assert.strictEqual(mrs.length, 2, 'Should return 2 mock MRs');
+    });
+});

package/build/test/utils/mock-gitlab-server.js

@@ -139,15 +139,71 @@ export class MockGitLabServer {
                 }
             });
         });
+        // GET /api/v4/merge_requests - List all merge requests (global)
+        this.app.get('/api/v4/merge_requests', (req, res) => {
+            res.json([
+                {
+                    id: 1,
+                    iid: 1,
+                    project_id: 123,
+                    title: 'Test MR 1',
+                    description: 'Description for MR 1',
+                    state: 'opened',
+                    created_at: '2024-01-01T00:00:00Z',
+                    updated_at: '2024-01-01T00:00:00Z',
+                    merged_at: null,
+                    closed_at: null,
+                    target_branch: 'main',
+                    source_branch: 'feature-1',
+                    web_url: 'https://gitlab.mock/project/123/merge_requests/1',
+                    merge_commit_sha: null,
+                    author: {
+                        id: 1,
+                        username: 'test-user',
+                        name: 'Test User'
+                    }
+                },
+                {
+                    id: 2,
+                    iid: 2,
+                    project_id: 123,
+                    title: 'Test MR 2',
+                    description: 'Description for MR 2',
+                    state: 'merged',
+                    created_at: '2024-01-02T00:00:00Z',
+                    updated_at: '2024-01-03T00:00:00Z',
+                    merged_at: '2024-01-03T00:00:00Z',
+                    closed_at: null,
+                    target_branch: 'main',
+                    source_branch: 'feature-2',
+                    web_url: 'https://gitlab.mock/project/123/merge_requests/2',
+                    merge_commit_sha: 'abcdef1234567890',
+                    author: {
+                        id: 1,
+                        username: 'test-user',
+                        name: 'Test User'
+                    }
+                }
+            ]);
+        });
         // GET /api/v4/projects/:projectId/merge_requests - List merge requests
         this.app.get('/api/v4/projects/:projectId/merge_requests', (req, res) => {
             res.json([
                 {
                     id: 1,
                     iid: 1,
+                    project_id: 123,
                     title: 'Test MR 1',
+                    description: 'Description for MR 1',
                     state: 'opened',
                     created_at: '2024-01-01T00:00:00Z',
+                    updated_at: '2024-01-01T00:00:00Z',
+                    merged_at: null,
+                    closed_at: null,
+                    target_branch: 'main',
+                    source_branch: 'feature-1',
+                    web_url: 'https://gitlab.mock/project/123/merge_requests/1',
+                    merge_commit_sha: null,
                     author: {
                         id: 1,
                         username: 'test-user',
@@ -157,9 +213,18 @@ export class MockGitLabServer {
                 {
                     id: 2,
                     iid: 2,
+                    project_id: 123,
                     title: 'Test MR 2',
+                    description: 'Description for MR 2',
                     state: 'merged',
                     created_at: '2024-01-02T00:00:00Z',
+                    updated_at: '2024-01-03T00:00:00Z',
+                    merged_at: '2024-01-03T00:00:00Z',
+                    closed_at: null,
+                    target_branch: 'main',
+                    source_branch: 'feature-2',
+                    web_url: 'https://gitlab.mock/project/123/merge_requests/2',
+                    merge_commit_sha: 'abcdef1234567890',
                     author: {
                         id: 1,
                         username: 'test-user',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.0.20",
+  "version": "2.0.22",
   "description": "MCP server for using the GitLab API",
   "license": "MIT",
   "author": "zereight",
@@ -33,7 +33,8 @@
     "test:server": "npm run build && node build/test/test-all-transport-server.js",
     "test:mcp:readonly": "tsx test/readonly-mcp-tests.ts",
     "test:oauth": "tsx test/oauth-tests.ts",
-    "test:all": "npm run test && npm run test:mcp:readonly && npm run test:oauth",
+    "test:list-merge-requests": "npm run build && tsx test/test-list-merge-requests.ts",
+    "test:all": "npm run test && npm run test:mcp:readonly && npm run test:oauth && npm run test:list-merge-requests",
     "lint": "eslint . --ext .ts",
     "lint:fix": "eslint . --ext .ts --fix",
     "format": "prettier --write \"**/*.{js,ts,json,md}\"",