@zereight/mcp-gitlab 2.1.17 → 2.1.18

package/README.md

@@ -657,6 +657,10 @@ Register the skill directory in your AI client to get optimal tool usage guidanc
 164. `create_group_variable` - Create a new CI/CD variable in a group
 165. `update_group_variable` - Update an existing CI/CD variable in a group, with optional filter to disambiguate by environment scope
 166. `delete_group_variable` - Delete a CI/CD variable from a group, with optional filter to disambiguate by environment scope
+167. `get_dependency_proxy_settings` - Get dependency proxy settings for a group (enabled status, blob count, total size, image prefix, TTL policy)
+168. `update_dependency_proxy_settings` - Update dependency proxy settings for a group (enable/disable, credentials for authenticated Docker Hub pulls)
+169. `list_dependency_proxy_blobs` - List cached dependency proxy blobs for a group with cursor-based pagination
+170. `purge_dependency_proxy_cache` - Schedule purge of all cached dependency proxy blobs for a group
 
 <!-- TOOLS-END -->
 

package/build/index.js

@@ -139,7 +139,7 @@ CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMerg
 GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
-GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabGroupSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, GitLabCiVariableSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
+GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabGroupSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, GitLabCiVariableSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GitLabDependencyProxySchema, GitLabDependencyProxyBlobSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
 GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, HealthCheckSchema, } from "./schemas.js";
 import { randomUUID, createCipheriv, createDecipheriv, randomBytes, createHash } from "node:crypto";
 import { pino } from "pino";
@@ -5875,6 +5875,84 @@ async function deleteGroupVariable(groupId, key, filter) {
     const response = await fetch(url.toString(), { ...getFetchConfig(), method: "DELETE" });
     await handleGitLabError(response);
 }
+// --- Dependency Proxy ---
+async function resolveGroupFullPath(groupId) {
+    const decoded = decodeURIComponent(groupId);
+    if (/^\d+$/.test(decoded)) {
+        const response = await fetch(`${getEffectiveApiUrl()}/groups/${decoded}`, getFetchConfig());
+        await handleGitLabError(response);
+        const data = z.object({ full_path: z.string() }).parse(await response.json());
+        return data.full_path;
+    }
+    return decoded;
+}
+async function getDependencyProxySettings(groupPath) {
+    const fullPath = await resolveGroupFullPath(groupPath);
+    const data = await executeGraphQL(`query($fullPath: ID!) {
+      group(fullPath: $fullPath) {
+        dependencyProxySetting { enabled }
+        dependencyProxyBlobCount
+        dependencyProxyTotalSize
+        dependencyProxyImagePrefix
+        dependencyProxyImageTtlPolicy { enabled ttl }
+      }
+    }`, { fullPath });
+    const g = data.group;
+    if (!g)
+        throw new Error(`Group not found: ${fullPath}`);
+    return GitLabDependencyProxySchema.parse({
+        enabled: g.dependencyProxySetting?.enabled ?? false,
+        blob_count: g.dependencyProxyBlobCount,
+        total_size: g.dependencyProxyTotalSize,
+        image_prefix: g.dependencyProxyImagePrefix,
+        ttl_policy: g.dependencyProxyImageTtlPolicy,
+    });
+}
+async function updateDependencyProxySettings(groupPath, options) {
+    if (options.enabled === undefined && options.identity === undefined && options.secret === undefined) {
+        throw new Error("At least one of enabled, identity, or secret must be provided");
+    }
+    const fullPath = await resolveGroupFullPath(groupPath);
+    const input = { groupPath: fullPath };
+    if (options.enabled !== undefined)
+        input["enabled"] = options.enabled;
+    if (options.identity !== undefined)
+        input["identity"] = options.identity;
+    if (options.secret !== undefined)
+        input["secret"] = options.secret;
+    const mutationResult = await executeGraphQL(`mutation($input: UpdateDependencyProxySettingsInput!) {
+      updateDependencyProxySettings(input: $input) { errors }
+    }`, { input });
+    const errors = mutationResult.updateDependencyProxySettings?.errors;
+    if (errors && errors.length > 0) {
+        throw new Error(`Failed to update dependency proxy settings: ${errors.join(", ")}`);
+    }
+    return getDependencyProxySettings(fullPath);
+}
+async function listDependencyProxyBlobs(groupPath, options = {}) {
+    const fullPath = await resolveGroupFullPath(groupPath);
+    const data = await executeGraphQL(`query($fullPath: ID!, $first: Int, $after: String) {
+      group(fullPath: $fullPath) {
+        dependencyProxyBlobs(first: $first, after: $after) {
+          nodes { fileName size createdAt }
+          pageInfo { hasNextPage endCursor }
+        }
+      }
+    }`, { fullPath, first: options.first ?? 20, after: options.after });
+    const conn = data.group?.dependencyProxyBlobs;
+    if (!conn)
+        throw new Error(`Group not found or dependency proxy not enabled: ${fullPath}`);
+    return {
+        blobs: conn.nodes.map(n => GitLabDependencyProxyBlobSchema.parse({ file_name: n.fileName, size: n.size, created_at: n.createdAt })),
+        pageInfo: conn.pageInfo,
+    };
+}
+async function purgeDependencyProxyCache(groupId) {
+    const encoded = encodeURIComponent(decodeURIComponent(groupId));
+    const url = new URL(`${getEffectiveApiUrl()}/groups/${encoded}/dependency_proxy/cache`);
+    const response = await fetch(url.toString(), { ...getFetchConfig(), method: "DELETE" });
+    await handleGitLabError(response);
+}
 /**
  * Upload a file to a GitLab project for use in markdown content.
  *
@@ -7921,6 +7999,45 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "get_dependency_proxy_settings": {
+                rejectIfProjectScopedDeployment("get_dependency_proxy_settings");
+                const args = GetDependencyProxySettingsSchema.parse(params.arguments);
+                const settings = await getDependencyProxySettings(args.group_id);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(settings, null, 2) }],
+                };
+            }
+            case "update_dependency_proxy_settings": {
+                rejectIfProjectScopedDeployment("update_dependency_proxy_settings");
+                const args = UpdateDependencyProxySettingsSchema.parse(params.arguments);
+                const { group_id, ...options } = args;
+                const settings = await updateDependencyProxySettings(group_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(settings, null, 2) }],
+                };
+            }
+            case "list_dependency_proxy_blobs": {
+                rejectIfProjectScopedDeployment("list_dependency_proxy_blobs");
+                const args = ListDependencyProxyBlobsSchema.parse(params.arguments);
+                const { group_id, ...options } = args;
+                const result = await listDependencyProxyBlobs(group_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+                };
+            }
+            case "purge_dependency_proxy_cache": {
+                rejectIfProjectScopedDeployment("purge_dependency_proxy_cache");
+                const args = PurgeDependencyProxyCacheSchema.parse(params.arguments);
+                await purgeDependencyProxyCache(args.group_id);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({ status: "success", message: "Dependency proxy cache purge scheduled" }, null, 2),
+                        },
+                    ],
+                };
+            }
             case "upload_markdown": {
                 if (IS_REMOTE) {
                     const args = MarkdownUploadRemoteSchema.parse(params.arguments);

package/build/schemas.js

@@ -3503,3 +3503,39 @@ export const DeleteGroupVariableSchema = z.object({
         .optional()
         .describe("Filter by environment scope to disambiguate when multiple variables share the same key"),
 });
+// --- Dependency Proxy types ---
+export const GitLabDependencyProxySchema = z.object({
+    enabled: z.boolean(),
+    blob_count: z.number().nullable().optional(),
+    total_size: z.string().nullable().optional(),
+    image_prefix: z.string().nullable().optional(),
+    ttl_policy: z
+        .object({
+        enabled: z.boolean(),
+        ttl: z.number().nullable().optional(),
+    })
+        .nullable()
+        .optional(),
+});
+export const GitLabDependencyProxyBlobSchema = z.object({
+    file_name: z.string(),
+    size: z.string(),
+    created_at: z.string().nullable().optional(),
+});
+export const GetDependencyProxySettingsSchema = z.object({
+    group_id: z.coerce.string().describe("Group ID or URL-encoded path"),
+});
+export const UpdateDependencyProxySettingsSchema = z.object({
+    group_id: z.coerce.string().describe("Group ID or URL-encoded path"),
+    enabled: z.boolean().optional().describe("Enable or disable the dependency proxy"),
+    identity: z.string().optional().describe("Proxy username for authenticated Docker Hub pulls (Premium/Ultimate)"),
+    secret: z.string().optional().describe("Proxy password / access token for authenticated pulls"),
+});
+export const ListDependencyProxyBlobsSchema = z.object({
+    group_id: z.coerce.string().describe("Group ID or URL-encoded path"),
+    first: z.number().int().optional().describe("Number of blobs to return (default: 20)"),
+    after: z.string().optional().describe("Cursor for pagination (from previous response pageInfo.endCursor)"),
+});
+export const PurgeDependencyProxyCacheSchema = z.object({
+    group_id: z.coerce.string().describe("Group ID or URL-encoded path"),
+});

package/build/test/schema-tests.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env ts-node
-import { GetFileContentsSchema, GitLabFileContentSchema, GitLabRepositorySchema, CreatePipelineSchema, CreateCommitStatusSchema, ListCommitStatusesSchema, CreateIssueNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateIssueEmojiReactionSchema, DeleteMergeRequestEmojiReactionSchema, DeleteIssueEmojiReactionSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, CreateIssueSchema, ListIssuesSchema, ListMergeRequestsSchema, ListLabelsSchema, GitLabMergeRequestSchema, GitLabTreeItemSchema, GetMergeRequestSchema, ListMergeRequestPipelinesSchema, GetRepositoryTreeSchema, GitLabUserFullSchema, GitLabMarkdownUploadSchema, } from '../schemas.js';
+import { GetFileContentsSchema, GitLabFileContentSchema, GitLabRepositorySchema, CreatePipelineSchema, CreateCommitStatusSchema, ListCommitStatusesSchema, CreateIssueNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateIssueEmojiReactionSchema, DeleteMergeRequestEmojiReactionSchema, DeleteIssueEmojiReactionSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, CreateIssueSchema, ListIssuesSchema, ListMergeRequestsSchema, ListLabelsSchema, GitLabMergeRequestSchema, GitLabTreeItemSchema, GetMergeRequestSchema, ListMergeRequestPipelinesSchema, GetRepositoryTreeSchema, GitLabUserFullSchema, GitLabMarkdownUploadSchema, GitLabDependencyProxySchema, GitLabDependencyProxyBlobSchema, } from '../schemas.js';
 function runGetFileContentsSchemaTests() {
     console.log('🧪 Testing GetFileContentsSchema...');
     const cases = [
@@ -1385,6 +1385,106 @@ function runGitLabUserFullSchemaTests() {
     console.log(`\nResults: ${passed} passed, ${failed} failed`);
     return { passed, failed };
 }
+function runGitLabDependencyProxySchemaTests() {
+    console.log('🧪 Testing GitLabDependencyProxySchema...');
+    const cases = [
+        {
+            name: 'schema:dependency_proxy:minimal',
+            input: { enabled: true, blob_count: 0, total_size: '0' },
+            shouldFail: false,
+        },
+        {
+            name: 'schema:dependency_proxy:full',
+            input: {
+                enabled: true,
+                blob_count: 42,
+                total_size: '1234567890',
+                image_prefix: 'gitlab.example.com:5050/my-group/dependency_proxy/containers',
+                ttl_policy: { enabled: true, ttl: 90 },
+            },
+            shouldFail: false,
+        },
+        {
+            name: 'schema:dependency_proxy:nulls-allowed',
+            input: { enabled: false, blob_count: null, total_size: null, image_prefix: null, ttl_policy: null },
+            shouldFail: false,
+        },
+    ];
+    let passed = 0;
+    let failed = 0;
+    cases.forEach(testCase => {
+        const result = { name: testCase.name, status: 'failed' };
+        const parsed = GitLabDependencyProxySchema.safeParse(testCase.input);
+        if (testCase.shouldFail) {
+            result.status = parsed.success ? 'failed' : 'passed';
+            if (parsed.success)
+                result.error = 'Expected schema validation to fail';
+        }
+        else if (parsed.success) {
+            result.status = 'passed';
+        }
+        else {
+            result.error = parsed.error?.message || 'Schema validation failed';
+        }
+        if (result.status === 'passed') {
+            passed++;
+            console.log(`✅ ${result.name}`);
+        }
+        else {
+            failed++;
+            console.log(`❌ ${result.name}: ${result.error}`);
+        }
+    });
+    console.log(`\nResults: ${passed} passed, ${failed} failed`);
+    return { passed, failed };
+}
+function runGitLabDependencyProxyBlobSchemaTests() {
+    console.log('🧪 Testing GitLabDependencyProxyBlobSchema...');
+    const cases = [
+        {
+            name: 'schema:dependency_proxy_blob:basic',
+            input: { file_name: 'sha256:abc123', size: '2.5 MiB', created_at: '2026-01-01T00:00:00Z' },
+            shouldFail: false,
+        },
+        {
+            name: 'schema:dependency_proxy_blob:no-created-at',
+            input: { file_name: 'sha256:def456', size: '512 KiB' },
+            shouldFail: false,
+        },
+        {
+            name: 'schema:dependency_proxy_blob:size-must-be-string',
+            input: { file_name: 'sha256:ghi789', size: 12345 },
+            shouldFail: true,
+        },
+    ];
+    let passed = 0;
+    let failed = 0;
+    cases.forEach(testCase => {
+        const result = { name: testCase.name, status: 'failed' };
+        const parsed = GitLabDependencyProxyBlobSchema.safeParse(testCase.input);
+        if (testCase.shouldFail) {
+            result.status = parsed.success ? 'failed' : 'passed';
+            if (parsed.success)
+                result.error = 'Expected schema validation to fail';
+        }
+        else if (parsed.success) {
+            result.status = 'passed';
+        }
+        else {
+            result.error = parsed.error?.message || 'Schema validation failed';
+        }
+        if (result.status === 'passed') {
+            passed++;
+            console.log(`✅ ${result.name}`);
+        }
+        else {
+            failed++;
+            console.log(`❌ ${result.name}: ${result.error}`);
+        }
+    });
+    console.log(`\nResults: ${passed} passed, ${failed} failed`);
+    return { passed, failed };
+}
 if (import.meta.url === `file://${process.argv[1]}`) {
     const getFileContentsResult = runGetFileContentsSchemaTests();
     const fileContentResult = runGitLabFileContentSchemaTests();
@@ -1403,8 +1503,10 @@ if (import.meta.url === `file://${process.argv[1]}`) {
     const repositoryTreeResult = runGetRepositoryTreeSchemaTests();
     const gitLabUserFullResult = runGitLabUserFullSchemaTests();
     const gitLabMarkdownUploadResult = runGitLabMarkdownUploadSchemaTests();
-    const totalPassed = getFileContentsResult.passed + fileContentResult.passed + createPipelineResult.passed + commitStatusResult.passed + createIssueNoteResult.passed + getMergeRequestResult.passed + listMergeRequestPipelinesResult.passed + gitLabMergeRequestResult.passed + emojiReactionResult.passed + repositorySchemaResult.passed + labelsCoercionResult.passed + approvedByUsernamesResult.passed + listLabelsResult.passed + treeItemResult.passed + repositoryTreeResult.passed + gitLabUserFullResult.passed + gitLabMarkdownUploadResult.passed;
-    const totalFailed = getFileContentsResult.failed + fileContentResult.failed + createPipelineResult.failed + commitStatusResult.failed + createIssueNoteResult.failed + getMergeRequestResult.failed + listMergeRequestPipelinesResult.failed + gitLabMergeRequestResult.failed + emojiReactionResult.failed + repositorySchemaResult.failed + labelsCoercionResult.failed + approvedByUsernamesResult.failed + listLabelsResult.failed + treeItemResult.failed + repositoryTreeResult.failed + gitLabUserFullResult.failed + gitLabMarkdownUploadResult.failed;
+    const dependencyProxyResult = runGitLabDependencyProxySchemaTests();
+    const dependencyProxyBlobResult = runGitLabDependencyProxyBlobSchemaTests();
+    const totalPassed = getFileContentsResult.passed + fileContentResult.passed + createPipelineResult.passed + commitStatusResult.passed + createIssueNoteResult.passed + getMergeRequestResult.passed + listMergeRequestPipelinesResult.passed + gitLabMergeRequestResult.passed + emojiReactionResult.passed + repositorySchemaResult.passed + labelsCoercionResult.passed + approvedByUsernamesResult.passed + listLabelsResult.passed + treeItemResult.passed + repositoryTreeResult.passed + gitLabUserFullResult.passed + gitLabMarkdownUploadResult.passed + dependencyProxyResult.passed + dependencyProxyBlobResult.passed;
+    const totalFailed = getFileContentsResult.failed + fileContentResult.failed + createPipelineResult.failed + commitStatusResult.failed + createIssueNoteResult.failed + getMergeRequestResult.failed + listMergeRequestPipelinesResult.failed + gitLabMergeRequestResult.failed + emojiReactionResult.failed + repositorySchemaResult.failed + labelsCoercionResult.failed + approvedByUsernamesResult.failed + listLabelsResult.failed + treeItemResult.failed + repositoryTreeResult.failed + gitLabUserFullResult.failed + gitLabMarkdownUploadResult.failed + dependencyProxyResult.failed + dependencyProxyBlobResult.failed;
     console.log(`\nTotal Results: ${totalPassed} passed, ${totalFailed} failed`);
     if (totalFailed > 0) {
         process.exit(1);

package/build/test/test-dependency-proxy.js

@@ -0,0 +1,191 @@
+import { describe, test, before, after } from "node:test";
+import assert from "node:assert";
+import { spawn } from "child_process";
+import { MockGitLabServer, findMockServerPort } from "./utils/mock-gitlab-server.js";
+const MOCK_TOKEN = "glpat-mock-token-dependency-proxy";
+const TEST_GROUP_PATH = "my-group";
+async function callTool(toolName, args, env) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn("node", ["build/index.js"], {
+            stdio: ["pipe", "pipe", "pipe"],
+            env: { ...process.env, ...env },
+        });
+        let output = "";
+        let errorOutput = "";
+        proc.stdout?.on("data", (d) => (output += d));
+        proc.stderr?.on("data", (d) => (errorOutput += d));
+        proc.on("close", code => {
+            if (code !== 0) {
+                return reject(new Error(`Process exited with code ${code}: ${errorOutput}`));
+            }
+            const line = output.split("\n").find(l => l.startsWith("{"));
+            if (!line)
+                return reject(new Error("No JSON output found"));
+            try {
+                const response = JSON.parse(line);
+                if (response.error) {
+                    reject(new Error(response.error?.message ?? String(response.error)));
+                }
+                else {
+                    const content = response.result?.content?.[0]?.text;
+                    resolve(content ? JSON.parse(content) : response.result);
+                }
+            }
+            catch (e) {
+                reject(e);
+            }
+        });
+        proc.stdin?.end(JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/call",
+            params: { name: toolName, arguments: args },
+        }) + "\n");
+    });
+}
+describe("dependency proxy tools", () => {
+    let mockServer;
+    let mockPort;
+    let baseEnv;
+    before(async () => {
+        mockPort = await findMockServerPort();
+        mockServer = new MockGitLabServer({ port: mockPort, validTokens: [MOCK_TOKEN] });
+        // Mock GraphQL endpoint for get/list operations
+        mockServer.addRootHandler("post", "/api/graphql", (req, res) => {
+            const { query } = req.body;
+            if (query.includes("updateDependencyProxySettings")) {
+                res.json({ data: { updateDependencyProxySettings: { errors: [] } } });
+            }
+            else if (query.includes("dependencyProxySetting")) {
+                res.json({
+                    data: {
+                        group: {
+                            dependencyProxySetting: { enabled: true },
+                            dependencyProxyBlobCount: 3,
+                            dependencyProxyTotalSize: "15728640",
+                            dependencyProxyImagePrefix: `localhost:${mockPort}/my-group/dependency_proxy/containers`,
+                            dependencyProxyImageTtlPolicy: { enabled: true, ttl: 90 },
+                        },
+                    },
+                });
+            }
+            else if (query.includes("dependencyProxyBlobs")) {
+                res.json({
+                    data: {
+                        group: {
+                            dependencyProxyBlobs: {
+                                nodes: [
+                                    { fileName: "sha256:abc123", size: "5 MiB", createdAt: "2026-01-01T00:00:00Z" },
+                                    { fileName: "sha256:def456", size: "10 MiB", createdAt: "2026-01-02T00:00:00Z" },
+                                ],
+                                pageInfo: { hasNextPage: false, endCursor: null },
+                            },
+                        },
+                    },
+                });
+            }
+            else {
+                res.status(400).json({ errors: [{ message: "Unexpected GraphQL query" }] });
+            }
+        });
+        // Mock REST endpoint for purge
+        mockServer.addMockHandler("delete", `/groups/${TEST_GROUP_PATH}/dependency_proxy/cache`, (_req, res) => {
+            res.status(202).send();
+        });
+        await mockServer.start();
+        baseEnv = {
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+            GITLAB_API_URL: `http://localhost:${mockPort}/api/v4`,
+            GITLAB_TOOLSETS: "dependency_proxy",
+        };
+    });
+    after(async () => {
+        await mockServer.stop();
+    });
+    test("get_dependency_proxy_settings returns enabled status and blob info", async () => {
+        const result = await callTool("get_dependency_proxy_settings", { group_id: TEST_GROUP_PATH }, baseEnv);
+        assert.strictEqual(result.enabled, true);
+        assert.strictEqual(result.blob_count, 3);
+        assert.strictEqual(result.total_size, "15728640");
+        assert.ok(result.ttl_policy?.enabled);
+    });
+    test("list_dependency_proxy_blobs returns blobs with string sizes", async () => {
+        const result = await callTool("list_dependency_proxy_blobs", { group_id: TEST_GROUP_PATH }, baseEnv);
+        assert.ok(Array.isArray(result.blobs));
+        assert.strictEqual(result.blobs.length, 2);
+        assert.strictEqual(typeof result.blobs[0].size, "string");
+        assert.strictEqual(result.blobs[0].file_name, "sha256:abc123");
+    });
+    test("purge_dependency_proxy_cache returns scheduled status", async () => {
+        const result = await callTool("purge_dependency_proxy_cache", { group_id: TEST_GROUP_PATH }, baseEnv);
+        assert.strictEqual(result.status, "success");
+        assert.ok(result.message.includes("scheduled"));
+    });
+    test("update_dependency_proxy_settings enables the proxy and returns settings", async () => {
+        const result = await callTool("update_dependency_proxy_settings", { group_id: TEST_GROUP_PATH, enabled: true }, baseEnv);
+        assert.strictEqual(result.enabled, true);
+    });
+    test("update_dependency_proxy_settings rejects empty options", async () => {
+        await assert.rejects(() => callTool("update_dependency_proxy_settings", { group_id: TEST_GROUP_PATH }, baseEnv), /At least one of enabled, identity, or secret must be provided/);
+    });
+    test("dependency_proxy tools are absent when toolset is not activated", async () => {
+        return new Promise((resolve, reject) => {
+            const proc = spawn("node", ["build/index.js"], {
+                stdio: ["pipe", "pipe", "pipe"],
+                env: {
+                    ...process.env,
+                    GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+                    GITLAB_API_URL: `http://localhost:${mockPort}/api/v4`,
+                    // No GITLAB_TOOLSETS — default toolsets only
+                },
+            });
+            let output = "";
+            proc.stdout?.on("data", (d) => (output += d));
+            proc.on("close", () => {
+                try {
+                    const line = output.split("\n").find(l => l.startsWith("{"));
+                    if (!line)
+                        return reject(new Error("No JSON output found"));
+                    const response = JSON.parse(line);
+                    const tools = response.result?.tools ?? [];
+                    const names = tools.map(t => t.name);
+                    assert.ok(!names.includes("get_dependency_proxy_settings"), "tool should not be in default toolset");
+                    assert.ok(!names.includes("purge_dependency_proxy_cache"), "tool should not be in default toolset");
+                    resolve();
+                }
+                catch (e) {
+                    reject(e);
+                }
+            });
+            proc.stdin?.end(JSON.stringify({ jsonrpc: "2.0", id: 1, method: "tools/list", params: {} }) + "\n");
+        });
+    });
+    test("write tools are absent from tools/list in read-only mode", async () => {
+        return new Promise((resolve, reject) => {
+            const proc = spawn("node", ["build/index.js"], {
+                stdio: ["pipe", "pipe", "pipe"],
+                env: { ...process.env, ...baseEnv, GITLAB_READ_ONLY_MODE: "true" },
+            });
+            let output = "";
+            proc.stdout?.on("data", (d) => (output += d));
+            proc.on("close", () => {
+                try {
+                    const line = output.split("\n").find(l => l.startsWith("{"));
+                    if (!line)
+                        return reject(new Error("No JSON output found"));
+                    const response = JSON.parse(line);
+                    const names = (response.result?.tools ?? []).map((t) => t.name);
+                    assert.ok(!names.includes("purge_dependency_proxy_cache"), "purge should be absent in read-only mode");
+                    assert.ok(!names.includes("update_dependency_proxy_settings"), "update should be absent in read-only mode");
+                    assert.ok(names.includes("get_dependency_proxy_settings"), "get should be present in read-only mode");
+                    assert.ok(names.includes("list_dependency_proxy_blobs"), "list should be present in read-only mode");
+                    resolve();
+                }
+                catch (e) {
+                    reject(e);
+                }
+            });
+            proc.stdin?.end(JSON.stringify({ jsonrpc: "2.0", id: 1, method: "tools/list", params: {} }) + "\n");
+        });
+    });
+});

package/build/test/test-geteffectiveprojectid.js

@@ -508,4 +508,64 @@ describe('getEffectiveProjectId', { concurrency: 1 }, () => {
             assert.ok(result.content, 'Should have content');
         });
     });
+    describe('GITLAB_PROJECT_ID guards dependency proxy tools', () => {
+        let mcpUrl;
+        let mockGitLab;
+        let servers = [];
+        let client;
+        before(async () => {
+            const mockPort = await findMockServerPort(9500);
+            mockGitLab = new MockGitLabServer({
+                port: mockPort,
+                validTokens: [MOCK_TOKEN],
+            });
+            await mockGitLab.start();
+            const mockGitLabUrl = mockGitLab.getUrl();
+            const mcpPort = await findAvailablePort(3500);
+            const server = await launchServer({
+                mode: TransportMode.STREAMABLE_HTTP,
+                port: mcpPort,
+                timeout: 5000,
+                env: {
+                    REMOTE_AUTHORIZATION: 'true',
+                    GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+                    GITLAB_PROJECT_ID: DEFAULT_PROJECT_ID,
+                    GITLAB_TOOLSETS: 'dependency_proxy',
+                },
+            });
+            servers.push(server);
+            mcpUrl = `http://${HOST}:${mcpPort}/mcp`;
+            client = new CustomHeaderClient({
+                authorization: `Bearer ${MOCK_TOKEN}`,
+            });
+            await client.connect(mcpUrl);
+        });
+        after(async () => {
+            if (client)
+                await client.disconnect();
+            cleanupServers(servers);
+            if (mockGitLab)
+                await mockGitLab.stop();
+        });
+        test('should reject get_dependency_proxy_settings when GITLAB_PROJECT_ID is set', async () => {
+            try {
+                await client.callTool('get_dependency_proxy_settings', { group_id: 'my-group' });
+                assert.fail('Should have rejected get_dependency_proxy_settings');
+            }
+            catch (error) {
+                assert.ok(error instanceof Error);
+                assert.ok(error.message.includes('get_dependency_proxy_settings is not allowed'), 'Should mention get_dependency_proxy_settings');
+            }
+        });
+        test('should reject purge_dependency_proxy_cache when GITLAB_PROJECT_ID is set', async () => {
+            try {
+                await client.callTool('purge_dependency_proxy_cache', { group_id: 'my-group' });
+                assert.fail('Should have rejected purge_dependency_proxy_cache');
+            }
+            catch (error) {
+                assert.ok(error instanceof Error);
+                assert.ok(error.message.includes('purge_dependency_proxy_cache is not allowed'), 'Should mention purge_dependency_proxy_cache');
+            }
+        });
+    });
 }); // end wrapper describe

package/build/test/test-toolset-filtering.js

@@ -34,6 +34,7 @@ const TOOLSET_TOOL_COUNTS = {
     webhooks: 3,
     groups: 1,
     variables: 10,
+    dependency_proxy: 4,
 };
 const LEGACY_PIPELINE_TOOL_COUNT = TOOLSET_TOOL_COUNTS.pipelines + TOOLSET_TOOL_COUNTS.ci;
 const DEFAULT_TOOLSETS = [
@@ -57,6 +58,7 @@ const NON_DEFAULT_TOOLSETS = [
     "webhooks",
     "search",
     "variables",
+    "dependency_proxy",
 ];
 // discover_tools meta-tool is always force-injected (Step 5.5)
 const DISCOVER_TOOLS_COUNT = 1;
@@ -81,6 +83,7 @@ const TOOLSET_SAMPLE_TOOLS = {
     webhooks: ["list_webhooks", "list_webhook_events", "get_webhook_event"],
     groups: ["create_group"],
     variables: ["list_project_variables", "create_project_variable", "delete_project_variable", "list_group_variables", "create_group_variable", "delete_group_variable"],
+    dependency_proxy: ["get_dependency_proxy_settings", "list_dependency_proxy_blobs", "purge_dependency_proxy_cache"],
 };
 // --- Helpers ---
 async function launchMcpServer(mockGitLabUrl, mcpPort, extraEnv = {}) {

package/build/tools/registry.js

@@ -1,7 +1,7 @@
 import { zodToJsonSchema } from "zod-to-json-schema";
 import { toJSONSchema } from "../utils/schema.js";
 import { USE_GITLAB_WIKI, USE_MILESTONE, USE_PIPELINE, SSE, STREAMABLE_HTTP, } from "../config.js";
-import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListPipelinesSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, } from "../schemas.js";
+import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListPipelinesSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, } from "../schemas.js";
 const IS_REMOTE = SSE || STREAMABLE_HTTP;
 // Define all available tools
 export const allTools = [
@@ -982,6 +982,27 @@ export const allTools = [
         description: "Delete a CI/CD variable from a group",
         inputSchema: toJSONSchema(DeleteGroupVariableSchema),
     },
+    // --- Dependency proxy tools ---
+    {
+        name: "get_dependency_proxy_settings",
+        description: "Get dependency proxy settings for a group",
+        inputSchema: toJSONSchema(GetDependencyProxySettingsSchema),
+    },
+    {
+        name: "update_dependency_proxy_settings",
+        description: "Update dependency proxy settings for a group (enable/disable, credentials for authenticated Docker Hub pulls)",
+        inputSchema: toJSONSchema(UpdateDependencyProxySettingsSchema),
+    },
+    {
+        name: "list_dependency_proxy_blobs",
+        description: "List cached dependency proxy blobs for a group",
+        inputSchema: toJSONSchema(ListDependencyProxyBlobsSchema),
+    },
+    {
+        name: "purge_dependency_proxy_cache",
+        description: "Schedule purge of all cached dependency proxy blobs for a group",
+        inputSchema: toJSONSchema(PurgeDependencyProxyCacheSchema),
+    },
     // --- Meta tool: Dynamic tool discovery ---
     {
         name: "discover_tools",
@@ -1105,6 +1126,8 @@ export const readOnlyTools = new Set([
     "get_project_variable",
     "list_group_variables",
     "get_group_variable",
+    "get_dependency_proxy_settings",
+    "list_dependency_proxy_blobs",
 ]);
 // Define which tools are destructive (data loss potential)
 export const destructiveTools = new Set([
@@ -1130,6 +1153,7 @@ export const destructiveTools = new Set([
     "push_files",
     "delete_project_variable",
     "delete_group_variable",
+    "purge_dependency_proxy_cache",
 ]);
 // Define which tools are related to wiki and can be toggled by USE_GITLAB_WIKI
 export const wikiToolNames = new Set([
@@ -1473,6 +1497,16 @@ export const TOOLSET_DEFINITIONS = [
             "delete_group_variable",
         ]),
     },
+    {
+        id: "dependency_proxy",
+        isDefault: false,
+        tools: new Set([
+            "get_dependency_proxy_settings",
+            "update_dependency_proxy_settings",
+            "list_dependency_proxy_blobs",
+            "purge_dependency_proxy_cache",
+        ]),
+    },
 ];
 // Derived lookup: tool name → toolset ID
 export const TOOLSET_BY_TOOL_NAME = new Map();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.1.17",
+  "version": "2.1.18",
   "mcpName": "io.github.zereight/gitlab-mcp",
   "description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
   "keywords": [
@@ -51,7 +51,7 @@
     "changelog": "auto-changelog -p",
     "test": "npm run test:all",
     "test:all": "npm run build && npm run test:mock && npm run test:live",
-    "test:mock": "node --import tsx/esm --test test/remote-auth-simple-test.ts && node --import tsx/esm --test test/mcp-oauth-tests.ts && node --import tsx/esm --test test/streamable-http-static-token-auth.test.ts && tsx test/oauth-tests.ts && tsx test/test-list-merge-requests.ts && node --import tsx/esm --test test/test-merge-request-pipelines.ts && tsx test/test-list-project-members.ts && tsx test/test-download-attachment.ts && node --import tsx/esm --test test/test-upload-markdown.ts && node --import tsx/esm --test test/test-job-artifacts.ts && node --import tsx/esm --test test/test-deployment-tools.ts && node --import tsx/esm --test test/test-merge-request-approval-state-tools.ts && node --import tsx/esm --test test/test-search-code.ts && node --import tsx/esm --test test/test-tags.ts && node --import tsx/esm --test test/test-toolset-filtering.ts && node --import tsx/esm --test test/test-ci-lint.ts && node --import tsx/esm --test test/test-todos.ts && node --import tsx/esm --test test/test-auth-retry.ts && node --import tsx/esm --test test/test-issue-description-patch.ts && node --import tsx/esm --test test/test-geteffectiveprojectid.ts && node --import tsx/esm --test test/test-get-file-blame.ts && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts && node --import tsx/esm --test test/utils/tool-args.test.ts && node --import tsx/esm --test test/utils/merge-request-position.test.ts && node --import tsx/esm --test test/nullish-tool-arguments-schema.test.ts && node --import tsx/esm --test test/test-ci-variables.ts",
+    "test:mock": "node --import tsx/esm --test test/remote-auth-simple-test.ts && node --import tsx/esm --test test/mcp-oauth-tests.ts && node --import tsx/esm --test test/streamable-http-static-token-auth.test.ts && tsx test/oauth-tests.ts && tsx test/test-list-merge-requests.ts && node --import tsx/esm --test test/test-merge-request-pipelines.ts && tsx test/test-list-project-members.ts && tsx test/test-download-attachment.ts && node --import tsx/esm --test test/test-upload-markdown.ts && node --import tsx/esm --test test/test-job-artifacts.ts && node --import tsx/esm --test test/test-deployment-tools.ts && node --import tsx/esm --test test/test-merge-request-approval-state-tools.ts && node --import tsx/esm --test test/test-search-code.ts && node --import tsx/esm --test test/test-tags.ts && node --import tsx/esm --test test/test-toolset-filtering.ts && node --import tsx/esm --test test/test-ci-lint.ts && node --import tsx/esm --test test/test-todos.ts && node --import tsx/esm --test test/test-auth-retry.ts && node --import tsx/esm --test test/test-issue-description-patch.ts && node --import tsx/esm --test test/test-geteffectiveprojectid.ts && node --import tsx/esm --test test/test-get-file-blame.ts && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts && node --import tsx/esm --test test/utils/tool-args.test.ts && node --import tsx/esm --test test/utils/merge-request-position.test.ts && node --import tsx/esm --test test/nullish-tool-arguments-schema.test.ts && node --import tsx/esm --test test/test-ci-variables.ts && node --import tsx/esm --test test/test-dependency-proxy.ts",
     "test:stateless": "npm run build && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts",
     "test:mcp-oauth": "npm run build && node --import tsx/esm --test test/mcp-oauth-tests.ts",
     "test:live": "node test/validate-api.js",