npm - @zereight/mcp-gitlab - Versions diffs - 2.1.26 → 2.1.28 - Mend

@zereight/mcp-gitlab 2.1.26 → 2.1.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/README.ko.md +28 -22
package/README.md +39 -29
package/README.zh-CN.md +24 -18
package/build/index.js +92 -20
package/build/test/dynamic-api-url-allowlist.test.js +104 -0
package/build/test/sse-auth-guard.test.js +96 -0
package/build/utils/schema.js +42 -11
package/package.json +5 -4

package/README.ko.md CHANGED Viewed

@@ -20,7 +20,7 @@ PAT, OAuth, 읽기 전용 모드, 동적 API URL, 원격 인증을 지원하며
 - 클라이언트 친화적 설정: Claude Code, Codex, Antigravity, OpenCode, Copilot, Cline, Roo Code, Cursor, Kilo Code, Amp Code 예시 제공
 - 셀프 호스팅 대응: 커스텀 GitLab 인스턴스, 프록시 설정, 동적 API URL 라우팅 지원
-빠른 시작: 아래에서 Personal Access Token 또는 OAuth2 설정 중 하나를 선택하고 MCP 클라이언트 설정에서 `@zereight/mcp-gitlab`을 사용하세요.
+빠른 시작: 아래에서 Personal Access Token 또는 OAuth2 설정 중 하나를 선택하고 `@zereight/mcp-gitlab`을 설치한 뒤 MCP 클라이언트 설정에서 `zereight-mcp-gitlab`을 사용하세요.
 ### 클라이언트 설정 가이드
@@ -63,6 +63,16 @@ PAT, OAuth, 읽기 전용 모드, 동적 API URL, 원격 인증을 지원하며
 가장 단순한 로컬 설정은 Personal Access Token으로 시작하세요. 브라우저 기반 로컬 인증은 OAuth2를 사용하세요. 원격 또는 멀티 유저 배포는 아래 MCP OAuth 및 원격 인증 섹션을 참고하세요.
+서버를 한 번 전역 설치하세요.
+```shell
+npm install -g @zereight/mcp-gitlab
+```
+예시는 기존 `mcp-gitlab`보다 충돌 가능성이 낮은 `zereight-mcp-gitlab` 별칭을 사용합니다. MCP 클라이언트가 찾지 못하면 `which zereight-mcp-gitlab`의 절대 경로를 사용하세요.
+전역 설치를 쓰지 않으려면 `npx -y @zereight/mcp-gitlab@2.1.27`처럼 버전을 고정하세요.
 #### CLI 인자 사용하기(환경 변수 문제가 있는 클라이언트용)
 일부 MCP 클라이언트(예: GitHub Copilot CLI)는 환경 변수 처리에 문제가 있을 수 있습니다. 이 경우 CLI 인자를 사용하세요.
@@ -71,13 +81,8 @@ PAT, OAuth, 읽기 전용 모드, 동적 API URL, 원격 인증을 지원하며
 {
   "mcpServers": {
     "gitlab": {
-      "command": "npx",
-      "args": [
-        "-y",
-        "@zereight/mcp-gitlab",
-        "--token=YOUR_GITLAB_TOKEN",
-        "--api-url=https://gitlab.com/api/v4"
-      ],
+      "command": "zereight-mcp-gitlab",
+      "args": ["--token=YOUR_GITLAB_TOKEN", "--api-url=https://gitlab.com/api/v4"],
       "tools": ["*"]
     }
   }
@@ -178,15 +183,15 @@ MCP 서버가 직접 로컬 브라우저 callback을 받을 때만 `GITLAB_OAUTH
 2. `api` 또는 `read_api` scope가 있는 사전 등록 GitLab OAuth 애플리케이션
    — `Admin area` → `Applications`에서 Redirect URI를 `{MCP_SERVER_URL}/callback`으로 설정하세요.
-| 환경 변수                     | 필수 | 설명                                                       |
-| ----------------------------- | ---- | ---------------------------------------------------------- |
-| `GITLAB_MCP_OAUTH`            | 예   | 활성화하려면 `true`                                        |
-| `GITLAB_API_URL`              | 예   | GitLab API base URL                                        |
-| `GITLAB_OAUTH_APP_ID`         | 예   | GitLab OAuth Application ID                                |
-| `MCP_SERVER_URL`              | 예   | 이 MCP 서버의 공개 HTTPS URL                               |
-| `STREAMABLE_HTTP`             | 예   | 반드시 `true`                                              |
-| `GITLAB_OAUTH_CALLBACK_PROXY` | 선택 | MCP 서버의 고정 `/callback` URL을 사용하려면 `true`        |
-| `GITLAB_OAUTH_SCOPES`         | 선택 | 쉼표로 구분된 scope 목록(기본값: `api,read_api,read_user`) |
+| 환경 변수                     | 필수 | 설명                                                                                                                            |
+| ----------------------------- | ---- | ------------------------------------------------------------------------------------------------------------------------------- |
+| `GITLAB_MCP_OAUTH`            | 예   | 활성화하려면 `true`                                                                                                             |
+| `GITLAB_API_URL`              | 예   | GitLab API base URL                                                                                                             |
+| `GITLAB_OAUTH_APP_ID`         | 예   | GitLab OAuth Application ID                                                                                                     |
+| `MCP_SERVER_URL`              | 예   | 이 MCP 서버의 공개 HTTPS URL                                                                                                    |
+| `STREAMABLE_HTTP`             | 예   | 반드시 `true`                                                                                                                   |
+| `GITLAB_OAUTH_CALLBACK_PROXY` | 선택 | MCP 서버의 고정 `/callback` URL을 사용하려면 `true`                                                                             |
+| `GITLAB_OAUTH_SCOPES`         | 선택 | 쉼표로 구분된 scope 목록(기본값: `api,read_api,read_user`)                                                                      |
 | `GITLAB_OAUTH_ALLOWED_GROUPS` | 선택 | 쉼표로 구분된 GitLab 그룹 전체 경로 — 해당 그룹 및 하위 그룹 멤버만 토큰을 발급받을 수 있음 (기존 `GITLAB_ALLOWED_GROUPS` 대체) |
 > **`Unregistered redirect_uri` 문제 해결**
@@ -233,11 +238,12 @@ MCP 클라이언트 설정:
 **헤더 우선순위**: `Private-Token` > `JOB-TOKEN` > `Authorization: Bearer`
-| 환경 변수                | 필수 | 설명                                |
-| ------------------------ | ---- | ----------------------------------- |
-| `REMOTE_AUTHORIZATION`   | 예   | 활성화하려면 `true`                 |
-| `STREAMABLE_HTTP`        | 예   | 반드시 `true`                       |
-| `ENABLE_DYNAMIC_API_URL` | 선택 | 요청별 `X-GitLab-API-URL` 헤더 허용 |
+| 환경 변수                | 필수 | 설명                                                                |
+| ------------------------ | ---- | ------------------------------------------------------------------- |
+| `REMOTE_AUTHORIZATION`   | 예   | 활성화하려면 `true`                                                 |
+| `STREAMABLE_HTTP`        | 예   | 반드시 `true`                                                       |
+| `ENABLE_DYNAMIC_API_URL` | 선택 | 요청별 `X-GitLab-API-URL` 헤더 허용                                 |
+| `GITLAB_ALLOWED_HOSTS`   | 선택 | 허용할 호스트의 쉼표 구분 목록; `GITLAB_API_URL` 호스트는 항상 허용 |
 **예시 요청 헤더:**

package/README.md CHANGED Viewed

@@ -22,7 +22,7 @@ Supports PAT, OAuth, read-only mode, dynamic API URLs, and remote authorization
 - Client-friendly setup — examples for Claude Code, Codex, Antigravity, OpenCode, Copilot, Cline, Roo Code, Cursor, Kilo Code, and Amp Code
 - Self-hosted ready — works with custom GitLab instances, proxy settings, and dynamic API URL routing
-Quick start: choose either Personal Access Token or OAuth2 setup below and use `@zereight/mcp-gitlab` in your MCP client configuration.
+Quick start: choose either Personal Access Token or OAuth2 setup below, install `@zereight/mcp-gitlab`, and use `zereight-mcp-gitlab` in your MCP client configuration.
 ### Client Setup Guides
@@ -67,6 +67,16 @@ The server supports four authentication methods:
 For the simplest local setup, start with a Personal Access Token. For browser-based local auth, use OAuth2. For remote or multi-user deployments, continue to the MCP OAuth and Remote Authorization sections later in this README.
+Install the server globally once:
+```shell
+npm install -g @zereight/mcp-gitlab
+```
+The examples use `zereight-mcp-gitlab`, a less collision-prone alias for the legacy `mcp-gitlab` binary. If your MCP client cannot find it, use the absolute path from `which zereight-mcp-gitlab`.
+No global install? Pin `npx` to a known version, for example `npx -y @zereight/mcp-gitlab@2.1.27`.
 #### Using CLI Arguments (for clients with env var issues)
 Some MCP clients (like GitHub Copilot CLI) have issues with environment variables. Use CLI arguments instead:
@@ -75,13 +85,8 @@ Some MCP clients (like GitHub Copilot CLI) have issues with environment variable
 {
   "mcpServers": {
     "gitlab": {
-      "command": "npx",
-      "args": [
-        "-y",
-        "@zereight/mcp-gitlab",
-        "--token=YOUR_GITLAB_TOKEN",
-        "--api-url=https://gitlab.com/api/v4"
-      ],
+      "command": "zereight-mcp-gitlab",
+      "args": ["--token=YOUR_GITLAB_TOKEN", "--api-url=https://gitlab.com/api/v4"],
       "tools": ["*"]
     }
   }
@@ -111,6 +116,7 @@ docker run -i --rm \
   -e USE_MILESTONE=true \
   -e USE_PIPELINE=true \
   -e SSE=true \
+  -e SSE_AUTH_TOKEN=your_mcp_sse_token \
   -p 3333:3002 \
   zereight050/gitlab-mcp
 ```
@@ -120,7 +126,10 @@ docker run -i --rm \
   "mcpServers": {
     "gitlab": {
       "type": "sse",
-      "url": "http://localhost:3333/sse"
+      "url": "http://localhost:3333/sse",
+      "headers": {
+        "Authorization": "Bearer your_mcp_sse_token"
+      }
     }
   }
 }
@@ -182,10 +191,10 @@ Remote MCP OAuth is different. In `GITLAB_MCP_OAUTH=true` mode, the MCP client
 provides its own callback URL during `/authorize`. `GITLAB_OAUTH_REDIRECT_URI`
 does not replace that client-provided URL.
-| Mode | Enable with | Callback variable | GitLab redirect URI |
-| --- | --- | --- | --- |
-| Local OAuth | `GITLAB_USE_OAUTH=true` | `GITLAB_OAUTH_REDIRECT_URI` | `http://127.0.0.1:8888/callback` or your local callback |
-| Remote MCP OAuth | `GITLAB_MCP_OAUTH=true` | `GITLAB_OAUTH_CALLBACK_PROXY=true` | `{MCP_SERVER_URL}/callback` |
+| Mode             | Enable with             | Callback variable                  | GitLab redirect URI                                     |
+| ---------------- | ----------------------- | ---------------------------------- | ------------------------------------------------------- |
+| Local OAuth      | `GITLAB_USE_OAUTH=true` | `GITLAB_OAUTH_REDIRECT_URI`        | `http://127.0.0.1:8888/callback` or your local callback |
+| Remote MCP OAuth | `GITLAB_MCP_OAUTH=true` | `GITLAB_OAUTH_CALLBACK_PROXY=true` | `{MCP_SERVER_URL}/callback`                             |
 Use `GITLAB_OAUTH_REDIRECT_URI` only when the MCP server itself owns the local
 browser callback. Use `GITLAB_OAUTH_CALLBACK_PROXY=true` when a remote MCP client
@@ -201,15 +210,15 @@ exchanging credentials with GitLab on behalf of the client.
 2. A pre-registered GitLab OAuth application with `api` (or `read_api`) scopes
    — Go to `Admin area` → `Applications`, set Redirect URI to `{MCP_SERVER_URL}/callback`
-| Environment Variable  | Required | Description                                                |
-| --------------------- | -------- | ---------------------------------------------------------- |
-| `GITLAB_MCP_OAUTH`    | ✅       | Set to `true` to enable                                    |
-| `GITLAB_API_URL`      | ✅       | GitLab API base URL                                        |
-| `GITLAB_OAUTH_APP_ID` | ✅       | GitLab OAuth Application ID                                |
-| `MCP_SERVER_URL`      | ✅       | Public HTTPS URL of this MCP server                        |
-| `STREAMABLE_HTTP`     | ✅       | Must be `true`                                             |
-| `GITLAB_OAUTH_CALLBACK_PROXY` | optional | Set to `true` to use the MCP server's fixed `/callback` URL |
-| `GITLAB_OAUTH_SCOPES` | optional | Comma-separated scopes (default: `api,read_api,read_user`) |
+| Environment Variable          | Required | Description                                                                                                                             |
+| ----------------------------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------- |
+| `GITLAB_MCP_OAUTH`            | ✅       | Set to `true` to enable                                                                                                                 |
+| `GITLAB_API_URL`              | ✅       | GitLab API base URL                                                                                                                     |
+| `GITLAB_OAUTH_APP_ID`         | ✅       | GitLab OAuth Application ID                                                                                                             |
+| `MCP_SERVER_URL`              | ✅       | Public HTTPS URL of this MCP server                                                                                                     |
+| `STREAMABLE_HTTP`             | ✅       | Must be `true`                                                                                                                          |
+| `GITLAB_OAUTH_CALLBACK_PROXY` | optional | Set to `true` to use the MCP server's fixed `/callback` URL                                                                             |
+| `GITLAB_OAUTH_SCOPES`         | optional | Comma-separated scopes (default: `api,read_api,read_user`)                                                                              |
 | `GITLAB_OAUTH_ALLOWED_GROUPS` | optional | Comma-separated group full paths — only members (and subgroup members) may obtain a token (replaces deprecated `GITLAB_ALLOWED_GROUPS`) |
 When `STREAMABLE_HTTP=true`, server-side `GITLAB_PERSONAL_ACCESS_TOKEN` or `GITLAB_JOB_TOKEN` require `REMOTE_AUTHORIZATION=true` or `GITLAB_MCP_OAUTH=true`.
@@ -262,13 +271,14 @@ the token to GitLab on behalf of the caller.
 **Header priority**: `Private-Token` > `JOB-TOKEN` > `Authorization: Bearer`
-| Environment Variable     | Required | Description                                                |
-| ------------------------ | -------- | ---------------------------------------------------------- |
-| `REMOTE_AUTHORIZATION`   | ✅       | Set to `true` to enable                                    |
-| `STREAMABLE_HTTP`        | ✅       | Must be `true`                                             |
-| `ENABLE_DYNAMIC_API_URL` | optional | Allow per-request GitLab URL via `X-GitLab-API-URL` header |
-| `GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY` | optional | Allow unauthenticated `initialize`, `notifications/initialized`, and `tools/list` only (tool calls still require auth) |
-| `MCP_TRUST_PROXY`        | optional | Trust `Forwarded` / `X-Forwarded-*` headers behind a reverse proxy (download URLs, Express `req.ip`, OAuth rate limits) |
+| Environment Variable                          | Required | Description                                                                                                             |
+| --------------------------------------------- | -------- | ----------------------------------------------------------------------------------------------------------------------- |
+| `REMOTE_AUTHORIZATION`                        | ✅       | Set to `true` to enable                                                                                                 |
+| `STREAMABLE_HTTP`                             | ✅       | Must be `true`                                                                                                          |
+| `ENABLE_DYNAMIC_API_URL`                      | optional | Allow per-request GitLab URL via `X-GitLab-API-URL` header                                                              |
+| `GITLAB_ALLOWED_HOSTS`                        | optional | Comma-separated allowed `X-GitLab-API-URL` hosts; `GITLAB_API_URL` hosts are always allowed                             |
+| `GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY` | optional | Allow unauthenticated `initialize`, `notifications/initialized`, and `tools/list` only (tool calls still require auth)  |
+| `MCP_TRUST_PROXY`                             | optional | Trust `Forwarded` / `X-Forwarded-*` headers behind a reverse proxy (download URLs, Express `req.ip`, OAuth rate limits) |
 `GITLAB_ALLOW_UNAUTHENTICATED_TOOL_DISCOVERY=true` is intended for MCP gateways
 or admin UIs that need to inspect tool metadata before a user provides a GitLab

package/README.zh-CN.md CHANGED Viewed

@@ -20,7 +20,7 @@
 - 客户端设置友好：提供 Claude Code、Codex、Antigravity、OpenCode、Copilot、Cline、Roo Code、Cursor、Kilo Code 和 Amp Code 示例
 - 适合自托管：支持自定义 GitLab 实例、代理设置和动态 API URL 路由
-快速开始：在下面选择 Personal Access Token 或 OAuth2 设置，并在 MCP 客户端配置中使用 `@zereight/mcp-gitlab`。
+快速开始：在下面选择 Personal Access Token 或 OAuth2 设置，安装 `@zereight/mcp-gitlab`，并在 MCP 客户端配置中使用 `zereight-mcp-gitlab`。
 ### 客户端设置指南
@@ -63,6 +63,16 @@
 最简单的本地设置可以从 Personal Access Token 开始。基于浏览器的本地认证使用 OAuth2。远程或多用户部署请继续查看下面的 MCP OAuth 和远程授权部分。
+先全局安装一次服务器：
+```shell
+npm install -g @zereight/mcp-gitlab
+```
+示例使用 `zereight-mcp-gitlab`，这是比旧的 `mcp-gitlab` 更不容易冲突的别名。如果 MCP 客户端找不到它，请使用 `which zereight-mcp-gitlab` 输出的绝对路径。
+如果不想全局安装，请固定 `npx` 版本，例如 `npx -y @zereight/mcp-gitlab@2.1.27`。
 #### 使用 CLI 参数（适用于环境变量有问题的客户端）
 部分 MCP 客户端（例如 GitHub Copilot CLI）可能难以处理环境变量。可以改用 CLI 参数。
@@ -71,13 +81,8 @@
 {
   "mcpServers": {
     "gitlab": {
-      "command": "npx",
-      "args": [
-        "-y",
-        "@zereight/mcp-gitlab",
-        "--token=YOUR_GITLAB_TOKEN",
-        "--api-url=https://gitlab.com/api/v4"
-      ],
+      "command": "zereight-mcp-gitlab",
+      "args": ["--token=YOUR_GITLAB_TOKEN", "--api-url=https://gitlab.com/api/v4"],
       "tools": ["*"]
     }
   }
@@ -178,16 +183,16 @@ OpenCode、MCPJam、Claude.ai 等远程 MCP 客户端可能会在授权时发送
 2. 预先注册的 GitLab OAuth 应用，包含 `api` 或 `read_api` scopes
    — 前往 `Admin area` → `Applications`，将 Redirect URI 设置为 `{MCP_SERVER_URL}/callback`
-| 环境变量                      | 必需 | 说明                                                  |
-| ----------------------------- | ---- | ----------------------------------------------------- |
-| `GITLAB_MCP_OAUTH`            | 是   | 设置为 `true` 以启用                                  |
-| `GITLAB_API_URL`              | 是   | GitLab API base URL                                   |
-| `GITLAB_OAUTH_APP_ID`         | 是   | GitLab OAuth Application ID                           |
-| `MCP_SERVER_URL`              | 是   | 此 MCP 服务器的公开 HTTPS URL                         |
-| `STREAMABLE_HTTP`             | 是   | 必须为 `true`                                         |
-| `GITLAB_OAUTH_CALLBACK_PROXY` | 可选 | 设置为 `true` 时使用 MCP 服务器固定的 `/callback` URL |
-| `GITLAB_OAUTH_SCOPES`         | 可选 | 逗号分隔的 scope（默认：`api,read_api,read_user`）    |
-| `GITLAB_OAUTH_ALLOWED_GROUPS` | 可选 | 逗号分隔的 GitLab 群组完整路径 — 仅该群组及其子群组的成员可获取令牌（替代已废弃的 `GITLAB_ALLOWED_GROUPS`）|
+| 环境变量                      | 必需 | 说明                                                                                                        |
+| ----------------------------- | ---- | ----------------------------------------------------------------------------------------------------------- |
+| `GITLAB_MCP_OAUTH`            | 是   | 设置为 `true` 以启用                                                                                        |
+| `GITLAB_API_URL`              | 是   | GitLab API base URL                                                                                         |
+| `GITLAB_OAUTH_APP_ID`         | 是   | GitLab OAuth Application ID                                                                                 |
+| `MCP_SERVER_URL`              | 是   | 此 MCP 服务器的公开 HTTPS URL                                                                               |
+| `STREAMABLE_HTTP`             | 是   | 必须为 `true`                                                                                               |
+| `GITLAB_OAUTH_CALLBACK_PROXY` | 可选 | 设置为 `true` 时使用 MCP 服务器固定的 `/callback` URL                                                       |
+| `GITLAB_OAUTH_SCOPES`         | 可选 | 逗号分隔的 scope（默认：`api,read_api,read_user`）                                                          |
+| `GITLAB_OAUTH_ALLOWED_GROUPS` | 可选 | 逗号分隔的 GitLab 群组完整路径 — 仅该群组及其子群组的成员可获取令牌（替代已废弃的 `GITLAB_ALLOWED_GROUPS`） |
 > **排查 `Unregistered redirect_uri`**
 >
@@ -238,6 +243,7 @@ MCP 客户端配置：
 | `REMOTE_AUTHORIZATION`   | 是   | 设置为 `true` 以启用                                    |
 | `STREAMABLE_HTTP`        | 是   | 必须为 `true`                                           |
 | `ENABLE_DYNAMIC_API_URL` | 可选 | 允许按请求通过 `X-GitLab-API-URL` 请求头指定 GitLab URL |
+| `GITLAB_ALLOWED_HOSTS`   | 可选 | 逗号分隔的允许主机；`GITLAB_API_URL` 中的主机始终允许   |
 **示例请求头：**

package/build/index.js CHANGED Viewed

@@ -467,6 +467,14 @@ function createServer() {
 /**
  * Validate configuration at startup
  */
+function isLoopbackBindHost(host) {
+    const normalized = host.trim().toLowerCase().replace(/^\[|\]$/g, "");
+    const isIpv4Loopback = /^127(?:\.\d{1,3}){3}$/.test(normalized);
+    return (normalized === "localhost" ||
+        isIpv4Loopback ||
+        normalized === "::1" ||
+        normalized === "0:0:0:0:0:0:0:1");
+}
 function validateConfiguration() {
     const errors = [];
     // Validate SESSION_TIMEOUT_SECONDS
@@ -517,6 +525,12 @@ function validateConfiguration() {
             }
         }
     }
+    const allowedHosts = getConfig("allowed-hosts", "GITLAB_ALLOWED_HOSTS")?.split(",") || [];
+    for (const host of allowedHosts) {
+        if (host.trim() && !toAllowedGitLabApiUrl(host)) {
+            errors.push(`GITLAB_ALLOWED_HOSTS contains an invalid host or URL: ${host.trim()}`);
+        }
+    }
     // Validate auth configuration
     const remoteAuth = getConfig("remote-auth", "REMOTE_AUTHORIZATION") === "true";
     const useOAuth = getConfig("use-oauth", "GITLAB_USE_OAUTH") === "true";
@@ -526,12 +540,19 @@ function validateConfiguration() {
     const mcpOAuth = getConfig("mcp-oauth", "GITLAB_MCP_OAUTH") === "true";
     const mcpServerUrl = getConfig("mcp-server-url", "MCP_SERVER_URL");
     const streamableHttp = getConfig("streamable-http", "STREAMABLE_HTTP") === "true";
+    const sse = getConfig("sse", "SSE") === "true";
+    const bindHost = getConfig("host", "HOST") || "127.0.0.1";
+    const sseAuthToken = getConfig("sse-auth-token", "SSE_AUTH_TOKEN");
+    const allowUnauthenticatedRemoteSse = getConfig("sse-dangerously-allow-unauthenticated-remote", "SSE_DANGEROUSLY_ALLOW_UNAUTHENTICATED_REMOTE") === "true";
     if (!remoteAuth && !useOAuth && !hasToken && !hasJobToken && !hasCookie && !mcpOAuth) {
         errors.push("Either --token, --job-token, --cookie-path, --use-oauth=true, --remote-auth=true, or --mcp-oauth=true must be set (or use environment variables)");
     }
     if (streamableHttp && (hasToken || hasJobToken) && !remoteAuth && !mcpOAuth) {
         errors.push("STREAMABLE_HTTP=true/--streamable-http with GITLAB_PERSONAL_ACCESS_TOKEN/--token or GITLAB_JOB_TOKEN/--job-token requires REMOTE_AUTHORIZATION=true/--remote-auth=true or GITLAB_MCP_OAUTH=true/--mcp-oauth=true");
     }
+    if (sse && !isLoopbackBindHost(bindHost) && !sseAuthToken && !allowUnauthenticatedRemoteSse) {
+        errors.push("SSE=true on a non-loopback HOST requires SSE_AUTH_TOKEN (or explicitly set SSE_DANGEROUSLY_ALLOW_UNAUTHENTICATED_REMOTE=true)");
+    }
     if (mcpOAuth) {
         if (!mcpServerUrl) {
             errors.push("MCP_SERVER_URL is required when GITLAB_MCP_OAUTH=true (e.g. https://mcp.example.com)");
@@ -986,11 +1007,57 @@ if (GITLAB_TOOLSETS_RAW && (USE_PIPELINE || USE_MILESTONE || USE_GITLAB_WIKI)) {
         "Legacy flags add tools additively on top of the toolset selection and may produce unexpected results.");
 }
 const MERGE_REQUEST_DEPLOYMENT_SUMMARY_LIMIT = 10;
+function toAllowedGitLabApiUrl(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return null;
+    try {
+        const url = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`);
+        if (url.protocol !== "http:" && url.protocol !== "https:")
+            return null;
+        return { host: url.host, apiUrl: normalizeGitLabApiUrl(url.toString()) };
+    }
+    catch {
+        return null;
+    }
+}
+function parseAllowedGitLabApiUrls(value) {
+    return value
+        .split(",")
+        .map(toAllowedGitLabApiUrl)
+        .filter((entry) => Boolean(entry));
+}
+function encodeGitLabPathSegment(value) {
+    return encodeURIComponent(decodeURIComponent(value));
+}
+function encodeGitLabPath(value) {
+    return value.split("/").map(encodeGitLabPathSegment).join("/");
+}
+function resolveTrustedGitLabApiUrl(value) {
+    const parsed = new URL(normalizeGitLabApiUrl(value));
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        throw new Error("GitLab API URL must use HTTP or HTTPS");
+    }
+    const allowedApiUrl = GITLAB_ALLOWED_API_URLS_BY_HOST.get(parsed.host);
+    if (!allowedApiUrl) {
+        throw new Error(`GitLab API URL host is not allowed: ${parsed.host}`);
+    }
+    return allowedApiUrl;
+}
 // Use the normalizeGitLabApiUrl function to handle various URL formats
 const GITLAB_API_URLS = (getConfig("api-url", "GITLAB_API_URL") || "https://gitlab.com")
     .split(",")
     .map(normalizeGitLabApiUrl);
 const GITLAB_API_URL = GITLAB_API_URLS[0];
+const GITLAB_ALLOWED_API_URLS_BY_HOST = new Map();
+for (const { host, apiUrl } of [
+    ...GITLAB_API_URLS.map(toAllowedGitLabApiUrl).filter((entry) => Boolean(entry)),
+    ...parseAllowedGitLabApiUrls(getConfig("allowed-hosts", "GITLAB_ALLOWED_HOSTS") || ""),
+]) {
+    if (!GITLAB_ALLOWED_API_URLS_BY_HOST.has(host)) {
+        GITLAB_ALLOWED_API_URLS_BY_HOST.set(host, apiUrl);
+    }
+}
 const GITLAB_PROJECT_ID = process.env.GITLAB_PROJECT_ID;
 const GITLAB_ALLOWED_PROJECT_IDS = process.env.GITLAB_ALLOWED_PROJECT_IDS?.split(",")
     .map(id => id.trim())
@@ -8844,18 +8911,15 @@ function registerDownloadProxy(app, maxRequestsPerMinute = Number.parseInt(proce
             return;
         }
         // API URL: prefer token-embedded URL, then X-GitLab-API-URL header, then default
-        let apiUrl = tokenApiUrl || GITLAB_API_URL;
-        if (!tokenApiUrl) {
-            const dynamicApiUrl = req.headers["x-gitlab-api-url"]?.trim();
-            if (ENABLE_DYNAMIC_API_URL && dynamicApiUrl) {
-                try {
-                    new URL(dynamicApiUrl);
-                    apiUrl = normalizeGitLabApiUrl(dynamicApiUrl);
-                }
-                catch {
-                    res.status(400).json({ error: "Invalid X-GitLab-API-URL" });
-                    return;
-                }
+        let apiUrl = GITLAB_API_URL;
+        const requestedApiUrl = tokenApiUrl || req.headers["x-gitlab-api-url"]?.trim();
+        if (ENABLE_DYNAMIC_API_URL && requestedApiUrl) {
+            try {
+                apiUrl = resolveTrustedGitLabApiUrl(requestedApiUrl);
+            }
+            catch {
+                res.status(400).json({ error: "Invalid X-GitLab-API-URL" });
+                return;
             }
         }
         const { type } = req.params;
@@ -8869,7 +8933,7 @@ function registerDownloadProxy(app, maxRequestsPerMinute = Number.parseInt(proce
                         return;
                     }
                     const effectiveProjectId = getEffectiveProjectId(decodeURIComponent(project_id));
-                    gitlabUrl = `${apiUrl}/projects/${encodeURIComponent(effectiveProjectId)}/jobs/${job_id}/artifacts`;
+                    gitlabUrl = `${apiUrl}/projects/${encodeURIComponent(effectiveProjectId)}/jobs/${encodeGitLabPathSegment(job_id)}/artifacts`;
                     break;
                 }
                 case "attachment": {
@@ -8879,7 +8943,7 @@ function registerDownloadProxy(app, maxRequestsPerMinute = Number.parseInt(proce
                         return;
                     }
                     const effectiveProjectId = getEffectiveProjectId(decodeURIComponent(project_id));
-                    gitlabUrl = `${apiUrl}/projects/${encodeURIComponent(effectiveProjectId)}/uploads/${secret}/${filename}`;
+                    gitlabUrl = `${apiUrl}/projects/${encodeURIComponent(effectiveProjectId)}/uploads/${encodeGitLabPathSegment(secret)}/${encodeGitLabPath(filename)}`;
                     break;
                 }
                 case "release-asset": {
@@ -8891,7 +8955,7 @@ function registerDownloadProxy(app, maxRequestsPerMinute = Number.parseInt(proce
                         return;
                     }
                     const effectiveProjectId = getEffectiveProjectId(decodeURIComponent(project_id));
-                    gitlabUrl = `${apiUrl}/projects/${encodeURIComponent(effectiveProjectId)}/releases/${encodeURIComponent(tag_name)}/downloads/${direct_asset_path}`;
+                    gitlabUrl = `${apiUrl}/projects/${encodeURIComponent(effectiveProjectId)}/releases/${encodeURIComponent(tag_name)}/downloads/${encodeGitLabPath(direct_asset_path)}`;
                     break;
                 }
                 default:
@@ -8943,12 +9007,21 @@ function registerDownloadProxy(app, maxRequestsPerMinute = Number.parseInt(proce
  */
 async function startSSEServer() {
     const app = express();
+    const sseAuthToken = getConfig("sse-auth-token", "SSE_AUTH_TOKEN");
     if (MCP_TRUST_PROXY) {
         app.set("trust proxy", 1);
     }
+    const requireSseAuth = (req, res, next) => {
+        if (!sseAuthToken)
+            return next();
+        const match = /^Bearer\s+(\S+)$/i.exec(req.headers.authorization || "");
+        if (match?.[1] === sseAuthToken)
+            return next();
+        res.status(401).json({ error: "SSE authentication required" });
+    };
     const transports = {};
     let shuttingDown = false;
-    app.get("/sse", async (_, res) => {
+    app.get("/sse", requireSseAuth, async (_, res) => {
         const serverInstance = createServer();
         const transport = new SSEServerTransport("/messages", res);
         transports[transport.sessionId] = transport;
@@ -8957,7 +9030,7 @@ async function startSSEServer() {
         });
         await serverInstance.connect(transport);
     });
-    app.post("/messages", async (req, res) => {
+    app.post("/messages", requireSseAuth, async (req, res) => {
         const sessionId = req.query.sessionId;
         const transport = transports[sessionId];
         if (transport) {
@@ -9081,12 +9154,11 @@ async function startStreamableHTTPServer() {
         // Only process dynamic URL if the feature is enabled
         if (ENABLE_DYNAMIC_API_URL && dynamicApiUrl) {
             try {
-                new URL(dynamicApiUrl); // Ensure it's a valid URL format
-                apiUrl = normalizeGitLabApiUrl(dynamicApiUrl);
+                apiUrl = resolveTrustedGitLabApiUrl(dynamicApiUrl);
             }
             catch {
                 logger.warn(`Invalid X-GitLab-API-URL provided: ${dynamicApiUrl}. Auth will fail.`);
-                return null; // Reject if URL is malformed
+                return null; // Reject if URL is malformed or not allowed
             }
         }
         // Extract token — priority: Private-Token > JOB-TOKEN > Authorization Bearer

package/build/test/dynamic-api-url-allowlist.test.js ADDED Viewed

@@ -0,0 +1,104 @@
+import { after, before, describe, test } from "node:test";
+import assert from "node:assert";
+import { createServer } from "node:http";
+import { cleanupServers, findAvailablePort, HOST, launchServer, TransportMode, } from "./utils/server-launcher.js";
+import { MockGitLabServer, findMockServerPort } from "./utils/mock-gitlab-server.js";
+import { CustomHeaderClient } from "./clients/custom-header-client.js";
+const MOCK_TOKEN = "glpat-dynamic-url-token";
+async function startAttackerServer(port) {
+    let hits = 0;
+    const server = createServer((_req, res) => {
+        hits++;
+        res.writeHead(200, { "content-type": "application/json" });
+        res.end("[]");
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(port, HOST, () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+    return { server, getHits: () => hits };
+}
+describe("Dynamic API URL allowlist", () => {
+    let primaryGitLab;
+    let secondaryGitLab;
+    let attackerServer;
+    let mcpServer;
+    let mcpUrl;
+    let secondaryHit = false;
+    let getAttackerHits = () => 0;
+    before(async () => {
+        const primaryPort = await findMockServerPort(9100);
+        primaryGitLab = new MockGitLabServer({ port: primaryPort, validTokens: [MOCK_TOKEN] });
+        await primaryGitLab.start();
+        const secondaryPort = await findMockServerPort(9200);
+        secondaryGitLab = new MockGitLabServer({ port: secondaryPort, validTokens: [MOCK_TOKEN] });
+        secondaryGitLab.addMockHandler("get", "/projects/1/issues", (_req, res) => {
+            secondaryHit = true;
+            res.json([]);
+        });
+        await secondaryGitLab.start();
+        const attackerPort = await findAvailablePort(9300);
+        const attacker = await startAttackerServer(attackerPort);
+        attackerServer = attacker.server;
+        getAttackerHits = attacker.getHits;
+        const mcpPort = await findAvailablePort(3100);
+        mcpServer = await launchServer({
+            mode: TransportMode.STREAMABLE_HTTP,
+            port: mcpPort,
+            timeout: 5000,
+            env: {
+                STREAMABLE_HTTP: "true",
+                REMOTE_AUTHORIZATION: "true",
+                ENABLE_DYNAMIC_API_URL: "true",
+                GITLAB_API_URL: `${primaryGitLab.getUrl()}/api/v4`,
+                GITLAB_ALLOWED_HOSTS: `${secondaryGitLab.getUrl()}/api/v4`,
+            },
+        });
+        mcpUrl = `http://${HOST}:${mcpPort}/mcp`;
+    });
+    after(async () => {
+        if (mcpServer)
+            cleanupServers([mcpServer]);
+        await primaryGitLab?.stop();
+        await secondaryGitLab?.stop();
+        const server = attackerServer;
+        if (server)
+            await new Promise(resolve => server.close(() => resolve()));
+    });
+    test("allows dynamic API URLs on configured hosts", async () => {
+        const client = new CustomHeaderClient({
+            authorization: `Bearer ${MOCK_TOKEN}`,
+            "x-gitlab-api-url": `${secondaryGitLab.getUrl()}/api/v4`,
+        });
+        await client.connect(mcpUrl);
+        await client.callTool("list_issues", { project_id: "1" });
+        await client.disconnect();
+        assert.strictEqual(secondaryHit, true, "allowed dynamic host should receive GitLab calls");
+    });
+    test("rejects dynamic API URLs on unconfigured hosts before forwarding tokens", async () => {
+        const server = attackerServer;
+        assert.ok(server, "attacker server should be running");
+        const attackerUrl = `http://${HOST}:${server.address().port}/api/v4`;
+        const client = new CustomHeaderClient({
+            authorization: `Bearer ${MOCK_TOKEN}`,
+            "x-gitlab-api-url": attackerUrl,
+        });
+        let connected = false;
+        try {
+            await client.connect(mcpUrl);
+            connected = true;
+            await client.callTool("list_issues", { project_id: "1" });
+        }
+        catch {
+            // Expected: the session is rejected before any GitLab API request is made.
+        }
+        finally {
+            await client.disconnect();
+        }
+        assert.strictEqual(connected, false, "untrusted dynamic host should not initialize a session");
+        assert.strictEqual(getAttackerHits(), 0, "token-bearing requests must not reach untrusted hosts");
+    });
+});

package/build/test/sse-auth-guard.test.js ADDED Viewed

@@ -0,0 +1,96 @@
+import assert from "node:assert/strict";
+import { spawn } from "node:child_process";
+import { once } from "node:events";
+import { afterEach, describe, test } from "node:test";
+import * as path from "node:path";
+import { findAvailablePort } from "./utils/server-launcher.js";
+const ERROR_MESSAGE = "SSE=true on a non-loopback HOST requires SSE_AUTH_TOKEN (or explicitly set SSE_DANGEROUSLY_ALLOW_UNAUTHENTICATED_REMOTE=true)";
+const LOOPBACK = "127.0.0.1";
+const SERVER_PATH = path.resolve(process.cwd(), "build/index.js");
+const running = new Set();
+function startSseServer(env, port) {
+    const child = spawn("node", [SERVER_PATH], {
+        env: {
+            ...process.env,
+            GITLAB_API_URL: "https://gitlab.example.com/api/v4",
+            HOST: "0.0.0.0",
+            PORT: String(port),
+            SSE: "true",
+            STREAMABLE_HTTP: "false",
+            REMOTE_AUTHORIZATION: "false",
+            GITLAB_MCP_OAUTH: "false",
+            GITLAB_USE_OAUTH: "false",
+            GITLAB_PERSONAL_ACCESS_TOKEN: "glpat_test",
+            GITLAB_JOB_TOKEN: "",
+            GITLAB_AUTH_COOKIE_PATH: "",
+            ...env,
+        },
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    running.add(child);
+    child.once("exit", () => running.delete(child));
+    return child;
+}
+async function waitForExit(child, timeoutMs = 5000) {
+    let output = "";
+    child.stdout?.on("data", chunk => {
+        output += chunk.toString();
+    });
+    child.stderr?.on("data", chunk => {
+        output += chunk.toString();
+    });
+    let timeoutHandle;
+    const timeout = new Promise((_, reject) => {
+        timeoutHandle = setTimeout(() => reject(new Error(`server did not exit within ${timeoutMs}ms`)), timeoutMs);
+    });
+    try {
+        const [code] = (await Promise.race([once(child, "exit"), timeout]));
+        return { code, output };
+    }
+    finally {
+        clearTimeout(timeoutHandle);
+    }
+}
+async function waitForHealth(port, timeoutMs = 5000) {
+    const deadline = Date.now() + timeoutMs;
+    let lastError;
+    while (Date.now() < deadline) {
+        try {
+            const response = await fetch(`http://${LOOPBACK}:${port}/health`);
+            if (response.ok)
+                return;
+        }
+        catch (error) {
+            lastError = error;
+        }
+        await new Promise(resolve => setTimeout(resolve, 100));
+    }
+    throw new Error(`server did not become healthy: ${String(lastError)}`);
+}
+afterEach(() => {
+    for (const child of running) {
+        if (!child.killed)
+            child.kill("SIGTERM");
+    }
+    running.clear();
+});
+describe("SSE remote auth guard", () => {
+    test("refuses unauthenticated SSE on non-loopback hosts", async () => {
+        const port = await findAvailablePort(4400);
+        const child = startSseServer({}, port);
+        const { code, output } = await waitForExit(child);
+        assert.notEqual(code, 0);
+        assert.match(output, new RegExp(ERROR_MESSAGE.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")));
+    });
+    test("requires bearer auth on SSE endpoints when SSE_AUTH_TOKEN is configured", async () => {
+        const port = await findAvailablePort(4410);
+        startSseServer({ SSE_AUTH_TOKEN: "mcp_sse_secret" }, port);
+        await waitForHealth(port);
+        const sseResponse = await fetch(`http://${LOOPBACK}:${port}/sse`);
+        assert.equal(sseResponse.status, 401);
+        const unauthenticatedMessage = await fetch(`http://${LOOPBACK}:${port}/messages?sessionId=missing`, { method: "POST" });
+        assert.equal(unauthenticatedMessage.status, 401);
+        const authenticatedMessage = await fetch(`http://${LOOPBACK}:${port}/messages?sessionId=missing`, { method: "POST", headers: { Authorization: "Bearer mcp_sse_secret" } });
+        assert.equal(authenticatedMessage.status, 400);
+    });
+});

package/build/utils/schema.js CHANGED Viewed

@@ -87,17 +87,48 @@ export const toJSONSchema = (schema) => {
         return obj;
     }
     const fixedSchema = fixNullableOptional(jsonSchema, true);
-    if (!fixedSchema.properties && Array.isArray(fixedSchema.anyOf)) {
-        const variants = fixedSchema.anyOf.filter((item) => item?.type === "object" && item.properties);
-        if (variants.length === fixedSchema.anyOf.length) {
-            fixedSchema.type = "object";
-            fixedSchema.properties = variants.reduce((properties, item) => {
-                Object.entries(item.properties).forEach(([key, value]) => {
-                    if (!properties[key])
-                        properties[key] = value;
-                });
-                return properties;
-            }, {});
+    // Flatten top-level anyOf/oneOf into a single object schema for Anthropic API compatibility.
+    // The Anthropic API rejects tool input_schema with top-level oneOf/allOf/anyOf.
+    for (const combiner of ["anyOf", "oneOf", "allOf"]) {
+        if (Array.isArray(fixedSchema[combiner])) {
+            const variants = fixedSchema[combiner].filter((item) => item?.type === "object" && item.properties);
+            if (variants.length > 0 && variants.length === fixedSchema[combiner].length) {
+                fixedSchema.type = "object";
+                fixedSchema.properties = fixedSchema.properties || {};
+                for (const variant of variants) {
+                    for (const [key, value] of Object.entries(variant.properties)) {
+                        if (!fixedSchema.properties[key]) {
+                            fixedSchema.properties[key] = value;
+                        }
+                    }
+                }
+                // Compute required fields based on combiner semantics:
+                // - allOf: union (all schemas apply, so all requirements apply)
+                // - anyOf/oneOf: intersection (only shared requirements are universal)
+                const requiredSets = variants.map((v) => new Set(Array.isArray(v.required) ? v.required : []));
+                let mergedRequired;
+                if (combiner === "allOf") {
+                    // Union: any field required in any variant is required
+                    const all = new Set();
+                    for (const s of requiredSets) {
+                        for (const field of s)
+                            all.add(field);
+                    }
+                    mergedRequired = [...all];
+                }
+                else {
+                    // Intersection: only fields required in ALL variants
+                    mergedRequired = [...requiredSets[0]].filter(field => requiredSets.every((s) => s.has(field)));
+                }
+                if (mergedRequired.length > 0) {
+                    const existing = new Set(Array.isArray(fixedSchema.required) ? fixedSchema.required : []);
+                    for (const field of mergedRequired) {
+                        existing.add(field);
+                    }
+                    fixedSchema.required = [...existing];
+                }
+                delete fixedSchema[combiner];
+            }
         }
     }
     return fixedSchema;

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.1.26",
+  "version": "2.1.28",
   "mcpName": "io.github.zereight/gitlab-mcp",
   "description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
   "keywords": [
@@ -26,7 +26,8 @@
   "author": "zereight",
   "type": "module",
   "bin": {
-    "mcp-gitlab": "build/index.js"
+    "mcp-gitlab": "build/index.js",
+    "zereight-mcp-gitlab": "build/index.js"
   },
   "files": [
     "build"
@@ -51,7 +52,7 @@
     "changelog": "auto-changelog -p",
     "test": "npm run test:all",
     "test:all": "npm run build && npm run test:mock && npm run test:live",
-    "test:mock": "node --import tsx/esm --test test/remote-auth-simple-test.ts && node --import tsx/esm --test test/mcp-oauth-tests.ts && node --import tsx/esm --test test/test-oauth-proxy-rate-limit.ts && node --import tsx/esm --test test/streamable-http-static-token-auth.test.ts && node --import tsx/esm --test test/streamable-http-concurrent-session.test.ts && node --import tsx/esm --test test/streamable-http-unauthenticated-discovery.test.ts && tsx test/oauth-tests.ts && tsx test/test-list-merge-requests.ts && tsx test/test-list-issues.ts && node --import tsx/esm --test test/test-create-repository.ts && node --import tsx/esm --test test/test-update-project.ts && node --import tsx/esm --test test/test-merge-request-pipelines.ts && tsx test/test-list-project-members.ts && tsx test/test-download-attachment.ts && node --import tsx/esm --test test/test-upload-markdown.ts && node --import tsx/esm --test test/test-job-artifacts.ts && node --import tsx/esm --test test/test-remote-downloads.ts && node --import tsx/esm --test test/test-deployment-tools.ts && node --import tsx/esm --test test/test-merge-request-approval-state-tools.ts && node --import tsx/esm --test test/test-search-code.ts && node --import tsx/esm --test test/test-tags.ts && node --import tsx/esm --test test/test-protected-branches.ts && node --import tsx/esm --test test/test-toolset-filtering.ts && node --import tsx/esm --test test/test-ci-lint.ts && node --import tsx/esm --test test/test-ci-catalog.ts && node --import tsx/esm --test test/test-todos.ts && node --import tsx/esm --test test/test-auth-retry.ts && node --import tsx/esm --test test/test-issue-description-patch.ts && node --import tsx/esm --test test/test-geteffectiveprojectid.ts && node --import tsx/esm --test test/test-get-file-blame.ts && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts && node --import tsx/esm --test test/utils/tool-args.test.ts && node --import tsx/esm --test test/utils/proxy-client-ip.test.ts && node --import tsx/esm --test test/utils/forwarded-public-base-url.test.ts && node --import tsx/esm --test test/utils/graphql-query.test.ts && node --import tsx/esm --test test/utils/wiki-title.test.ts && node --import tsx/esm --test test/utils/merge-request-position.test.ts && node --import tsx/esm --test test/nullish-tool-arguments-schema.test.ts && node --import tsx/esm --test test/test-ci-variables.ts && node --import tsx/esm --test test/test-dependency-proxy.ts",
+    "test:mock": "node --import tsx/esm --test test/remote-auth-simple-test.ts && node --import tsx/esm --test test/dynamic-api-url-allowlist.test.ts && node --import tsx/esm --test test/mcp-oauth-tests.ts && node --import tsx/esm --test test/test-oauth-proxy-rate-limit.ts && node --import tsx/esm --test test/streamable-http-static-token-auth.test.ts && node --import tsx/esm --test test/sse-auth-guard.test.ts && node --import tsx/esm --test test/streamable-http-concurrent-session.test.ts && node --import tsx/esm --test test/streamable-http-unauthenticated-discovery.test.ts && tsx test/oauth-tests.ts && tsx test/test-list-merge-requests.ts && tsx test/test-list-issues.ts && node --import tsx/esm --test test/test-create-repository.ts && node --import tsx/esm --test test/test-update-project.ts && node --import tsx/esm --test test/test-merge-request-pipelines.ts && tsx test/test-list-project-members.ts && tsx test/test-download-attachment.ts && node --import tsx/esm --test test/test-upload-markdown.ts && node --import tsx/esm --test test/test-job-artifacts.ts && node --import tsx/esm --test test/test-remote-downloads.ts && node --import tsx/esm --test test/test-deployment-tools.ts && node --import tsx/esm --test test/test-merge-request-approval-state-tools.ts && node --import tsx/esm --test test/test-search-code.ts && node --import tsx/esm --test test/test-tags.ts && node --import tsx/esm --test test/test-protected-branches.ts && node --import tsx/esm --test test/test-toolset-filtering.ts && node --import tsx/esm --test test/test-ci-lint.ts && node --import tsx/esm --test test/test-ci-catalog.ts && node --import tsx/esm --test test/test-todos.ts && node --import tsx/esm --test test/test-auth-retry.ts && node --import tsx/esm --test test/test-issue-description-patch.ts && node --import tsx/esm --test test/test-geteffectiveprojectid.ts && node --import tsx/esm --test test/test-get-file-blame.ts && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts && node --import tsx/esm --test test/utils/tool-args.test.ts && node --import tsx/esm --test test/utils/proxy-client-ip.test.ts && node --import tsx/esm --test test/utils/forwarded-public-base-url.test.ts && node --import tsx/esm --test test/utils/graphql-query.test.ts && node --import tsx/esm --test test/utils/wiki-title.test.ts && node --import tsx/esm --test test/utils/merge-request-position.test.ts && node --import tsx/esm --test test/nullish-tool-arguments-schema.test.ts && node --import tsx/esm --test test/test-ci-variables.ts && node --import tsx/esm --test test/test-dependency-proxy.ts",
     "test:stateless": "npm run build && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts",
     "test:mcp-oauth": "npm run build && node --import tsx/esm --test test/mcp-oauth-tests.ts",
     "test:live": "node test/validate-api.js",
@@ -70,7 +71,7 @@
     "format:check": "prettier --check \"**/*.{js,ts,json,md}\""
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.24.2",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@types/node-fetch": "^2.6.12",
     "diff": "^9.0.0",
     "express": "^5.1.0",