@zereight/mcp-gitlab 2.1.42 → 2.1.43

package/README.ko.md

@@ -80,7 +80,7 @@ npm install -g @zereight/mcp-gitlab
 
 예시는 기존 `mcp-gitlab`보다 충돌 가능성이 낮은 `zereight-mcp-gitlab` 별칭을 사용합니다. MCP 클라이언트가 찾지 못하면 `which zereight-mcp-gitlab`의 절대 경로를 사용하세요.
 
-전역 설치를 쓰지 않으려면 `npx -y @zereight/mcp-gitlab@2.1.41`처럼 직전 안정 버전(문서가 권장하는 버전)으로 고정하세요. 항상 최신 버전을 원하면 `npx -y @zereight/mcp-gitlab@latest`를 사용하세요. 새 버전이 나오면 서버가 시작 시 stderr로 알려줍니다(`GITLAB_DISABLE_VERSION_CHECK=true`로 비활성화 가능).
+전역 설치를 쓰지 않으려면 `npx -y @zereight/mcp-gitlab@2.1.42`처럼 직전 안정 버전(문서가 권장하는 버전)으로 고정하세요. 항상 최신 버전을 원하면 `npx -y @zereight/mcp-gitlab@latest`를 사용하세요. 새 버전이 나오면 서버가 시작 시 stderr로 알려줍니다(`GITLAB_DISABLE_VERSION_CHECK=true`로 비활성화 가능).
 
 #### CLI 인자 사용하기(환경 변수 문제가 있는 클라이언트용)
 
@@ -479,7 +479,7 @@ node build/index.js
 AI 에이전트가 skill/instruction 로딩을 지원하는 경우(Claude Code, GitHub Copilot, Cursor 등), [`skills/gitlab-mcp/`](./skills/gitlab-mcp/)에 미리 작성된 skill 파일을 사용할 수 있습니다.
 
 - **[SKILL.md](./skills/gitlab-mcp/SKILL.md)** — 도구셋 개요, 핵심 워크플로우, 파라미터 힌트를 담은 핵심 가이드
-- **[reference/](./skills/gitlab-mcp/reference/)** — 코드 리뷰, 머지 리퀘스트, 이슈, 파이프라인용 상세 워크플로우 문서
+- **[reference/](./skills/gitlab-mcp/reference/)** — 코드 리뷰, 머지 리퀘스트, 이슈, 파이프라인, 취약점 트리아지용 상세 워크플로우 문서
 
 `skills` CLI로 설치:
 
@@ -491,7 +491,7 @@ AI 클라이언트에 skill 디렉터리를 등록하면 전체 ListTools 응답
 
 ## 도구 🛠️
 
-전체 도구 목록은 영어 README의 [Tools 섹션](./README.md#tools-%EF%B8%8F)을 참고하세요. 현재 서버는 머지 리퀘스트, 이슈, 파이프라인, 배포, 환경, 아티팩트, 마일스톤, 위키, 저장소, 릴리스, 사용자, 이벤트, work item, 웹훅, 코드 검색, GraphQL 실행 도구를 제공합니다.
+전체 도구 목록은 영어 README의 [Tools 섹션](./README.md#tools-%EF%B8%8F)을 참고하세요. 현재 서버는 머지 리퀘스트, 이슈, 파이프라인, 배포, 환경, 아티팩트, 마일스톤, 위키, 저장소, 릴리스, 사용자, 이벤트, work item, 웹훅, 코드 검색, CI/CD 변수, dependency proxy, 취약점 트리아지, GraphQL 실행 도구를 제공합니다.
 
 ### Wiki 페이지 제목과 slug
 

package/README.md

@@ -1,5 +1,7 @@
 # GitLab MCP Server
 
+[![MCP Toplist](https://mcptoplist.com/badge/io.github.zereight%2Fgitlab-mcp.svg)](https://mcptoplist.com/server/io.github.zereight%2Fgitlab-mcp)
+
 [English](./README.md) | [한국어](./README.ko.md) | [简体中文](./README.zh-CN.md)
 
 📖 **[Documentation →](https://zereight.github.io/gitlab-mcp/)** Setup guides, environment variables, and the full tool reference live on the hosted docs site.
@@ -80,7 +82,7 @@ npm install -g @zereight/mcp-gitlab
 
 The examples use `zereight-mcp-gitlab`, a less collision-prone alias for the legacy `mcp-gitlab` binary. If your MCP client cannot find it, use the absolute path from `which zereight-mcp-gitlab`.
 
-No global install? Pin `npx` to the previous stable release (the version these docs recommend), for example `npx -y @zereight/mcp-gitlab@2.1.41`. If you always want the newest release, use `npx -y @zereight/mcp-gitlab@latest` instead. The server prints a notice to stderr on startup when a newer version is available (disable with `GITLAB_DISABLE_VERSION_CHECK=true`).
+No global install? Pin `npx` to the previous stable release (the version these docs recommend), for example `npx -y @zereight/mcp-gitlab@2.1.42`. If you always want the newest release, use `npx -y @zereight/mcp-gitlab@latest` instead. The server prints a notice to stderr on startup when a newer version is available (disable with `GITLAB_DISABLE_VERSION_CHECK=true`).
 
 #### Using CLI Arguments (for clients with env var issues)
 
@@ -523,7 +525,7 @@ No `headers` field is needed — Claude.ai obtains the token via OAuth automatic
 Pre-built skill files are available in [`skills/gitlab-mcp/`](./skills/gitlab-mcp/) for AI agents that support skill/instruction loading (Claude Code, GitHub Copilot, Cursor, etc.).
 
 - **[SKILL.md](./skills/gitlab-mcp/SKILL.md)** — Core guide (~800 tokens) with toolset overview, key workflows, and parameter hints
-- **[reference/](./skills/gitlab-mcp/reference/)** — Detailed workflow docs for code review, merge requests, issues, and pipelines
+- **[reference/](./skills/gitlab-mcp/reference/)** — Detailed workflow docs for code review, merge requests, issues, pipelines, and vulnerability triage
 
 Install with the `skills` CLI:
 
@@ -751,7 +753,11 @@ Register the skill directory in your AI client to get optimal tool usage guidanc
 209. `update_dependency_proxy_settings` - Update dependency proxy settings for a group (enable/disable, credentials for authenticated Docker Hub pulls)
 210. `list_dependency_proxy_blobs` - List cached dependency proxy blobs for a group with cursor-based pagination
 211. `purge_dependency_proxy_cache` - Schedule purge of all cached dependency proxy blobs for a group
-212. `discover_tools` - Discover and activate additional tool categories for this session. Available categories: merge_requests, issues, repositories, branches, projects, labels, ci, groups, pipelines, milestones, wiki, releases, tags, users, workitems, webhooks, search, variables, dependency_proxy. Already-active categories are listed in the response.
+212. `list_project_vulnerabilities` - List vulnerabilities for a project with optional state, severity, and report type filters (GraphQL-backed, cursor pagination)
+213. `get_vulnerability` - Get full details of a specific vulnerability
+214. `dismiss_vulnerability` - Dismiss a vulnerability with a reason (acceptable_risk, false_positive, used_in_tests, mitigating_control, not_applicable) and optional comment
+215. `confirm_vulnerability` - Confirm a vulnerability as a real finding requiring remediation
+216. `discover_tools` - Discover and activate additional tool categories for this session. Available categories: merge_requests, issues, repositories, branches, projects, labels, ci, groups, pipelines, milestones, wiki, releases, tags, users, workitems, webhooks, search, variables, dependency_proxy, vulnerabilities. Already-active categories are listed in the response.
 
 <!-- TOOLS-END -->
 

package/README.zh-CN.md

@@ -80,7 +80,7 @@ npm install -g @zereight/mcp-gitlab
 
 示例使用 `zereight-mcp-gitlab`，这是比旧的 `mcp-gitlab` 更不容易冲突的别名。如果 MCP 客户端找不到它，请使用 `which zereight-mcp-gitlab` 输出的绝对路径。
 
-如果不想全局安装，请将 `npx` 固定到上一个稳定版本（即文档推荐的版本），例如 `npx -y @zereight/mcp-gitlab@2.1.41`。如果始终想使用最新版本，请改用 `npx -y @zereight/mcp-gitlab@latest`。有新版本发布时，服务器会在启动时通过 stderr 提示（可用 `GITLAB_DISABLE_VERSION_CHECK=true` 关闭）。
+如果不想全局安装，请将 `npx` 固定到上一个稳定版本（即文档推荐的版本），例如 `npx -y @zereight/mcp-gitlab@2.1.42`。如果始终想使用最新版本，请改用 `npx -y @zereight/mcp-gitlab@latest`。有新版本发布时，服务器会在启动时通过 stderr 提示（可用 `GITLAB_DISABLE_VERSION_CHECK=true` 关闭）。
 
 #### 使用 CLI 参数（适用于环境变量有问题的客户端）
 
@@ -479,7 +479,7 @@ node build/index.js
 对于支持 skill/instruction 加载的 AI 代理（Claude Code、GitHub Copilot、Cursor 等），[`skills/gitlab-mcp/`](./skills/gitlab-mcp/) 中提供了预构建 skill 文件。
 
 - **[SKILL.md](./skills/gitlab-mcp/SKILL.md)** — 核心指南，包含工具集概览、关键工作流和参数提示
-- **[reference/](./skills/gitlab-mcp/reference/)** — 代码审查、合并请求、议题和流水线的详细工作流文档
+- **[reference/](./skills/gitlab-mcp/reference/)** — 代码审查、合并请求、议题、流水线和漏洞分类的详细工作流文档
 
 使用 `skills` CLI 安装：
 
@@ -491,7 +491,7 @@ npx skills add zereight/gitlab-mcp --skill gitlab-mcp-skill
 
 ## 工具 🛠️
 
-完整工具列表请参考英文 README 的 [Tools 部分](./README.md#tools-%EF%B8%8F)。当前服务器提供合并请求、议题、流水线、部署、环境、制品、里程碑、Wiki、仓库、发布、用户、事件、work item、webhook、代码搜索和 GraphQL 执行相关工具。
+完整工具列表请参考英文 README 的 [Tools 部分](./README.md#tools-%EF%B8%8F)。当前服务器提供合并请求、议题、流水线、部署、环境、制品、里程碑、Wiki、仓库、发布、用户、事件、work item、webhook、代码搜索、CI/CD 变量、dependency proxy、漏洞分类和 GraphQL 执行相关工具。
 
 ### Wiki 页面标题与 slug
 

package/build/downloads/proxy.js

@@ -100,8 +100,9 @@ export function registerDownloadProxy(app, deps) {
             try {
                 apiUrl = deps.resolveTrustedGitLabApiUrl(requestedApiUrl);
             }
-            catch {
-                res.status(400).json({ error: "Invalid X-GitLab-API-URL" });
+            catch (error) {
+                const message = error instanceof Error ? error.message : "Invalid X-GitLab-API-URL";
+                res.status(400).json({ error: message });
                 return;
             }
         }

package/build/index.js

@@ -103,47 +103,11 @@ CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMerg
 GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
-GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabProtectedBranchSchema, GitLabGroupSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabGroupMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, GitLabCiVariableSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GitLabDependencyProxySchema, GitLabDependencyProxyBlobSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
+GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabProtectedBranchSchema, GitLabGroupSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabGroupMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, GitLabCiVariableSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GitLabDependencyProxySchema, GitLabDependencyProxyBlobSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
 GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListGroupMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, HealthCheckSchema, } from "./schemas.js";
 import { randomUUID, timingSafeEqual, } from "node:crypto";
-import { pino } from "pino";
-const logger = pino({
-    level: process.env.LOG_LEVEL || "info",
-    // Redact sensitive values that must never appear in logs. Covers both
-    // typical auth-context property names and common HTTP header-bag shapes
-    // that tool/fetch wrappers may include when logging errors.
-    redact: {
-        paths: [
-            "token",
-            "*.token",
-            "ctx.token",
-            "context.token",
-            "authData.token",
-            "auth.token",
-            "headers.authorization",
-            "headers.Authorization",
-            'headers["private-token"]',
-            'headers["Private-Token"]',
-            'headers["job-token"]',
-            'headers["JOB-TOKEN"]',
-            'headers["mcp-session-id"]',
-            'headers["Mcp-Session-Id"]',
-            "sessionId",
-            "*.sessionId",
-            "ctx.sessionId",
-            "context.sessionId",
-        ],
-        censor: "[REDACTED]",
-    },
-    transport: {
-        target: "pino-pretty",
-        options: {
-            colorize: true,
-            levelFirst: true,
-            destination: 2,
-        },
-    },
-});
+import { createLogger } from "./utils/logger.js";
+const logger = createLogger();
 /**
  * Read version from package.json
  */
@@ -1146,7 +1110,8 @@ function resolveTrustedGitLabApiUrl(value) {
     }
     const allowedApiUrl = GITLAB_ALLOWED_API_URLS_BY_HOST.get(parsed.host);
     if (!allowedApiUrl) {
-        throw new Error(`GitLab API URL host is not allowed: ${parsed.host}`);
+        throw new Error(`GitLab API URL host is not allowed: ${parsed.host}. ` +
+            "Add the host to GITLAB_ALLOWED_HOSTS or GITLAB_API_URL.");
     }
     return allowedApiUrl;
 }
@@ -6453,6 +6418,262 @@ async function purgeDependencyProxyCache(groupId) {
     const response = await fetch(url.toString(), { ...getFetchConfig(), method: "DELETE" });
     await handleGitLabError(response);
 }
+// --- Vulnerability functions (GraphQL) ---
+//
+// The REST Vulnerabilities API is deprecated and silently ignores filter
+// params on list and reason/comment on dismiss. GitLab recommends the
+// GraphQL API for vulnerability management, which supports all of these.
+/** Convert a numeric vulnerability ID (or an existing Vulnerability GID) to a GraphQL global ID. */
+function toVulnerabilityGid(vulnerabilityId) {
+    if (/^\d+$/.test(vulnerabilityId)) {
+        return `gid://gitlab/Vulnerability/${vulnerabilityId}`;
+    }
+    if (/^gid:\/\/gitlab\/Vulnerability\/\d+$/.test(vulnerabilityId)) {
+        return vulnerabilityId;
+    }
+    throw new Error(`Invalid vulnerability ID "${vulnerabilityId}": expected a numeric ID or a gid://gitlab/Vulnerability/<id> global ID`);
+}
+/**
+ * Resolve a project ID or path to the full namespace path required by
+ * GraphQL's `project(fullPath:)` query. Numeric IDs are resolved via a
+ * REST lookup; paths are returned as-is (decoded).
+ */
+async function resolveProjectFullPath(projectId) {
+    const decoded = decodeURIComponent(getEffectiveProjectId(decodeURIComponent(projectId)));
+    if (!/^\d+$/.test(decoded)) {
+        return decoded;
+    }
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(decoded)}`);
+    const response = await fetch(url.toString(), { ...getFetchConfig() });
+    await handleGitLabError(response);
+    const project = (await response.json());
+    if (!project.path_with_namespace) {
+        throw new Error(`Could not resolve full path for project ${decoded}`);
+    }
+    return project.path_with_namespace;
+}
+/**
+ * Enforce GITLAB_ALLOWED_PROJECT_IDS for vulnerability tools. Vulnerability
+ * GIDs are globally unique rather than project-scoped, so the boundary must
+ * be checked against the project the vulnerability actually belongs to —
+ * mirroring what getEffectiveProjectId does for project-scoped REST calls.
+ * Allowlist entries may be numeric IDs or full namespace paths.
+ */
+function assertVulnerabilityProjectAllowed(vulnerabilityId, project) {
+    if (GITLAB_ALLOWED_PROJECT_IDS.length === 0) {
+        return;
+    }
+    const fullPath = project?.fullPath ?? undefined;
+    const numericId = project?.id?.match(/^gid:\/\/gitlab\/Project\/(\d+)$/)?.[1];
+    const allowed = (fullPath !== undefined && GITLAB_ALLOWED_PROJECT_IDS.includes(fullPath)) ||
+        (numericId !== undefined && GITLAB_ALLOWED_PROJECT_IDS.includes(numericId));
+    if (!allowed) {
+        throw new Error(`Access denied: Vulnerability ${vulnerabilityId} belongs to project ${fullPath ?? numericId ?? "unknown"}, which is not in the allowed project list: ${GITLAB_ALLOWED_PROJECT_IDS.join(", ")}`);
+    }
+}
+/**
+ * Pre-flight allowlist check for vulnerability mutations: resolves the
+ * vulnerability's project and verifies it against GITLAB_ALLOWED_PROJECT_IDS
+ * before any write is issued. No-op (no extra request) when the allowlist
+ * is not configured.
+ */
+async function ensureVulnerabilityProjectAllowed(vulnerabilityId) {
+    if (GITLAB_ALLOWED_PROJECT_IDS.length === 0) {
+        return;
+    }
+    const data = await executeGraphQL(`query getVulnerabilityProject($id: VulnerabilityID!) {
+      vulnerability(id: $id) {
+        project {
+          id
+          fullPath
+        }
+      }
+    }`, { id: toVulnerabilityGid(vulnerabilityId) });
+    if (!data.vulnerability) {
+        throw new Error(`Vulnerability not found: ${vulnerabilityId}`);
+    }
+    assertVulnerabilityProjectAllowed(vulnerabilityId, data.vulnerability.project);
+}
+/** Shared GraphQL selection set for vulnerability objects. */
+const VULNERABILITY_FIELDS = `
+  id
+  title
+  description
+  state
+  severity
+  reportType
+  detectedAt
+  confirmedAt
+  resolvedAt
+  dismissedAt
+  dismissalReason
+  webUrl
+  scanner {
+    name
+    externalId
+    vendor
+  }
+  identifiers {
+    externalType
+    externalId
+    name
+    url
+  }
+  links {
+    name
+    url
+  }
+  location {
+    ... on VulnerabilityLocationSast {
+      file
+      startLine
+      endLine
+    }
+    ... on VulnerabilityLocationSecretDetection {
+      file
+      startLine
+      endLine
+    }
+    ... on VulnerabilityLocationDependencyScanning {
+      file
+      dependency {
+        package {
+          name
+        }
+        version
+      }
+    }
+    ... on VulnerabilityLocationContainerScanning {
+      image
+      operatingSystem
+      dependency {
+        package {
+          name
+        }
+        version
+      }
+    }
+    ... on VulnerabilityLocationDast {
+      path
+      hostname
+    }
+  }
+`;
+async function listProjectVulnerabilities(projectId, options = {}) {
+    const fullPath = await resolveProjectFullPath(projectId);
+    const variables = {
+        fullPath,
+        first: Math.min(options.first ?? 20, 100),
+    };
+    if (options.state)
+        variables.state = [options.state.toUpperCase()];
+    if (options.severity)
+        variables.severity = [options.severity.toUpperCase()];
+    if (options.report_type)
+        variables.reportType = [options.report_type.toUpperCase()];
+    if (options.after)
+        variables.after = options.after;
+    const data = await executeGraphQL(`query listProjectVulnerabilities(
+      $fullPath: ID!
+      $state: [VulnerabilityState!]
+      $severity: [VulnerabilitySeverity!]
+      $reportType: [VulnerabilityReportType!]
+      $first: Int
+      $after: String
+    ) {
+      project(fullPath: $fullPath) {
+        vulnerabilities(
+          state: $state
+          severity: $severity
+          reportType: $reportType
+          first: $first
+          after: $after
+        ) {
+          nodes {
+            ${VULNERABILITY_FIELDS}
+          }
+          pageInfo {
+            endCursor
+            hasNextPage
+          }
+        }
+      }
+    }`, variables);
+    if (!data.project) {
+        throw new Error(`Project not found or not accessible: ${fullPath}`);
+    }
+    return {
+        vulnerabilities: data.project.vulnerabilities.nodes,
+        pageInfo: data.project.vulnerabilities.pageInfo,
+    };
+}
+async function getVulnerability(vulnerabilityId) {
+    const data = await executeGraphQL(`query getVulnerability($id: VulnerabilityID!) {
+      vulnerability(id: $id) {
+        ${VULNERABILITY_FIELDS}
+        project {
+          id
+          name
+          fullPath
+        }
+      }
+    }`, { id: toVulnerabilityGid(vulnerabilityId) });
+    if (!data.vulnerability) {
+        throw new Error(`Vulnerability not found: ${vulnerabilityId}`);
+    }
+    assertVulnerabilityProjectAllowed(vulnerabilityId, data.vulnerability.project);
+    return data.vulnerability;
+}
+async function dismissVulnerability(vulnerabilityId, reason, comment) {
+    await ensureVulnerabilityProjectAllowed(vulnerabilityId);
+    const input = {
+        id: toVulnerabilityGid(vulnerabilityId),
+        dismissalReason: reason.toUpperCase(),
+    };
+    if (comment)
+        input.comment = comment;
+    const data = await executeGraphQL(`mutation dismissVulnerability($input: VulnerabilityDismissInput!) {
+      vulnerabilityDismiss(input: $input) {
+        vulnerability {
+          id
+          state
+          dismissedAt
+          dismissalReason
+        }
+        errors
+      }
+    }`, { input });
+    if (data.vulnerabilityDismiss.errors?.length) {
+        throw new Error(`Failed to dismiss vulnerability: ${data.vulnerabilityDismiss.errors.join(", ")}`);
+    }
+    if (!data.vulnerabilityDismiss.vulnerability) {
+        throw new Error(`Vulnerability not returned after dismissal (id: ${vulnerabilityId})`);
+    }
+    return data.vulnerabilityDismiss.vulnerability;
+}
+async function confirmVulnerability(vulnerabilityId, comment) {
+    await ensureVulnerabilityProjectAllowed(vulnerabilityId);
+    const input = { id: toVulnerabilityGid(vulnerabilityId) };
+    if (comment)
+        input.comment = comment;
+    const data = await executeGraphQL(`mutation confirmVulnerability($input: VulnerabilityConfirmInput!) {
+      vulnerabilityConfirm(input: $input) {
+        vulnerability {
+          id
+          state
+          confirmedAt
+        }
+        errors
+      }
+    }`, { input });
+    if (data.vulnerabilityConfirm.errors?.length) {
+        throw new Error(`Failed to confirm vulnerability: ${data.vulnerabilityConfirm.errors.join(", ")}`);
+    }
+    if (!data.vulnerabilityConfirm.vulnerability) {
+        throw new Error(`Vulnerability not returned after confirmation (id: ${vulnerabilityId})`);
+    }
+    return data.vulnerabilityConfirm.vulnerability;
+}
 /**
  * Upload a file to a GitLab project for use in markdown content.
  *
@@ -8869,6 +9090,28 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            // --- Vulnerability tools ---
+            case "list_project_vulnerabilities": {
+                const args = ListProjectVulnerabilitiesSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const result = await listProjectVulnerabilities(project_id, options);
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            }
+            case "get_vulnerability": {
+                const args = GetVulnerabilitySchema.parse(params.arguments);
+                const result = await getVulnerability(args.vulnerability_id);
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            }
+            case "dismiss_vulnerability": {
+                const args = DismissVulnerabilitySchema.parse(params.arguments);
+                const result = await dismissVulnerability(args.vulnerability_id, args.reason, args.comment);
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            }
+            case "confirm_vulnerability": {
+                const args = ConfirmVulnerabilitySchema.parse(params.arguments);
+                const result = await confirmVulnerability(args.vulnerability_id, args.comment);
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            }
             case "upload_markdown": {
                 if (IS_REMOTE) {
                     const args = MarkdownUploadRemoteSchema.parse(params.arguments);
@@ -9496,8 +9739,9 @@ async function startStreamableHTTPServer() {
             try {
                 apiUrl = resolveTrustedGitLabApiUrl(dynamicApiUrl);
             }
-            catch {
-                logger.warn(`Invalid X-GitLab-API-URL provided: ${dynamicApiUrl}. Auth will fail.`);
+            catch (error) {
+                const reason = error instanceof Error ? error.message : "Invalid X-GitLab-API-URL";
+                logger.warn(`Invalid X-GitLab-API-URL provided: ${dynamicApiUrl}. ${reason}`);
                 return null; // Reject if URL is malformed or not allowed
             }
         }

package/build/oauth-proxy.js

@@ -47,11 +47,11 @@
 import { InvalidTokenError, ServerError } from "@modelcontextprotocol/sdk/server/auth/errors.js";
 import { OAuthTokensSchema } from "@modelcontextprotocol/sdk/shared/auth.js";
 import { randomUUID, randomBytes, createHash } from "node:crypto";
-import { pino } from "pino";
 import { looksLikeStatelessClientId, mintClientId, openClientId, } from "./stateless/client-id.js";
 import { looksLikeStatelessState, mintPendingAuthState, openPendingAuthState, } from "./stateless/pending-auth.js";
 import { looksLikeStatelessStoredTokensCode, mintStoredTokensCode, openStoredTokensCode, } from "./stateless/stored-tokens.js";
-const logger = pino({ name: "gitlab-mcp-oauth-proxy" });
+import { createLogger } from "./utils/logger.js";
+const logger = createLogger("gitlab-mcp-oauth-proxy");
 // ---------------------------------------------------------------------------
 // GitLab OAuth Server Provider
 // ---------------------------------------------------------------------------

package/build/oauth.js

@@ -9,11 +9,8 @@ import { execFile } from "child_process";
 import { promisify } from "util";
 import open from "open";
 import pkceChallenge from "pkce-challenge";
-import { pino } from "pino";
-const logger = pino({
-    name: "gitlab-mcp-oauth",
-    level: process.env.LOG_LEVEL || "info",
-}, pino.destination(2));
+import { createLogger } from "./utils/logger.js";
+const logger = createLogger("gitlab-mcp-oauth");
 const execFileAsync = promisify(execFile);
 function escapeHtml(str) {
     const map = { "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" };

package/build/schemas.js

@@ -4023,3 +4023,70 @@ export const ListDependencyProxyBlobsSchema = z.object({
 export const PurgeDependencyProxyCacheSchema = z.object({
     group_id: z.coerce.string().describe("Group ID or URL-encoded path"),
 });
+// --- Vulnerability schemas ---
+// Schema for listing project vulnerabilities with optional filters (GraphQL-backed)
+export const ListProjectVulnerabilitiesSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    state: z
+        .enum(["detected", "confirmed", "resolved", "dismissed"])
+        .optional()
+        .describe("Filter by vulnerability state"),
+    severity: z
+        .enum(["critical", "high", "medium", "low", "info", "unknown"])
+        .optional()
+        .describe("Filter by severity level"),
+    report_type: z
+        .enum([
+        "sast",
+        "dast",
+        "dependency_scanning",
+        "container_scanning",
+        "secret_detection",
+        "coverage_fuzzing",
+        "api_fuzzing",
+        "cluster_image_scanning",
+        "generic",
+    ])
+        .optional()
+        .describe("Filter by scan/report type (e.g. secret_detection, sast, dast)"),
+    first: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(100)
+        .optional()
+        .describe("Number of vulnerabilities to return (max: 100, default: 20)"),
+    after: z
+        .string()
+        .optional()
+        .describe("Cursor for pagination; use the endCursor from a previous response"),
+});
+// Schema for getting a single vulnerability by ID
+export const GetVulnerabilitySchema = z.object({
+    vulnerability_id: z.coerce
+        .string()
+        .describe("The vulnerability ID (numeric or GraphQL global ID)"),
+});
+// Schema for dismissing a vulnerability with required reason and optional comment
+export const DismissVulnerabilitySchema = z.object({
+    vulnerability_id: z.coerce
+        .string()
+        .describe("The ID of the vulnerability to dismiss (numeric or GraphQL global ID)"),
+    reason: z
+        .enum([
+        "acceptable_risk",
+        "false_positive",
+        "used_in_tests",
+        "mitigating_control",
+        "not_applicable",
+    ])
+        .describe("Reason for dismissal"),
+    comment: z.string().optional().describe("Optional comment explaining the dismissal"),
+});
+// Schema for confirming a vulnerability with optional comment
+export const ConfirmVulnerabilitySchema = z.object({
+    vulnerability_id: z.coerce
+        .string()
+        .describe("The ID of the vulnerability to confirm (numeric or GraphQL global ID)"),
+    comment: z.string().optional().describe("Optional comment explaining the confirmation"),
+});

package/build/scripts/check-skill-sync.js

@@ -14,6 +14,7 @@ const SKILL_PATH = join(REPO_ROOT, "skills", "gitlab-mcp", "SKILL.md");
 const REF_DIR = join(REPO_ROOT, "skills", "gitlab-mcp", "reference");
 // Response field names in reference docs — not MCP tools.
 const REFERENCE_FIELD_ALLOWLIST = new Set([
+    "after",
     "allow_multiple",
     "deleted_file",
     "excluded_file_patterns",

package/build/scripts/generate-tool-docs.js

@@ -115,6 +115,10 @@ const GROUP_META = {
         title: "Dependency Proxy",
         blurb: "Inspect and manage the GitLab dependency proxy cache settings, blob storage, and purge operations.",
     },
+    vulnerabilities: {
+        title: "Vulnerabilities",
+        blurb: "AI-assisted vulnerability triage — list findings, inspect details, dismiss with reason, or confirm for remediation. Backed by the GitLab GraphQL API; requires GitLab Ultimate.",
+    },
 };
 const GROUP_ORDER = [
     "projects",
@@ -136,6 +140,7 @@ const GROUP_ORDER = [
     "webhooks",
     "search",
     "dependency_proxy",
+    "vulnerabilities",
 ];
 // Authoritative classification — uses the `readOnlyTools` set from
 // tools/registry.ts. That set is what the server itself consults to decide
@@ -210,7 +215,7 @@ function buildGroupPage(id, toolNames) {
     lines.push("## Tools in this group");
     lines.push("");
     for (const name of toolNames) {
-        lines.push(`- [\`${name}\`](#${name.replace(/_/g, "_")}) — ${rwBadge(name)}`);
+        lines.push(`- [\`${name}\`](#${name}) — ${rwBadge(name)}`);
     }
     lines.push("");
     lines.push("---");

package/build/test/dynamic-api-url-allowlist.test.js

@@ -26,6 +26,7 @@ describe("Dynamic API URL allowlist", () => {
     let secondaryGitLab;
     let attackerServer;
     let mcpServer;
+    let mcpPort;
     let mcpUrl;
     let secondaryHit = false;
     let getAttackerHits = () => 0;
@@ -44,7 +45,7 @@ describe("Dynamic API URL allowlist", () => {
         const attacker = await startAttackerServer(attackerPort);
         attackerServer = attacker.server;
         getAttackerHits = attacker.getHits;
-        const mcpPort = await findAvailablePort(3100);
+        mcpPort = await findAvailablePort(3100);
         mcpServer = await launchServer({
             mode: TransportMode.STREAMABLE_HTTP,
             port: mcpPort,
@@ -101,4 +102,20 @@ describe("Dynamic API URL allowlist", () => {
         assert.strictEqual(connected, false, "untrusted dynamic host should not initialize a session");
         assert.strictEqual(getAttackerHits(), 0, "token-bearing requests must not reach untrusted hosts");
     });
+    test("returns remediation text when download proxy rejects untrusted dynamic hosts", async () => {
+        const server = attackerServer;
+        assert.ok(server, "attacker server should be running");
+        const attackerUrl = `http://${HOST}:${server.address().port}/api/v4`;
+        const response = await fetch(`http://${HOST}:${mcpPort}/downloads/job-artifacts?project_id=1&job_id=1`, {
+            headers: {
+                "Private-Token": MOCK_TOKEN,
+                "x-gitlab-api-url": attackerUrl,
+            },
+        });
+        assert.strictEqual(response.status, 400);
+        const body = (await response.json());
+        assert.match(body.error, /not allowed/);
+        assert.match(body.error, /GITLAB_ALLOWED_HOSTS/);
+        assert.strictEqual(getAttackerHits(), 0, "download proxy must not forward to untrusted hosts");
+    });
 });

package/build/test/test-toolset-filtering.js

@@ -35,6 +35,7 @@ const TOOLSET_TOOL_COUNTS = {
     groups: 1,
     variables: 10,
     dependency_proxy: 4,
+    vulnerabilities: 4,
 };
 const LEGACY_PIPELINE_CI_TOOL_COUNT = 2;
 const LEGACY_PIPELINE_TOOL_COUNT = TOOLSET_TOOL_COUNTS.pipelines + LEGACY_PIPELINE_CI_TOOL_COUNT;
@@ -60,6 +61,7 @@ const NON_DEFAULT_TOOLSETS = [
     "search",
     "variables",
     "dependency_proxy",
+    "vulnerabilities",
 ];
 // discover_tools meta-tool is always force-injected (Step 5.5)
 const DISCOVER_TOOLS_COUNT = 1;

package/build/test/test-vulnerabilities.js

@@ -0,0 +1,399 @@
+import { describe, test, before, after } from "node:test";
+import assert from "node:assert";
+import { spawn } from "child_process";
+import { MockGitLabServer, findMockServerPort } from "./utils/mock-gitlab-server.js";
+const MOCK_TOKEN = "glpat-mock-token-12345";
+const TEST_PROJECT_ID = "456";
+const TEST_PROJECT_FULL_PATH = "test-group/test-project";
+const TEST_VULNERABILITY_ID = "789";
+const TEST_VULNERABILITY_GID = `gid://gitlab/Vulnerability/${TEST_VULNERABILITY_ID}`;
+const mockVulnerability = {
+    id: TEST_VULNERABILITY_GID,
+    title: "Hard-coded credential detected",
+    description: "A hard-coded credential was found in source code",
+    state: "DETECTED",
+    severity: "CRITICAL",
+    reportType: "SECRET_DETECTION",
+    detectedAt: "2024-06-01T10:00:00Z",
+    confirmedAt: null,
+    resolvedAt: null,
+    dismissedAt: null,
+    dismissalReason: null,
+    webUrl: "https://gitlab.mock/test-group/test-project/-/security/vulnerabilities/789",
+    scanner: { name: "GitLeaks", externalId: "gitleaks", vendor: "GitLab" },
+    identifiers: [
+        { externalType: "cve", externalId: "CVE-2024-0001", name: "CVE-2024-0001", url: null },
+    ],
+    links: [{ name: "More info", url: "https://example.com/vuln/789" }],
+    location: { file: "config/secrets.yml", startLine: 42, endLine: 42 },
+};
+const mockVulnerabilityList = [
+    mockVulnerability,
+    {
+        ...mockVulnerability,
+        id: "gid://gitlab/Vulnerability/790",
+        title: "SQL Injection in login form",
+        state: "CONFIRMED",
+        severity: "HIGH",
+        reportType: "SAST",
+        confirmedAt: "2024-06-03T09:00:00Z",
+        location: { file: "src/auth/login.ts", startLine: 18, endLine: 22 },
+    },
+    {
+        ...mockVulnerability,
+        id: "gid://gitlab/Vulnerability/791",
+        title: "Outdated dependency with known CVE",
+        state: "DISMISSED",
+        severity: "MEDIUM",
+        reportType: "DEPENDENCY_SCANNING",
+        dismissedAt: "2024-05-20T14:00:00Z",
+        dismissalReason: "ACCEPTABLE_RISK",
+        location: { file: "package.json", dependency: { package: { name: "foo" }, version: "1.2.3" } },
+    },
+];
+async function callTool(toolName, args, env) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn("node", ["build/index.js"], {
+            stdio: ["pipe", "pipe", "pipe"],
+            env: {
+                ...process.env,
+                ...env,
+                USE_PIPELINE: "true",
+            },
+        });
+        let output = "";
+        let errorOutput = "";
+        proc.stdout?.on("data", (d) => (output += d));
+        proc.stderr?.on("data", (d) => (errorOutput += d));
+        proc.on("close", code => {
+            if (code !== 0) {
+                return reject(new Error(`Process exited with code ${code}: ${errorOutput}`));
+            }
+            const line = output.split("\n").find(l => l.startsWith("{"));
+            if (!line) {
+                return reject(new Error("No JSON output found"));
+            }
+            try {
+                const response = JSON.parse(line);
+                if (response.error) {
+                    reject(response.error);
+                }
+                else {
+                    const content = response.result?.content?.[0]?.text;
+                    if (content) {
+                        try {
+                            resolve(JSON.parse(content));
+                        }
+                        catch {
+                            resolve(content);
+                        }
+                    }
+                    else {
+                        resolve(response.result);
+                    }
+                }
+            }
+            catch (e) {
+                reject(e);
+            }
+        });
+        proc.stdin?.end(JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/call",
+            params: { name: toolName, arguments: args },
+        }) + "\n");
+    });
+}
+describe("vulnerability tools", () => {
+    let mockGitLab;
+    let mockGitLabUrl;
+    // Capture variables for verifying GraphQL payloads
+    let lastListVariables = null;
+    let lastDismissInput = null;
+    let lastConfirmInput = null;
+    let lastGetId = null;
+    const baseEnv = () => ({
+        GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+        GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        GITLAB_TOOLSETS: "vulnerabilities",
+    });
+    before(async () => {
+        const mockPort = await findMockServerPort();
+        mockGitLab = new MockGitLabServer({
+            port: mockPort,
+            validTokens: [MOCK_TOKEN],
+        });
+        // All four tools go through POST /api/graphql; dispatch on operation name
+        mockGitLab.addRootHandler("post", "/api/graphql", (req, res) => {
+            const query = req.body.query || "";
+            const variables = req.body.variables || {};
+            if (query.includes("vulnerabilityDismiss")) {
+                lastDismissInput = variables.input;
+                res.json({
+                    data: {
+                        vulnerabilityDismiss: {
+                            vulnerability: {
+                                id: TEST_VULNERABILITY_GID,
+                                state: "DISMISSED",
+                                dismissedAt: "2024-06-10T12:00:00Z",
+                                dismissalReason: variables.input?.dismissalReason || null,
+                            },
+                            errors: [],
+                        },
+                    },
+                });
+                return;
+            }
+            if (query.includes("vulnerabilityConfirm")) {
+                lastConfirmInput = variables.input;
+                res.json({
+                    data: {
+                        vulnerabilityConfirm: {
+                            vulnerability: {
+                                id: TEST_VULNERABILITY_GID,
+                                state: "CONFIRMED",
+                                confirmedAt: "2024-06-10T12:00:00Z",
+                            },
+                            errors: [],
+                        },
+                    },
+                });
+                return;
+            }
+            if (query.includes("listProjectVulnerabilities")) {
+                lastListVariables = variables;
+                let nodes = mockVulnerabilityList;
+                if (variables.state) {
+                    nodes = nodes.filter(v => variables.state.includes(v.state));
+                }
+                if (variables.severity) {
+                    nodes = nodes.filter(v => variables.severity.includes(v.severity));
+                }
+                if (variables.reportType) {
+                    nodes = nodes.filter(v => variables.reportType.includes(v.reportType));
+                }
+                res.json({
+                    data: {
+                        project: {
+                            vulnerabilities: {
+                                nodes,
+                                pageInfo: { endCursor: "cursor-abc", hasNextPage: false },
+                            },
+                        },
+                    },
+                });
+                return;
+            }
+            if (query.includes("getVulnerability")) {
+                lastGetId = variables.id;
+                res.json({
+                    data: {
+                        vulnerability: {
+                            ...mockVulnerability,
+                            project: {
+                                id: "gid://gitlab/Project/456",
+                                name: "Test Project",
+                                fullPath: TEST_PROJECT_FULL_PATH,
+                            },
+                        },
+                    },
+                });
+                return;
+            }
+            res
+                .status(400)
+                .json({ errors: [{ message: `Unexpected GraphQL query: ${query.slice(0, 80)}` }] });
+        });
+        await mockGitLab.start();
+        mockGitLabUrl = mockGitLab.getUrl();
+    });
+    after(async () => {
+        await mockGitLab.stop();
+    });
+    test("list_project_vulnerabilities returns vulnerabilities with pageInfo", async () => {
+        const result = await callTool("list_project_vulnerabilities", { project_id: TEST_PROJECT_ID }, baseEnv());
+        assert.ok(Array.isArray(result.vulnerabilities), "Response should contain vulnerabilities array");
+        assert.strictEqual(result.vulnerabilities.length, 3, "Should return 3 vulnerabilities");
+        assert.strictEqual(result.vulnerabilities[0].id, TEST_VULNERABILITY_GID);
+        assert.strictEqual(result.vulnerabilities[0].title, "Hard-coded credential detected");
+        assert.ok(result.pageInfo, "Response should include pageInfo for cursor pagination");
+        assert.strictEqual(result.pageInfo.hasNextPage, false);
+    });
+    test("list_project_vulnerabilities resolves numeric project ID to full path", async () => {
+        lastListVariables = null;
+        await callTool("list_project_vulnerabilities", { project_id: TEST_PROJECT_ID }, baseEnv());
+        assert.ok(lastListVariables, "GraphQL variables should have been captured");
+        assert.strictEqual(lastListVariables.fullPath, TEST_PROJECT_FULL_PATH, "Numeric project ID should be resolved to the project full path");
+    });
+    test("list_project_vulnerabilities passes state filter as GraphQL enum", async () => {
+        lastListVariables = null;
+        const result = await callTool("list_project_vulnerabilities", { project_id: TEST_PROJECT_ID, state: "detected" }, baseEnv());
+        assert.ok(lastListVariables, "GraphQL variables should have been captured");
+        assert.deepStrictEqual(lastListVariables.state, ["DETECTED"], "state should be uppercased enum array");
+        assert.strictEqual(result.vulnerabilities.length, 1, "Mock should filter to only DETECTED");
+    });
+    test("list_project_vulnerabilities passes severity filter as GraphQL enum", async () => {
+        lastListVariables = null;
+        const result = await callTool("list_project_vulnerabilities", { project_id: TEST_PROJECT_ID, severity: "critical" }, baseEnv());
+        assert.ok(lastListVariables, "GraphQL variables should have been captured");
+        assert.deepStrictEqual(lastListVariables.severity, ["CRITICAL"]);
+        assert.strictEqual(result.vulnerabilities.length, 1, "Mock should filter to only CRITICAL");
+    });
+    test("list_project_vulnerabilities passes report_type filter as GraphQL enum", async () => {
+        lastListVariables = null;
+        const result = await callTool("list_project_vulnerabilities", { project_id: TEST_PROJECT_ID, report_type: "secret_detection" }, baseEnv());
+        assert.ok(lastListVariables, "GraphQL variables should have been captured");
+        assert.deepStrictEqual(lastListVariables.reportType, ["SECRET_DETECTION"]);
+        assert.strictEqual(result.vulnerabilities.length, 1, "Mock should filter to only SECRET_DETECTION");
+    });
+    test("list_project_vulnerabilities forwards cursor pagination", async () => {
+        lastListVariables = null;
+        await callTool("list_project_vulnerabilities", { project_id: TEST_PROJECT_ID, first: 50, after: "cursor-abc" }, baseEnv());
+        assert.ok(lastListVariables, "GraphQL variables should have been captured");
+        assert.strictEqual(lastListVariables.first, 50);
+        assert.strictEqual(lastListVariables.after, "cursor-abc");
+    });
+    test("get_vulnerability returns full vulnerability object via GID", async () => {
+        lastGetId = null;
+        const result = await callTool("get_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID }, baseEnv());
+        assert.strictEqual(lastGetId, TEST_VULNERABILITY_GID, "Numeric ID should be converted to a GraphQL global ID");
+        assert.strictEqual(result.id, TEST_VULNERABILITY_GID);
+        assert.strictEqual(result.title, "Hard-coded credential detected");
+        assert.strictEqual(result.description, "A hard-coded credential was found in source code");
+        assert.strictEqual(result.state, "DETECTED");
+        assert.strictEqual(result.severity, "CRITICAL");
+        assert.strictEqual(result.reportType, "SECRET_DETECTION");
+        assert.strictEqual(result.location.file, "config/secrets.yml");
+        assert.strictEqual(result.location.startLine, 42);
+        assert.strictEqual(result.identifiers[0].name, "CVE-2024-0001");
+        assert.strictEqual(result.links[0].url, "https://example.com/vuln/789");
+        assert.strictEqual(result.project.fullPath, TEST_PROJECT_FULL_PATH);
+    });
+    test("dismiss_vulnerability sends dismissalReason in mutation input", async () => {
+        lastDismissInput = null;
+        const result = await callTool("dismiss_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID, reason: "false_positive" }, baseEnv());
+        assert.ok(lastDismissInput, "Mutation input should have been captured");
+        assert.strictEqual(lastDismissInput.id, TEST_VULNERABILITY_GID);
+        assert.strictEqual(lastDismissInput.dismissalReason, "FALSE_POSITIVE", "Reason should be mapped to the GraphQL enum");
+        assert.strictEqual(result.state, "DISMISSED");
+        assert.strictEqual(result.dismissalReason, "FALSE_POSITIVE");
+    });
+    test("dismiss_vulnerability includes comment when provided", async () => {
+        lastDismissInput = null;
+        await callTool("dismiss_vulnerability", {
+            vulnerability_id: TEST_VULNERABILITY_ID,
+            reason: "acceptable_risk",
+            comment: "Reviewed by security team, risk accepted",
+        }, baseEnv());
+        assert.ok(lastDismissInput, "Mutation input should have been captured");
+        assert.strictEqual(lastDismissInput.dismissalReason, "ACCEPTABLE_RISK");
+        assert.strictEqual(lastDismissInput.comment, "Reviewed by security team, risk accepted");
+    });
+    test("dismiss_vulnerability accepts mitigating_control and not_applicable reasons", async () => {
+        lastDismissInput = null;
+        await callTool("dismiss_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID, reason: "mitigating_control" }, baseEnv());
+        assert.strictEqual(lastDismissInput.dismissalReason, "MITIGATING_CONTROL");
+        lastDismissInput = null;
+        await callTool("dismiss_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID, reason: "not_applicable" }, baseEnv());
+        assert.strictEqual(lastDismissInput.dismissalReason, "NOT_APPLICABLE");
+    });
+    test("confirm_vulnerability sends mutation with GID", async () => {
+        lastConfirmInput = null;
+        const result = await callTool("confirm_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID }, baseEnv());
+        assert.ok(lastConfirmInput, "Mutation input should have been captured");
+        assert.strictEqual(lastConfirmInput.id, TEST_VULNERABILITY_GID);
+        assert.strictEqual(result.state, "CONFIRMED");
+        assert.strictEqual(result.confirmedAt, "2024-06-10T12:00:00Z");
+    });
+    test("confirm_vulnerability includes comment when provided", async () => {
+        lastConfirmInput = null;
+        await callTool("confirm_vulnerability", {
+            vulnerability_id: TEST_VULNERABILITY_ID,
+            comment: "Confirmed after manual verification",
+        }, baseEnv());
+        assert.ok(lastConfirmInput, "Mutation input should have been captured");
+        assert.strictEqual(lastConfirmInput.comment, "Confirmed after manual verification");
+    });
+    // Read-only mode tests
+    test("read-only mode: list_project_vulnerabilities succeeds", async () => {
+        const result = await callTool("list_project_vulnerabilities", { project_id: TEST_PROJECT_ID }, { ...baseEnv(), GITLAB_PERMISSION_MODE: "readonly" });
+        assert.ok(Array.isArray(result.vulnerabilities), "Should return vulnerabilities in readonly mode");
+        assert.strictEqual(result.vulnerabilities.length, 3);
+    });
+    test("read-only mode: get_vulnerability succeeds", async () => {
+        const result = await callTool("get_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID }, { ...baseEnv(), GITLAB_PERMISSION_MODE: "readonly" });
+        assert.strictEqual(result.id, TEST_VULNERABILITY_GID);
+        assert.strictEqual(result.title, "Hard-coded credential detected");
+    });
+    test("read-only mode: dismiss_vulnerability is rejected", async () => {
+        await assert.rejects(() => callTool("dismiss_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID, reason: "false_positive" }, { ...baseEnv(), GITLAB_PERMISSION_MODE: "readonly" }), (err) => {
+            const msg = typeof err === "string" ? err : err?.message || JSON.stringify(err);
+            assert.ok(msg.toLowerCase().includes("not allowed") ||
+                msg.toLowerCase().includes("read-only") ||
+                msg.toLowerCase().includes("readonly") ||
+                msg.toLowerCase().includes("not available"), `Expected read-only rejection, got: ${msg}`);
+            return true;
+        });
+    });
+    test("read-only mode: confirm_vulnerability is rejected", async () => {
+        await assert.rejects(() => callTool("confirm_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID }, { ...baseEnv(), GITLAB_PERMISSION_MODE: "readonly" }), (err) => {
+            const msg = typeof err === "string" ? err : err?.message || JSON.stringify(err);
+            assert.ok(msg.toLowerCase().includes("not allowed") ||
+                msg.toLowerCase().includes("read-only") ||
+                msg.toLowerCase().includes("readonly") ||
+                msg.toLowerCase().includes("not available"), `Expected read-only rejection, got: ${msg}`);
+            return true;
+        });
+    });
+    // GITLAB_ALLOWED_PROJECT_IDS tests: the mock vulnerability belongs to
+    // project 456 (test-group/test-project), so an allowlist of "999" must
+    // deny all id-only vulnerability tools.
+    const assertAccessDenied = (err) => {
+        const msg = typeof err === "string" ? err : err?.message || JSON.stringify(err);
+        assert.ok(msg.includes("Access denied"), `Expected allowlist rejection, got: ${msg}`);
+        return true;
+    };
+    test("allowlist: get_vulnerability is rejected for a vulnerability outside allowed projects", async () => {
+        await assert.rejects(() => callTool("get_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID }, { ...baseEnv(), GITLAB_ALLOWED_PROJECT_IDS: "999" }), assertAccessDenied);
+    });
+    test("allowlist: get_vulnerability succeeds when project is allowed by numeric ID", async () => {
+        const result = await callTool("get_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID }, { ...baseEnv(), GITLAB_ALLOWED_PROJECT_IDS: TEST_PROJECT_ID });
+        assert.strictEqual(result.id, TEST_VULNERABILITY_GID);
+    });
+    test("allowlist: get_vulnerability succeeds when project is allowed by full path", async () => {
+        const result = await callTool("get_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID }, { ...baseEnv(), GITLAB_ALLOWED_PROJECT_IDS: `999,${TEST_PROJECT_FULL_PATH}` });
+        assert.strictEqual(result.id, TEST_VULNERABILITY_GID);
+    });
+    test("allowlist: dismiss_vulnerability is rejected before the mutation is sent", async () => {
+        lastDismissInput = null;
+        await assert.rejects(() => callTool("dismiss_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID, reason: "false_positive" }, { ...baseEnv(), GITLAB_ALLOWED_PROJECT_IDS: "999" }), assertAccessDenied);
+        assert.strictEqual(lastDismissInput, null, "vulnerabilityDismiss mutation must not be sent for a denied project");
+    });
+    test("allowlist: confirm_vulnerability is rejected before the mutation is sent", async () => {
+        lastConfirmInput = null;
+        await assert.rejects(() => callTool("confirm_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID }, { ...baseEnv(), GITLAB_ALLOWED_PROJECT_IDS: "999" }), assertAccessDenied);
+        assert.strictEqual(lastConfirmInput, null, "vulnerabilityConfirm mutation must not be sent for a denied project");
+    });
+    test("allowlist: dismiss_vulnerability succeeds when the vulnerability's project is allowed", async () => {
+        lastDismissInput = null;
+        const result = await callTool("dismiss_vulnerability", { vulnerability_id: TEST_VULNERABILITY_ID, reason: "false_positive" }, { ...baseEnv(), GITLAB_ALLOWED_PROJECT_IDS: TEST_PROJECT_ID });
+        assert.ok(lastDismissInput, "Mutation should be sent after the allowlist check passes");
+        assert.strictEqual(lastDismissInput.id, TEST_VULNERABILITY_GID);
+        assert.strictEqual(result.state, "DISMISSED");
+    });
+    // GID validation tests: only numeric IDs and Vulnerability GIDs are accepted
+    const assertInvalidVulnerabilityId = (err) => {
+        const msg = typeof err === "string" ? err : err?.message || JSON.stringify(err);
+        assert.ok(msg.includes("Invalid vulnerability ID"), `Expected invalid-ID rejection, got: ${msg}`);
+        return true;
+    };
+    test("gid validation: get_vulnerability rejects non-Vulnerability GIDs", async () => {
+        await assert.rejects(() => callTool("get_vulnerability", { vulnerability_id: "gid://gitlab/Project/456" }, baseEnv()), assertInvalidVulnerabilityId);
+    });
+    test("gid validation: dismiss_vulnerability rejects a non-numeric ID before any request", async () => {
+        lastDismissInput = null;
+        await assert.rejects(() => callTool("dismiss_vulnerability", { vulnerability_id: "not-a-vuln-id", reason: "false_positive" }, baseEnv()), assertInvalidVulnerabilityId);
+        assert.strictEqual(lastDismissInput, null, "vulnerabilityDismiss mutation must not be sent for an invalid ID");
+    });
+});

package/build/tools/registry.js

@@ -1,7 +1,7 @@
 import { zodToJsonSchema } from "zod-to-json-schema";
 import { toJSONSchema } from "../utils/schema.js";
 import { USE_GITLAB_WIKI, USE_MILESTONE, USE_PIPELINE, SSE, STREAMABLE_HTTP, } from "../config.js";
-import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, } from "../schemas.js";
+import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, } from "../schemas.js";
 const IS_REMOTE = SSE || STREAMABLE_HTTP;
 // Define all available tools
 export const allTools = [
@@ -1083,6 +1083,27 @@ export const allTools = [
         description: "Schedule purge of all cached dependency proxy blobs for a group",
         inputSchema: toJSONSchema(PurgeDependencyProxyCacheSchema),
     },
+    // --- Vulnerability tools ---
+    {
+        name: "list_project_vulnerabilities",
+        description: "List vulnerabilities for a project with optional state, severity, and report type filters (GraphQL-backed, cursor pagination)",
+        inputSchema: toJSONSchema(ListProjectVulnerabilitiesSchema),
+    },
+    {
+        name: "get_vulnerability",
+        description: "Get full details of a specific vulnerability",
+        inputSchema: toJSONSchema(GetVulnerabilitySchema),
+    },
+    {
+        name: "dismiss_vulnerability",
+        description: "Dismiss a vulnerability with a reason (acceptable_risk, false_positive, used_in_tests, mitigating_control, not_applicable) and optional comment",
+        inputSchema: toJSONSchema(DismissVulnerabilitySchema),
+    },
+    {
+        name: "confirm_vulnerability",
+        description: "Confirm a vulnerability as a real finding requiring remediation",
+        inputSchema: toJSONSchema(ConfirmVulnerabilitySchema),
+    },
     // --- Meta tool: Dynamic tool discovery ---
     {
         name: "discover_tools",
@@ -1217,6 +1238,8 @@ export const readOnlyTools = new Set([
     "get_group_variable",
     "get_dependency_proxy_settings",
     "list_dependency_proxy_blobs",
+    "list_project_vulnerabilities",
+    "get_vulnerability",
 ]);
 // Define which tools are destructive (data loss potential)
 export const destructiveTools = new Set([
@@ -1653,6 +1676,16 @@ export const TOOLSET_DEFINITIONS = [
             "purge_dependency_proxy_cache",
         ]),
     },
+    {
+        id: "vulnerabilities",
+        isDefault: false,
+        tools: new Set([
+            "list_project_vulnerabilities",
+            "get_vulnerability",
+            "dismiss_vulnerability",
+            "confirm_vulnerability",
+        ]),
+    },
 ];
 // Derived lookup: tool name → toolset ID
 export const TOOLSET_BY_TOOL_NAME = new Map();

package/build/utils/logger.js

@@ -0,0 +1,51 @@
+import { pino } from "pino";
+const REDACT_PATHS = [
+    "token",
+    "*.token",
+    "ctx.token",
+    "context.token",
+    "authData.token",
+    "auth.token",
+    "headers.authorization",
+    "headers.Authorization",
+    'headers["private-token"]',
+    'headers["Private-Token"]',
+    'headers["job-token"]',
+    'headers["JOB-TOKEN"]',
+    'headers["mcp-session-id"]',
+    'headers["Mcp-Session-Id"]',
+    "sessionId",
+    "*.sessionId",
+    "ctx.sessionId",
+    "context.sessionId",
+];
+/**
+ * Create a pino logger with consistent redaction, level, format, and
+ * destination across the entire codebase.
+ *
+ * - LOG_LEVEL (default "info") controls the minimum severity.
+ * - LOG_FORMAT=json disables pino-pretty and outputs newline-delimited JSON
+ *   to stderr.
+ * - All loggers redact the same set of sensitive fields.
+ */
+export function createLogger(name) {
+    const isJson = process.env.LOG_FORMAT === "json";
+    return pino({
+        ...(name && { name }),
+        level: process.env.LOG_LEVEL || "info",
+        redact: {
+            paths: REDACT_PATHS,
+            censor: "[REDACTED]",
+        },
+        ...(!isJson && {
+            transport: {
+                target: "pino-pretty",
+                options: {
+                    colorize: true,
+                    levelFirst: true,
+                    destination: 2,
+                },
+            },
+        }),
+    }, ...(isJson ? [pino.destination(2)] : []));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.1.42",
+  "version": "2.1.43",
   "mcpName": "io.github.zereight/gitlab-mcp",
   "description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
   "keywords": [