@zereight/mcp-gitlab 2.1.57 → 2.1.59

package/build/test/test-dynamic-project-scope.js

@@ -0,0 +1,362 @@
+import { describe, test, before, after } from "node:test";
+import assert from "node:assert";
+import { cleanupServers, findAvailablePort, HOST, launchServer, TransportMode, } from "./utils/server-launcher.js";
+import { MockGitLabServer, findMockServerPort } from "./utils/mock-gitlab-server.js";
+import { CustomHeaderClient } from "./clients/custom-header-client.js";
+const MOCK_TOKEN = "glpat-dynamic-scope-token";
+const SCOPE_HEADER = "x-gitlab-allowed-project-ids";
+async function connectClient(mcpUrl, scope) {
+    const headers = { authorization: `Bearer ${MOCK_TOKEN}` };
+    if (scope !== undefined) {
+        headers[SCOPE_HEADER] = scope;
+    }
+    const client = new CustomHeaderClient(headers);
+    await client.connect(mcpUrl);
+    return client;
+}
+async function getProjectId(client, projectId) {
+    const result = await client.callTool("get_project", { project_id: projectId });
+    assert.ok(result.content, "Should have content");
+    const content = result.content[0];
+    assert.ok("text" in content, "Content should have text");
+    const project = JSON.parse(content.text);
+    return project.id.toString();
+}
+describe("Dynamic project scope", { concurrency: 1 }, () => {
+    describe("with GITLAB_ALLOWED_PROJECT_IDS set", () => {
+        let mockGitLab;
+        const servers = [];
+        let mcpUrl;
+        before(async () => {
+            const mockPort = await findMockServerPort();
+            mockGitLab = new MockGitLabServer({ port: mockPort, validTokens: [MOCK_TOKEN] });
+            mockGitLab.addMockHandler("get", "/projects", (req, res) => {
+                if (req.query.search === "no-totals") {
+                    const requestedPage = Number(req.query.page ?? "1");
+                    if (requestedPage < 3) {
+                        res.set("x-next-page", String(requestedPage + 1));
+                    }
+                }
+                else {
+                    res.set("x-total", "3");
+                    res.set("x-total-pages", "2");
+                }
+                res.json(["1", "2", "3"].map(id => ({
+                    id: Number(id),
+                    name: `Project ${id}`,
+                    path: `project-${id}`,
+                    path_with_namespace: `group/project-${id}`,
+                    description: null,
+                    visibility: "private",
+                    namespace: { id: 1, name: "Group", path: "group", kind: "group", full_path: "group" },
+                })));
+            });
+            await mockGitLab.start();
+            const mcpPort = await findAvailablePort(3200);
+            const server = await launchServer({
+                mode: TransportMode.STREAMABLE_HTTP,
+                port: mcpPort,
+                timeout: 5000,
+                env: {
+                    STREAMABLE_HTTP: "true",
+                    REMOTE_AUTHORIZATION: "true",
+                    ENABLE_DYNAMIC_PROJECT_SCOPE: "true",
+                    ENABLE_STRICT_PROJECT_SCOPE: "true",
+                    GITLAB_API_URL: `${mockGitLab.getUrl()}/api/v4`,
+                    GITLAB_ALLOWED_PROJECT_IDS: "1,2",
+                },
+            });
+            servers.push(server);
+            mcpUrl = `http://${HOST}:${mcpPort}/mcp`;
+        });
+        after(async () => {
+            cleanupServers(servers);
+            await mockGitLab?.stop();
+        });
+        test("header narrows the allowlist to the requested projects", async () => {
+            const client = await connectClient(mcpUrl, "1");
+            try {
+                assert.strictEqual(await getProjectId(client, ""), "1");
+                await assert.rejects(() => client.callTool("get_project", { project_id: "2" }), /Access denied/);
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("project outside GITLAB_ALLOWED_PROJECT_IDS rejects the session", async () => {
+            const client = new CustomHeaderClient({
+                authorization: `Bearer ${MOCK_TOKEN}`,
+                [SCOPE_HEADER]: "1,3",
+            });
+            let connected = false;
+            try {
+                await client.connect(mcpUrl);
+                connected = true;
+                await client.callTool("get_project", { project_id: "1" });
+            }
+            catch {
+                // Expected: the session is rejected before any tool call is possible.
+            }
+            finally {
+                await client.disconnect();
+            }
+            assert.strictEqual(connected, false, "out-of-scope header must not initialize a session");
+        });
+        test("empty header rejects the session", async () => {
+            const client = new CustomHeaderClient({
+                authorization: `Bearer ${MOCK_TOKEN}`,
+                [SCOPE_HEADER]: "  ",
+            });
+            let connected = false;
+            try {
+                await client.connect(mcpUrl);
+                connected = true;
+                await client.callTool("get_project", { project_id: "1" });
+            }
+            catch {
+                // Expected: the session is rejected before any tool call is possible.
+            }
+            finally {
+                await client.disconnect();
+            }
+            assert.strictEqual(connected, false, "an empty header must not initialize a session");
+        });
+        test("scoped session refuses non-scopable tools", async () => {
+            const client = await connectClient(mcpUrl, "1");
+            try {
+                await assert.rejects(() => client.callTool("execute_graphql", { query: "query { currentUser { id } }" }), /not allowed while a project allowlist is in effect/);
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("session without the header keeps the full env allowlist", async () => {
+            const client = await connectClient(mcpUrl);
+            try {
+                assert.strictEqual(await getProjectId(client, "2"), "2");
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("list_issues without project_id stays within the session scope", async () => {
+            const client = await connectClient(mcpUrl, "1");
+            try {
+                const result = await client.callTool("list_issues", {});
+                assert.ok(result.content, "Should have content");
+                const content = result.content[0];
+                assert.ok("text" in content, "Content should have text");
+                const issues = JSON.parse(content.text);
+                assert.ok(issues.every(issue => issue.web_url.includes("/project/1/")), "Should only return issues of the scoped project");
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("list_todos is refused under strict scope", async () => {
+            const client = await connectClient(mcpUrl, "1");
+            try {
+                await assert.rejects(() => client.callTool("list_todos", {}), /not allowed while a project allowlist is in effect/);
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("search_repositories keeps the unfiltered pagination totals", async () => {
+            const client = await connectClient(mcpUrl, "1");
+            try {
+                const result = await client.callTool("search_repositories", { search: "project" });
+                assert.ok(result.content, "Should have content");
+                const content = result.content[0];
+                assert.ok("text" in content, "Content should have text");
+                const search = JSON.parse(content.text);
+                assert.deepStrictEqual(search.items.map(item => item.id), ["1"]);
+                assert.strictEqual(search.count, 3, "count must reflect the unfiltered GitLab total");
+                assert.strictEqual(search.total_pages, 2, "total_pages must cover the unfiltered pages");
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("search_repositories follows next_page across all pages when totals are missing", async () => {
+            const client = await connectClient(mcpUrl, "1");
+            try {
+                let page = 1;
+                const visited = [];
+                while (page !== undefined) {
+                    const result = await client.callTool("search_repositories", {
+                        search: "no-totals",
+                        page,
+                    });
+                    assert.ok(result.content, "Should have content");
+                    const content = result.content[0];
+                    assert.ok("text" in content, "Content should have text");
+                    const search = JSON.parse(content.text);
+                    assert.strictEqual(search.total_pages, undefined, "total_pages must stay unset");
+                    assert.deepStrictEqual(search.items.map(item => item.id), ["1"]);
+                    visited.push(search.current_page);
+                    page = search.next_page;
+                }
+                assert.deepStrictEqual(visited, [1, 2, 3], "next_page must make every page reachable");
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("list_projects is filtered to the session scope", async () => {
+            const client = await connectClient(mcpUrl, "1");
+            try {
+                const result = await client.callTool("list_projects", {});
+                assert.ok(result.content, "Should have content");
+                const content = result.content[0];
+                assert.ok("text" in content, "Content should have text");
+                const projects = JSON.parse(content.text);
+                assert.deepStrictEqual(projects.map(project => project.id), ["1"]);
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("list_projects is filtered to the env allowlist without the header", async () => {
+            const client = await connectClient(mcpUrl);
+            try {
+                const result = await client.callTool("list_projects", {});
+                assert.ok(result.content, "Should have content");
+                const content = result.content[0];
+                assert.ok("text" in content, "Content should have text");
+                const projects = JSON.parse(content.text);
+                assert.deepStrictEqual(projects.map(project => project.id), ["1", "2"]);
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+    });
+    describe("without GITLAB_ALLOWED_PROJECT_IDS", () => {
+        let mockGitLab;
+        const servers = [];
+        let mcpUrl;
+        before(async () => {
+            const mockPort = await findMockServerPort();
+            mockGitLab = new MockGitLabServer({ port: mockPort, validTokens: [MOCK_TOKEN] });
+            mockGitLab.addRootHandler("post", "/api/graphql", (req, res) => {
+                const { query } = req.body;
+                if (query.includes("vulnerability(")) {
+                    res.json({
+                        data: {
+                            vulnerability: {
+                                id: "gid://gitlab/Vulnerability/42",
+                                title: "Mock vulnerability",
+                                project: {
+                                    id: "gid://gitlab/Project/8",
+                                    name: "Other project",
+                                    fullPath: "other/project",
+                                },
+                            },
+                        },
+                    });
+                    return;
+                }
+                res.status(500).json({ message: `Unexpected GraphQL query: ${query}` });
+            });
+            await mockGitLab.start();
+            const mcpPort = await findAvailablePort(3200);
+            const server = await launchServer({
+                mode: TransportMode.STREAMABLE_HTTP,
+                port: mcpPort,
+                timeout: 5000,
+                env: {
+                    STREAMABLE_HTTP: "true",
+                    REMOTE_AUTHORIZATION: "true",
+                    ENABLE_DYNAMIC_PROJECT_SCOPE: "true",
+                    GITLAB_API_URL: `${mockGitLab.getUrl()}/api/v4`,
+                },
+            });
+            servers.push(server);
+            mcpUrl = `http://${HOST}:${mcpPort}/mcp`;
+        });
+        after(async () => {
+            cleanupServers(servers);
+            await mockGitLab?.stop();
+        });
+        test("header bounds an otherwise unrestricted server", async () => {
+            const client = await connectClient(mcpUrl, "7");
+            try {
+                assert.strictEqual(await getProjectId(client, ""), "7");
+                await assert.rejects(() => client.callTool("get_project", { project_id: "8" }), /Access denied/);
+                await assert.rejects(() => client.callTool("execute_graphql", { query: "query { currentUser { id } }" }), /not allowed while a project allowlist is in effect/);
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("session without the header stays unrestricted", async () => {
+            const client = await connectClient(mcpUrl);
+            try {
+                assert.strictEqual(await getProjectId(client, "8"), "8");
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("scoped session cannot reach vulnerabilities of other projects", async () => {
+            const client = await connectClient(mcpUrl, "7");
+            try {
+                await assert.rejects(() => client.callTool("get_vulnerability", { vulnerability_id: "42" }), /Access denied/);
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+        test("unscoped session can reach vulnerabilities", async () => {
+            const client = await connectClient(mcpUrl);
+            try {
+                const result = await client.callTool("get_vulnerability", { vulnerability_id: "42" });
+                assert.ok(result.content, "Should have content");
+                const content = result.content[0];
+                assert.ok("text" in content, "Content should have text");
+                const vulnerability = JSON.parse(content.text);
+                assert.strictEqual(vulnerability.project.fullPath, "other/project");
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+    });
+    describe("with ENABLE_DYNAMIC_PROJECT_SCOPE disabled", () => {
+        let mockGitLab;
+        const servers = [];
+        let mcpUrl;
+        before(async () => {
+            const mockPort = await findMockServerPort();
+            mockGitLab = new MockGitLabServer({ port: mockPort, validTokens: [MOCK_TOKEN] });
+            await mockGitLab.start();
+            const mcpPort = await findAvailablePort(3200);
+            const server = await launchServer({
+                mode: TransportMode.STREAMABLE_HTTP,
+                port: mcpPort,
+                timeout: 5000,
+                env: {
+                    STREAMABLE_HTTP: "true",
+                    REMOTE_AUTHORIZATION: "true",
+                    GITLAB_API_URL: `${mockGitLab.getUrl()}/api/v4`,
+                },
+            });
+            servers.push(server);
+            mcpUrl = `http://${HOST}:${mcpPort}/mcp`;
+        });
+        after(async () => {
+            cleanupServers(servers);
+            await mockGitLab?.stop();
+        });
+        test("header is ignored when the feature flag is off", async () => {
+            const client = await connectClient(mcpUrl, "1");
+            try {
+                assert.strictEqual(await getProjectId(client, "2"), "2");
+            }
+            finally {
+                await client.disconnect();
+            }
+        });
+    });
+});

package/build/test/test-permission-mode.js

@@ -67,6 +67,7 @@ const MODIFY_SAMPLE_TOOLS = [
     "create_branch",
     "push_files",
     "merge_merge_request",
+    "stop_stale_environments",
 ];
 const READ_SAMPLE_TOOLS = ["list_issues", "get_project", "list_merge_requests"];
 describe("Permission Mode", { concurrency: 1 }, () => {

package/build/test/test-toolset-filtering.js

@@ -23,7 +23,7 @@ const TOOLSET_TOOL_COUNTS = {
     projects: 11,
     labels: 5,
     ci: 4,
-    pipelines: 31,
+    pipelines: 56,
     milestones: 17,
     wiki: 10,
     releases: 7,

package/build/tools/registry.js

@@ -2,7 +2,7 @@ import { zodToJsonSchema } from "zod-to-json-schema";
 import { toJSONSchema } from "../utils/schema.js";
 import { USE_GITLAB_WIKI, USE_MILESTONE, USE_PIPELINE, SSE, STREAMABLE_HTTP, } from "../config.js";
 import { getToolDescription } from "./tool-descriptions.js";
-import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWebhookSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWebhookSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListPipelineSchedulesSchema, GetPipelineScheduleSchema, ListPipelineSchedulePipelinesSchema, CreatePipelineScheduleSchema, UpdatePipelineScheduleSchema, DeletePipelineScheduleSchema, PlayPipelineScheduleSchema, TakeOwnershipPipelineScheduleSchema, GetPipelineScheduleVariableSchema, CreatePipelineScheduleVariableSchema, UpdatePipelineScheduleVariableSchema, DeletePipelineScheduleVariableSchema, ListGroupMembersSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWebhookSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, } from "../schemas.js";
+import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, ErasePipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWebhookSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWebhookSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, CreateDeploymentSchema, UpdateDeploymentSchema, DeploymentApprovalSchema, ListDeploymentMergeRequestsSchema, GetDraftNoteSchema, GetEnvironmentSchema, UpdateEnvironmentSchema, StopEnvironmentSchema, StopStaleEnvironmentsSchema, DeleteReviewAppEnvironmentsSchema, PipelineTriggerIdSchema, ListPipelineTriggersSchema, CreatePipelineTriggerSchema, UpdatePipelineTriggerSchema, TriggerPipelineSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetPipelineVariablesSchema, UpdatePipelineMetadataSchema, DeletePipelineSchema, PipelineReportSchema, WaitForPipelineSchema, WaitForPipelineJobSchema, PlayPipelineJobsSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListPipelineSchedulesSchema, GetPipelineScheduleSchema, ListPipelineSchedulePipelinesSchema, CreatePipelineScheduleSchema, UpdatePipelineScheduleSchema, DeletePipelineScheduleSchema, PlayPipelineScheduleSchema, TakeOwnershipPipelineScheduleSchema, GetPipelineScheduleVariableSchema, CreatePipelineScheduleVariableSchema, UpdatePipelineScheduleVariableSchema, DeletePipelineScheduleVariableSchema, ListGroupMembersSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWebhookSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, } from "../schemas.js";
 const IS_REMOTE = SSE || STREAMABLE_HTTP;
 // Define all available tools
 export const allTools = [
@@ -550,6 +550,15 @@ export const allTools = [
         description: "Get details of a specific pipeline",
         inputSchema: toJSONSchema(GetPipelineSchema),
     },
+    {
+        name: "get_pipeline_variables",
+        description: "Get variables configured for a pipeline",
+        inputSchema: toJSONSchema(GetPipelineVariablesSchema),
+    },
+    { name: "get_pipeline_test_report", description: "Get pipeline test report", inputSchema: toJSONSchema(PipelineReportSchema) },
+    { name: "get_pipeline_test_report_summary", description: "Get pipeline test report summary", inputSchema: toJSONSchema(PipelineReportSchema) },
+    { name: "delete_pipeline", description: "Delete a pipeline. Requires the project Owner role, cannot be undone, and does not automatically delete child pipelines.", inputSchema: toJSONSchema(DeletePipelineSchema) },
+    { name: "update_pipeline_metadata", description: "Update pipeline metadata", inputSchema: toJSONSchema(UpdatePipelineMetadataSchema) },
     {
         name: "list_deployments",
         description: "List deployments with filtering options",
@@ -557,9 +566,14 @@ export const allTools = [
     },
     {
         name: "get_deployment",
-        description: "Get details of a specific deployment",
+        description: "Get deployment details, including approval_summary, approvals, and pending_approval_count when GitLab provides them",
         inputSchema: toJSONSchema(GetDeploymentSchema),
     },
+    { name: "create_deployment", description: "Create a deployment", inputSchema: toJSONSchema(CreateDeploymentSchema) },
+    { name: "update_deployment", description: "Update a deployment status", inputSchema: toJSONSchema(UpdateDeploymentSchema) },
+    { name: "delete_deployment", description: "Delete a deployment", inputSchema: toJSONSchema(GetDeploymentSchema) },
+    { name: "list_deployment_merge_requests", description: "List merge requests shipped with a deployment", inputSchema: toJSONSchema(ListDeploymentMergeRequestsSchema) },
+    { name: "approve_deployment", description: "Approve or reject a protected-environment deployment", inputSchema: toJSONSchema(DeploymentApprovalSchema) },
     {
         name: "list_environments",
         description: "List environments in a project",
@@ -570,6 +584,17 @@ export const allTools = [
         description: "Get details of a specific environment",
         inputSchema: toJSONSchema(GetEnvironmentSchema),
     },
+    { name: "update_environment", description: "Update an environment", inputSchema: toJSONSchema(UpdateEnvironmentSchema) },
+    { name: "delete_environment", description: "Delete a stopped environment", inputSchema: toJSONSchema(GetEnvironmentSchema) },
+    { name: "stop_environment", description: "Stop an environment", inputSchema: toJSONSchema(StopEnvironmentSchema) },
+    { name: "stop_stale_environments", description: "Stop eligible stale environments; protected environments are excluded and environments are stopped, not deleted", inputSchema: toJSONSchema(StopStaleEnvironmentsSchema) },
+    { name: "delete_review_app_environments", description: "Schedule deletion of stopped review-app environments one week later; dry_run defaults to true and actual scheduling requires dry_run=false", inputSchema: toJSONSchema(DeleteReviewAppEnvironmentsSchema) },
+    { name: "list_pipeline_triggers", description: "List project pipeline trigger tokens", inputSchema: toJSONSchema(ListPipelineTriggersSchema) },
+    { name: "get_pipeline_trigger", description: "Get a project pipeline trigger", inputSchema: toJSONSchema(PipelineTriggerIdSchema) },
+    { name: "create_pipeline_trigger", description: "Create a project pipeline trigger", inputSchema: toJSONSchema(CreatePipelineTriggerSchema) },
+    { name: "update_pipeline_trigger", description: "Update a project pipeline trigger", inputSchema: toJSONSchema(UpdatePipelineTriggerSchema) },
+    { name: "delete_pipeline_trigger", description: "Delete a project pipeline trigger", inputSchema: toJSONSchema(PipelineTriggerIdSchema) },
+    { name: "trigger_pipeline", description: "Trigger a pipeline with a pipeline trigger token", inputSchema: toJSONSchema(TriggerPipelineSchema) },
     {
         name: "list_pipeline_jobs",
         description: "List all jobs in a specific pipeline",
@@ -690,6 +715,11 @@ export const allTools = [
         description: "Run a manual pipeline job",
         inputSchema: toJSONSchema(PlayPipelineJobSchema),
     },
+    {
+        name: "play_pipeline_jobs",
+        description: "Play multiple manual pipeline jobs sequentially",
+        inputSchema: toJSONSchema(PlayPipelineJobsSchema),
+    },
     {
         name: "retry_pipeline_job",
         description: "Retry a failed or canceled pipeline job",
@@ -700,6 +730,9 @@ export const allTools = [
         description: "Cancel a running pipeline job",
         inputSchema: toJSONSchema(CancelPipelineJobSchema),
     },
+    { name: "erase_pipeline_job", description: "Erase a pipeline job log and artifacts", inputSchema: toJSONSchema(ErasePipelineJobSchema) },
+    { name: "wait_for_pipeline", description: "Wait for a pipeline to reach a terminal status", inputSchema: toJSONSchema(WaitForPipelineSchema) },
+    { name: "wait_for_job", description: "Wait for a job to reach a terminal status", inputSchema: toJSONSchema(WaitForPipelineJobSchema) },
     {
         name: "list_job_artifacts",
         description: "List artifact files in a job's archive",
@@ -1250,6 +1283,9 @@ export const readOnlyTools = new Set([
     "list_project_members",
     "list_group_members",
     "get_pipeline",
+    "get_pipeline_variables",
+    "get_pipeline_test_report",
+    "get_pipeline_test_report_summary",
     "list_pipelines",
     "list_pipeline_schedules",
     "get_pipeline_schedule",
@@ -1257,12 +1293,17 @@ export const readOnlyTools = new Set([
     "get_pipeline_schedule_variable",
     "list_deployments",
     "get_deployment",
+    "list_deployment_merge_requests",
     "list_environments",
     "get_environment",
+    "list_pipeline_triggers",
+    "get_pipeline_trigger",
     "list_pipeline_jobs",
     "list_pipeline_trigger_jobs",
     "get_pipeline_job",
     "get_pipeline_job_output",
+    "wait_for_pipeline",
+    "wait_for_job",
     "validate_ci_lint",
     "validate_project_ci_lint",
     "list_ci_catalog_resources",
@@ -1335,6 +1376,13 @@ export const readOnlyTools = new Set([
 ]);
 // Define which tools are destructive (data loss potential)
 export const destructiveTools = new Set([
+    "delete_pipeline",
+    "erase_pipeline_job",
+    "delete_deployment",
+    "approve_deployment",
+    "delete_environment",
+    "delete_review_app_environments",
+    "delete_pipeline_trigger",
     "delete_issue",
     "delete_issue_link",
     "delete_label",
@@ -1369,6 +1417,12 @@ export const destructiveTools = new Set([
 // Tools that permanently delete resources — blocked in "modify" permission mode.
 // Narrower than destructiveTools: merge/protect/push are modifications, not deletions.
 export const deleteTools = new Set([
+    "delete_pipeline",
+    "erase_pipeline_job",
+    "delete_deployment",
+    "delete_environment",
+    "delete_review_app_environments",
+    "delete_pipeline_trigger",
     "delete_branch",
     "delete_draft_note",
     "delete_group_variable",
@@ -1433,14 +1487,39 @@ export const milestoneToolNames = new Set([
 export const pipelineToolNames = new Set([
     "list_pipelines",
     "get_pipeline",
+    "get_pipeline_variables",
+    "get_pipeline_test_report",
+    "get_pipeline_test_report_summary",
+    "delete_pipeline",
+    "update_pipeline_metadata",
     "list_deployments",
     "get_deployment",
+    "create_deployment",
+    "update_deployment",
+    "delete_deployment",
+    "list_deployment_merge_requests",
+    "approve_deployment",
     "list_environments",
     "get_environment",
+    "update_environment",
+    "delete_environment",
+    "stop_environment",
+    "stop_stale_environments",
+    "delete_review_app_environments",
+    "list_pipeline_triggers",
+    "get_pipeline_trigger",
+    "create_pipeline_trigger",
+    "update_pipeline_trigger",
+    "delete_pipeline_trigger",
+    "trigger_pipeline",
     "list_pipeline_jobs",
     "list_pipeline_trigger_jobs",
     "get_pipeline_job",
     "get_pipeline_job_output",
+    "play_pipeline_jobs",
+    "erase_pipeline_job",
+    "wait_for_pipeline",
+    "wait_for_job",
     "validate_ci_lint",
     "validate_project_ci_lint",
     "create_pipeline",
@@ -1629,10 +1708,31 @@ export const TOOLSET_DEFINITIONS = [
         tools: new Set([
             "list_pipelines",
             "get_pipeline",
+            "get_pipeline_variables",
+            "get_pipeline_test_report",
+            "get_pipeline_test_report_summary",
+            "delete_pipeline",
+            "update_pipeline_metadata",
             "list_deployments",
             "get_deployment",
+            "create_deployment",
+            "update_deployment",
+            "delete_deployment",
+            "list_deployment_merge_requests",
+            "approve_deployment",
             "list_environments",
             "get_environment",
+            "update_environment",
+            "delete_environment",
+            "stop_environment",
+            "stop_stale_environments",
+            "delete_review_app_environments",
+            "list_pipeline_triggers",
+            "get_pipeline_trigger",
+            "create_pipeline_trigger",
+            "update_pipeline_trigger",
+            "delete_pipeline_trigger",
+            "trigger_pipeline",
             "list_pipeline_jobs",
             "list_pipeline_trigger_jobs",
             "get_pipeline_job",
@@ -1653,8 +1753,12 @@ export const TOOLSET_DEFINITIONS = [
             "update_pipeline_schedule_variable",
             "delete_pipeline_schedule_variable",
             "play_pipeline_job",
+            "play_pipeline_jobs",
             "retry_pipeline_job",
             "cancel_pipeline_job",
+            "erase_pipeline_job",
+            "wait_for_pipeline",
+            "wait_for_job",
             "list_job_artifacts",
             "download_job_artifacts",
             "get_job_artifact_file",

package/build/tools/tool-descriptions.js

@@ -46,6 +46,8 @@ const TOOL_GUIDANCE = {
     create_pipeline_schedule_variable: "Use this to attach a new variable to a pipeline schedule so its scheduled pipelines receive it; use `update_pipeline_schedule_variable` when the key already exists and `create_project_variable` for a project-wide variable. `variable_type` defaults to `env_var` and `key` is limited to 255 characters matching /[a-zA-Z0-9_]+/. It creates remote CI configuration, requires the Developer, Maintainer, or Owner role and ownership of the schedule, and returns the new variable or a validation, duplicate-key, or permission error.",
     update_pipeline_schedule_variable: "Use this to change the value or type of an existing pipeline schedule variable; use `create_pipeline_schedule_variable` when the key does not exist yet. It changes remote CI configuration that scheduled pipelines consume, requires the Developer, Maintainer, or Owner role and ownership of the schedule, and returns the updated variable or a missing-key, validation, or permission error.",
     delete_pipeline_schedule_variable: "Use this only after confirming the key with `get_pipeline_schedule` or `get_pipeline_schedule_variable`; use `update_pipeline_schedule_variable` to change a value without removing it. The operation permanently removes the variable from the schedule so later scheduled pipelines no longer receive it, requires the Developer, Maintainer, or Owner role and ownership of the schedule, and returns a confirmation or a missing-key or permission error.",
+    stop_stale_environments: "Use this to stop eligible stale environments in a project. GitLab excludes protected environments, and this operation stops environments without deleting them. It requires the necessary project permission and returns the result or a validation, permission, or rate-limit error.",
+    delete_review_app_environments: "Use this to clean up stopped review-app environments after verifying the scope. GitLab schedules deletion one week later rather than deleting environments immediately; `dry_run` defaults to `true`, so actual scheduling requires `dry_run: false`. It requires the necessary project permission and returns the cleanup result or a validation, permission, or rate-limit error.",
 };
 const PARAMETER_GUIDANCE = "When `project_id` or `group_id` is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.";
 function ensureSentence(text) {

package/build/utils/redact-sensitive.js

@@ -3,16 +3,23 @@
  * MCP tool results become part of the AI conversation context, so these must
  * never be forwarded to the model.
  */
-const SENSITIVE_GITLAB_FIELDS = ["runners_token", "import_url"];
+const SENSITIVE_GITLAB_FIELDS = ["runners_token", "import_url", "token"];
 /**
  * Strip known sensitive fields from a GitLab API response object before it is
  * returned as an MCP tool result. Mutates and returns the same object.
+ * Recurses into arrays (e.g. list responses) since those hold one object per item.
  *
- * Used for raw passthrough responses (get_project / update_project) that do not
- * go through a Zod schema, since Zod would otherwise strip unknown keys for us.
+ * Used for raw passthrough responses (get_project / update_project,
+ * list/get_pipeline_trigger) that do not go through a Zod schema, since Zod
+ * would otherwise strip unknown keys for us. Do NOT apply to
+ * create_pipeline_trigger: its response carries the newly issued token once.
  */
 export function redactSensitiveGitLabFields(data) {
-    if (data && typeof data === "object") {
+    if (Array.isArray(data)) {
+        for (const item of data)
+            redactSensitiveGitLabFields(item);
+    }
+    else if (data && typeof data === "object") {
         for (const key of SENSITIVE_GITLAB_FIELDS) {
             delete data[key];
         }