@zereight/mcp-gitlab 2.1.59 → 2.1.61

package/README.ko.md

@@ -17,7 +17,7 @@ PAT, OAuth, 읽기 전용 모드, 동적 API URL, 원격 인증을 지원하며
 
 ### 왜 이 GitLab MCP를 사용하나요?
 
-- **232개 도구 + `discover_tools`** — 작은 toolset으로 시작하고, 런타임에 카테고리 활성화
+- **261개 도구 + `discover_tools`** — 작은 toolset으로 시작하고, 런타임에 카테고리 활성화
 - **MR 2단계 리뷰** — `list_merge_request_changed_files` → 배치 `get_merge_request_file_diff`
 - **Agent Skill 내장** — `skills/gitlab-mcp/` 워크플로우 가이드
 - **유연한 인증** — Personal Access Token, 로컬 OAuth2 브라우저 플로우, MCP OAuth 프록시, 요청별 원격 인증
@@ -30,7 +30,7 @@ PAT, OAuth, 읽기 전용 모드, 동적 API URL, 원격 인증을 지원하며
 | | @zereight/mcp-gitlab | GitLab MCP A (커뮤니티 CQRS형) |
 |---|----------------------|--------------------------------|
 | **적합한 경우** | AI 에이전트 워크플로우 | 엔터프라이즈 멀티 인스턴스 / 그룹형 도구 |
-| **도구 모델** | ~232개 세분화 도구 + `discover_tools` | ~50–60개 `browse_*` / `manage_*` 그룹 도구 |
+| **도구 모델** | ~261개 세분화 도구 + `discover_tools` | ~50–60개 `browse_*` / `manage_*` 그룹 도구 |
 | **MR 리뷰** | 2단계 배치 diff | 서버마다 다름 |
 | **Node.js** | >=18.17 | 보통 >=24 |
 | **라이선스** | MIT | 서버마다 다름 |
@@ -110,7 +110,7 @@ command = lib.getExe inputs.gitlab-mcp.packages.${system}.default;
 
 예시는 기존 `mcp-gitlab`보다 충돌 가능성이 낮은 `zereight-mcp-gitlab` 별칭을 사용합니다. MCP 클라이언트가 찾지 못하면 `which zereight-mcp-gitlab`의 절대 경로를 사용하세요.
 
-전역 설치를 쓰지 않으려면 `npx -y @zereight/mcp-gitlab@2.1.58`처럼 직전 안정 버전(문서가 권장하는 버전)으로 고정하세요. 항상 최신 버전을 원하면 `npx -y @zereight/mcp-gitlab@latest`를 사용하세요. 새 버전이 나오면 서버가 시작 시 stderr로 알려줍니다(`GITLAB_DISABLE_VERSION_CHECK=true`로 비활성화 가능).
+전역 설치를 쓰지 않으려면 `npx -y @zereight/mcp-gitlab@2.1.60`처럼 직전 안정 버전(문서가 권장하는 버전)으로 고정하세요. 항상 최신 버전을 원하면 `npx -y @zereight/mcp-gitlab@latest`를 사용하세요. 새 버전이 나오면 서버가 시작 시 stderr로 알려줍니다(`GITLAB_DISABLE_VERSION_CHECK=true`로 비활성화 가능).
 
 #### CLI 인자 사용하기(환경 변수 문제가 있는 클라이언트용)
 

package/README.md

@@ -22,7 +22,7 @@ Supports PAT, OAuth, read-only mode, dynamic API URLs, and remote authorization
 
 ### Why use this GitLab MCP?
 
-- **232 tools + `discover_tools`** — start with a small toolset; activate more at runtime without CQRS-style grouping
+- **261 tools + `discover_tools`** — start with a small toolset; activate more at runtime without CQRS-style grouping
 - **MR 2-step review** — `list_merge_request_changed_files` → batched `get_merge_request_file_diff`
 - **Agent Skill built in** — workflow guidance in `skills/gitlab-mcp/`
 - **Flexible auth** — Personal Access Token, local OAuth2 browser flow, MCP OAuth proxy, and per-request remote authorization
@@ -35,7 +35,7 @@ Supports PAT, OAuth, read-only mode, dynamic API URLs, and remote authorization
 | | @zereight/mcp-gitlab | GitLab MCP A (community CQRS-style) |
 |---|----------------------|-------------------------------------|
 | **Best for** | AI agent workflows | Enterprise multi-instance / grouped tools |
-| **Tool model** | ~232 granular tools + `discover_tools` | ~50–60 grouped `browse_*` / `manage_*` tools |
+| **Tool model** | ~261 granular tools + `discover_tools` | ~50–60 grouped `browse_*` / `manage_*` tools |
 | **MR review** | 2-step batched diff | Varies |
 | **Node.js** | >=18.17 | Often >=24 |
 | **License** | MIT | Varies |
@@ -115,7 +115,7 @@ The store path is pinned by your lock file; update it with `nix flake update git
 
 The examples use `zereight-mcp-gitlab`, a less collision-prone alias for the legacy `mcp-gitlab` binary. If your MCP client cannot find it, use the absolute path from `which zereight-mcp-gitlab`.
 
-No global install? Pin `npx` to the previous stable release (the version these docs recommend), for example `npx -y @zereight/mcp-gitlab@2.1.58`. If you always want the newest release, use `npx -y @zereight/mcp-gitlab@latest` instead. The server prints a notice to stderr on startup when a newer version is available (disable with `GITLAB_DISABLE_VERSION_CHECK=true`).
+No global install? Pin `npx` to the previous stable release (the version these docs recommend), for example `npx -y @zereight/mcp-gitlab@2.1.60`. If you always want the newest release, use `npx -y @zereight/mcp-gitlab@latest` instead. The server prints a notice to stderr on startup when a newer version is available (disable with `GITLAB_DISABLE_VERSION_CHECK=true`).
 
 #### Using CLI Arguments (for clients with env var issues)
 
@@ -691,131 +691,160 @@ Register the skill directory in your AI client to get optimal tool usage guidanc
 106. `get_repository_tree` - Get the repository tree for a GitLab project (list files and directories)
 107. `list_pipelines` - List pipelines in a GitLab project with filtering options
 108. `get_pipeline` - Get details of a specific pipeline in a GitLab project
-109. `list_deployments` - List deployments in a GitLab project with filtering options
-110. `get_deployment` - Get details of a specific deployment in a GitLab project
-111. `list_environments` - List environments in a GitLab project
-112. `get_environment` - Get details of a specific environment in a GitLab project
-113. `list_pipeline_jobs` - List all jobs in a specific pipeline
-114. `list_pipeline_trigger_jobs` - List all trigger jobs (bridges) in a specific pipeline that trigger downstream pipelines
-115. `get_pipeline_job` - Get details of a GitLab pipeline job number
-116. `get_pipeline_job_output` - Get the output/trace of a GitLab pipeline job with optional pagination to limit context window usage
-117. `validate_ci_lint` - Validate provided GitLab CI/CD YAML content for a project
-118. `validate_project_ci_lint` - Validate an existing `.gitlab-ci.yml` configuration for a project
-119. `list_ci_catalog_resources` - List GitLab CI/CD Catalog resources/components visible to the user
-120. `get_ci_catalog_resource` - Get details for a GitLab CI/CD Catalog resource, including versions and components
-121. `create_pipeline` - Create a new pipeline for a branch or tag
-122. `retry_pipeline` - Retry a failed or canceled pipeline
-123. `cancel_pipeline` - Cancel a running pipeline
-124. `list_pipeline_schedules` - List pipeline schedules in a project, optionally filtered to active or inactive
-125. `get_pipeline_schedule` - Get details of a specific pipeline schedule, including its variables and last pipeline
-126. `list_pipeline_schedule_pipelines` - List the pipelines that a pipeline schedule has triggered
-127. `create_pipeline_schedule` - Create a new pipeline schedule for a branch or tag
-128. `update_pipeline_schedule` - Update an existing pipeline schedule
-129. `delete_pipeline_schedule` - Delete a pipeline schedule
-130. `play_pipeline_schedule` - Run a pipeline schedule immediately, without changing its next scheduled run
-131. `take_ownership_pipeline_schedule` - Take ownership of a pipeline schedule
-132. `get_pipeline_schedule_variable` - Get a single variable of a pipeline schedule
-133. `create_pipeline_schedule_variable` - Create a variable for a pipeline schedule
-134. `update_pipeline_schedule_variable` - Update a variable of a pipeline schedule
-135. `delete_pipeline_schedule_variable` - Delete a variable from a pipeline schedule
-136. `play_pipeline_job` - Run a manual pipeline job
-137. `retry_pipeline_job` - Retry a failed or canceled pipeline job
-138. `cancel_pipeline_job` - Cancel a running pipeline job
-139. `list_job_artifacts` - List artifact files in a job's artifacts archive. Returns file names, paths, types, and sizes
-140. `download_job_artifacts` - Download the entire artifact archive (zip) for a job to a local path. Returns the saved file path
-141. `get_job_artifact_file` - Get the content of a single file from a job's artifacts by its path within the archive
-142. `list_merge_requests` - List merge requests globally or in a specific GitLab project with filtering options (project_id is now optional)
-143. `list_group_merge_requests` - List merge requests across all projects of a group and its subgroups with filtering options
-144. `list_milestones` - List milestones in a GitLab project with filtering options
-145. `get_milestone` - Get details of a specific milestone
-146. `create_milestone` - Create a new milestone in a GitLab project
-147. `edit_milestone` - Edit an existing milestone in a GitLab project
-148. `delete_milestone` - Delete a milestone from a GitLab project
-149. `get_milestone_issue` - Get issues associated with a specific milestone
-150. `get_milestone_merge_requests` - Get merge requests associated with a specific milestone
-151. `promote_milestone` - Promote a milestone to the next stage
-152. `get_milestone_burndown_events` - Get burndown events for a specific milestone
-153. `list_group_milestones` - List milestones in a GitLab group with filtering options
-154. `get_group_milestone` - Get details of a specific group milestone
-155. `create_group_milestone` - Create a new milestone in a GitLab group
-156. `edit_group_milestone` - Edit an existing group milestone
-157. `delete_group_milestone` - Delete a milestone from a GitLab group
-158. `get_group_milestone_issue` - Get issues associated with a specific group milestone
-159. `get_group_milestone_merge_requests` - Get merge requests associated with a specific group milestone
-160. `get_group_milestone_burndown_events` - Get burndown events for a specific group milestone
-161. `get_users` - Get GitLab user details by usernames
-162. `get_user` - Get user details by ID
-163. `whoami` - Get current authenticated user details
-164. `list_commits` - List repository commits with filtering options
-165. `get_commit` - Get details of a specific commit
-166. `get_commit_diff` - Get changes/diffs of a specific commit
-167. `get_file_blame` - Get git blame for a file at a given ref. Each entry maps a contiguous range of source lines to the commit that last changed them (id, author, authored_date, message). Use range_start/range_end to limit blame to specific lines.
-168. `list_commit_statuses` - List statuses for a specific commit
-169. `create_commit_status` - Create or update the status of a specific commit
-170. `list_group_iterations` - List group iterations with filtering options
-171. `upload_markdown` - Upload a file to a GitLab project for use in markdown content
-172. `download_attachment` - Download an uploaded file from a GitLab project by secret and filename
-173. `health_check` - Verify server status and authentication; when authenticated, reports GitLab instance version from `/api/v4/version` (`version`, `revision`, `enterprise`)
-174. `list_events` - List all events for the currently authenticated user
-175. `get_project_events` - List all visible events for a specified project
-176. `list_releases` - List all releases for a project
-177. `get_release` - Get a release by tag name
-178. `create_release` - Create a new release in a GitLab project
-179. `update_release` - Update an existing release in a GitLab project
-180. `delete_release` - Delete a release from a GitLab project (does not delete the associated tag)
-181. `create_release_evidence` - Create release evidence for an existing release (GitLab Premium/Ultimate only)
-182. `download_release_asset` - Download a release asset file by direct asset path
-183. `list_tags` - List repository tags with filtering and pagination support
-184. `get_tag` - Get details of a specific repository tag
-185. `create_tag` - Create a new tag in the repository
-186. `delete_tag` - Delete a tag from the repository
-187. `get_tag_signature` - Get the signature of a signed tag
-188. `get_work_item` - Get a single work item with full details including status, hierarchy (parent/children), type, labels, assignees, and all widgets
-189. `list_work_items` - List work items in a project with filters (type, state, search, assignees, labels). Returns items with status and hierarchy info
-190. `create_work_item` - Create a new work item (issue, task, incident, test_case, epic, key_result, objective, requirement, ticket). Supports setting title, description, labels, assignees, weight, parent, health status, start/due dates, milestone, and confidentiality
-191. `update_work_item` - Update a work item. Can modify title, description, labels, assignees, weight, state, status, parent hierarchy, children, health status, start/due dates, milestone, confidentiality, linked items, and custom fields
-192. `convert_work_item_type` - Convert a work item to a different type (e.g. issue to task, task to incident)
-193. `list_work_item_statuses` - List available statuses for a work item type in a project. Requires GitLab Premium/Ultimate with configurable statuses
-194. `list_custom_field_definitions` - List available custom field definitions for a work item type in a project. Returns field names, types, and IDs needed for setting custom fields via update_work_item
-195. `move_work_item` - Move a work item (issue, task, etc.) to a different project. Uses GitLab GraphQL issueMove mutation
-196. `list_work_item_notes` - List notes and discussions on a work item. Returns threaded discussions with author, body, timestamps, and system/internal flags
-197. `create_work_item_note` - Add a note/comment to a work item. Supports Markdown, internal notes, and threaded replies
-198. `list_work_item_emoji_reactions` - List all emoji reactions on a work item
-199. `list_work_item_note_emoji_reactions` - List all emoji reactions on a work item note (comment, thread, or thread reply)
-200. `create_work_item_emoji_reaction` - Add an emoji reaction to a work item (e.g. thumbsup, rocket, eyes)
-201. `delete_work_item_emoji_reaction` - Remove an emoji reaction from a work item
-202. `create_work_item_note_emoji_reaction` - Add an emoji reaction to a work item note (comment, thread, or thread reply)
-203. `delete_work_item_note_emoji_reaction` - Remove an emoji reaction from a work item note (comment, thread, or thread reply)
-204. `get_timeline_events` - List timeline events for an incident. Returns chronological events with notes, timestamps, and tags
-205. `create_timeline_event` - Create a timeline event on an incident. Supports tags: 'Start time', 'End time', 'Impact detected', 'Response initiated', 'Impact mitigated', 'Cause identified'
-206. `list_webhooks` - List all configured webhooks for a GitLab project or group. Provide either project_id or group_id
-207. `create_webhook` - Create a webhook on a GitLab project or group
-208. `update_webhook` - Update an existing project or group webhook
-209. `delete_webhook` - Delete a project or group webhook
-210. `list_webhook_events` - List recent webhook events (past 7 days) for a project or group webhook. Use summary mode for overview, then get_webhook_event for full details
-211. `get_webhook_event` - Get full details of a specific webhook event by ID, including request/response payloads
-212. `search_code` - Search for code across all projects on the GitLab instance (requires advanced search or exact code search to be enabled)
-213. `search_project_code` - Search for code within a specific GitLab project (requires advanced search or exact code search to be enabled)
-214. `search_group_code` - Search for code within a specific GitLab group (requires advanced search or exact code search to be enabled)
-215. `list_project_variables` - List CI/CD variables for a project with optional environment scope filter
-216. `get_project_variable` - Get a single CI/CD variable from a project by key, with optional environment scope filter
-217. `create_project_variable` - Create a new CI/CD variable in a project
-218. `update_project_variable` - Update an existing CI/CD variable in a project, with optional filter to disambiguate by environment scope
-219. `delete_project_variable` - Delete a CI/CD variable from a project, with optional filter to disambiguate by environment scope
-220. `list_group_variables` - List CI/CD variables for a group with optional environment scope filter
-221. `get_group_variable` - Get a single CI/CD variable from a group by key, with optional environment scope filter
-222. `create_group_variable` - Create a new CI/CD variable in a group
-223. `update_group_variable` - Update an existing CI/CD variable in a group, with optional filter to disambiguate by environment scope
-224. `delete_group_variable` - Delete a CI/CD variable from a group, with optional filter to disambiguate by environment scope
-225. `get_dependency_proxy_settings` - Get dependency proxy settings for a group (enabled status, blob count, total size, image prefix, TTL policy)
-226. `update_dependency_proxy_settings` - Update dependency proxy settings for a group (enable/disable, credentials for authenticated Docker Hub pulls)
-227. `list_dependency_proxy_blobs` - List cached dependency proxy blobs for a group with cursor-based pagination
-228. `purge_dependency_proxy_cache` - Schedule purge of all cached dependency proxy blobs for a group
-229. `list_project_vulnerabilities` - List vulnerabilities for a project with optional state, severity, and report type filters (GraphQL-backed, cursor pagination)
-230. `get_vulnerability` - Get full details of a specific vulnerability
-231. `dismiss_vulnerability` - Dismiss a vulnerability with a reason (acceptable_risk, false_positive, used_in_tests, mitigating_control, not_applicable) and optional comment
-232. `confirm_vulnerability` - Confirm a vulnerability as a real finding requiring remediation
-233. `discover_tools` - Discover and activate additional tool categories for this session. Available categories: merge_requests, issues, repositories, branches, projects, labels, ci, groups, pipelines, milestones, wiki, releases, tags, users, workitems, webhooks, search, variables, dependency_proxy, vulnerabilities. Already-active categories are listed in the response.
+109. `get_pipeline_variables` - Get variables configured for a pipeline
+110. `get_pipeline_test_report` - Get pipeline test report
+111. `get_pipeline_test_report_summary` - Get pipeline test report summary
+112. `delete_pipeline` - Delete a pipeline. Requires the project Owner role, cannot be undone, and does not automatically delete child pipelines.
+113. `update_pipeline_metadata` - Update pipeline metadata
+114. `list_deployments` - List deployments in a GitLab project with filtering options
+115. `get_deployment` - Get details of a specific deployment in a GitLab project
+116. `create_deployment` - Create a deployment
+117. `update_deployment` - Update a deployment status
+118. `delete_deployment` - Delete a deployment
+119. `list_deployment_merge_requests` - List merge requests shipped with a deployment
+120. `approve_deployment` - Approve or reject a protected-environment deployment
+121. `list_environments` - List environments in a GitLab project
+122. `get_environment` - Get details of a specific environment in a GitLab project
+123. `update_environment` - Update an environment
+124. `delete_environment` - Delete a stopped environment
+125. `stop_environment` - Stop an environment
+126. `stop_stale_environments` - Stop eligible stale environments; protected environments are excluded and environments are stopped, not deleted
+127. `delete_review_app_environments` - Schedule deletion of stopped review-app environments one week later; `dry_run` defaults to true and actual scheduling requires `dry_run=false`
+128. `list_pipeline_triggers` - List project pipeline trigger tokens
+129. `get_pipeline_trigger` - Get a project pipeline trigger
+130. `create_pipeline_trigger` - Create a project pipeline trigger
+131. `update_pipeline_trigger` - Update a project pipeline trigger
+132. `delete_pipeline_trigger` - Delete a project pipeline trigger
+133. `trigger_pipeline` - Trigger a pipeline with a pipeline trigger token
+134. `list_pipeline_jobs` - List all jobs in a specific pipeline
+135. `list_pipeline_trigger_jobs` - List all trigger jobs (bridges) in a specific pipeline that trigger downstream pipelines
+136. `get_pipeline_job` - Get details of a GitLab pipeline job number
+137. `get_pipeline_job_output` - Get the output/trace of a GitLab pipeline job with optional pagination to limit context window usage
+138. `validate_ci_lint` - Validate provided GitLab CI/CD YAML content for a project
+139. `validate_project_ci_lint` - Validate an existing `.gitlab-ci.yml` configuration for a project
+140. `list_ci_catalog_resources` - List GitLab CI/CD Catalog resources/components visible to the user
+141. `get_ci_catalog_resource` - Get details for a GitLab CI/CD Catalog resource, including versions and components
+142. `create_pipeline` - Create a new pipeline for a branch or tag
+143. `retry_pipeline` - Retry a failed or canceled pipeline
+144. `cancel_pipeline` - Cancel a running pipeline
+145. `list_pipeline_schedules` - List pipeline schedules in a project, optionally filtered to active or inactive
+146. `get_pipeline_schedule` - Get details of a specific pipeline schedule, including its variables and last pipeline
+147. `list_pipeline_schedule_pipelines` - List the pipelines that a pipeline schedule has triggered
+148. `create_pipeline_schedule` - Create a new pipeline schedule for a branch or tag
+149. `update_pipeline_schedule` - Update an existing pipeline schedule
+150. `delete_pipeline_schedule` - Delete a pipeline schedule
+151. `play_pipeline_schedule` - Run a pipeline schedule immediately, without changing its next scheduled run
+152. `take_ownership_pipeline_schedule` - Take ownership of a pipeline schedule
+153. `get_pipeline_schedule_variable` - Get a single variable of a pipeline schedule
+154. `create_pipeline_schedule_variable` - Create a variable for a pipeline schedule
+155. `update_pipeline_schedule_variable` - Update a variable of a pipeline schedule
+156. `delete_pipeline_schedule_variable` - Delete a variable from a pipeline schedule
+157. `play_pipeline_job` - Run a manual pipeline job
+158. `play_pipeline_jobs` - Play multiple manual pipeline jobs sequentially
+159. `retry_pipeline_job` - Retry a failed or canceled pipeline job
+160. `cancel_pipeline_job` - Cancel a running pipeline job
+161. `erase_pipeline_job` - Erase a pipeline job log and artifacts
+162. `wait_for_pipeline` - Wait for a pipeline to reach a terminal status
+163. `wait_for_job` - Wait for a job to reach a terminal status
+164. `list_job_artifacts` - List artifact files in a job's artifacts archive. Returns file names, paths, types, and sizes
+165. `download_job_artifacts` - Download the entire artifact archive (zip) for a job to a local path. Returns the saved file path
+166. `get_job_artifact_file` - Get the content of a single file from a job's artifacts by its path within the archive
+167. `list_merge_requests` - List merge requests globally or in a specific GitLab project with filtering options (project_id is now optional)
+168. `list_group_merge_requests` - List merge requests across all projects of a group and its subgroups with filtering options
+169. `list_milestones` - List milestones in a GitLab project with filtering options
+170. `get_milestone` - Get details of a specific milestone
+171. `create_milestone` - Create a new milestone in a GitLab project
+172. `edit_milestone` - Edit an existing milestone in a GitLab project
+173. `delete_milestone` - Delete a milestone from a GitLab project
+174. `get_milestone_issue` - Get issues associated with a specific milestone
+175. `get_milestone_merge_requests` - Get merge requests associated with a specific milestone
+176. `promote_milestone` - Promote a milestone to the next stage
+177. `get_milestone_burndown_events` - Get burndown events for a specific milestone
+178. `list_group_milestones` - List milestones in a GitLab group with filtering options
+179. `get_group_milestone` - Get details of a specific group milestone
+180. `create_group_milestone` - Create a new milestone in a GitLab group
+181. `edit_group_milestone` - Edit an existing group milestone
+182. `delete_group_milestone` - Delete a milestone from a GitLab group
+183. `get_group_milestone_issue` - Get issues associated with a specific group milestone
+184. `get_group_milestone_merge_requests` - Get merge requests associated with a specific group milestone
+185. `get_group_milestone_burndown_events` - Get burndown events for a specific group milestone
+186. `get_users` - Get GitLab user details by usernames
+187. `get_user` - Get user details by ID
+188. `whoami` - Get current authenticated user details
+189. `list_commits` - List repository commits with filtering options
+190. `get_commit` - Get details of a specific commit
+191. `get_commit_diff` - Get changes/diffs of a specific commit
+192. `get_file_blame` - Get git blame for a file at a given ref. Each entry maps a contiguous range of source lines to the commit that last changed them (id, author, authored_date, message). Use range_start/range_end to limit blame to specific lines.
+193. `list_commit_statuses` - List statuses for a specific commit
+194. `create_commit_status` - Create or update the status of a specific commit
+195. `list_group_iterations` - List group iterations with filtering options
+196. `upload_markdown` - Upload a file to a GitLab project for use in markdown content
+197. `download_attachment` - Download an uploaded file from a GitLab project by secret and filename
+198. `health_check` - Verify server status and authentication; when authenticated, reports GitLab instance version from `/api/v4/version` (`version`, `revision`, `enterprise`)
+199. `list_events` - List all events for the currently authenticated user
+200. `get_project_events` - List all visible events for a specified project
+201. `list_releases` - List all releases for a project
+202. `get_release` - Get a release by tag name
+203. `create_release` - Create a new release in a GitLab project
+204. `update_release` - Update an existing release in a GitLab project
+205. `delete_release` - Delete a release from a GitLab project (does not delete the associated tag)
+206. `create_release_evidence` - Create release evidence for an existing release (GitLab Premium/Ultimate only)
+207. `download_release_asset` - Download a release asset file by direct asset path
+208. `list_tags` - List repository tags with filtering and pagination support
+209. `get_tag` - Get details of a specific repository tag
+210. `create_tag` - Create a new tag in the repository
+211. `delete_tag` - Delete a tag from the repository
+212. `get_tag_signature` - Get the signature of a signed tag
+213. `get_work_item` - Get a single work item with full details including status, hierarchy (parent/children), type, labels, assignees, and all widgets
+214. `list_work_items` - List work items in a project with filters (type, state, search, assignees, labels). Returns items with status and hierarchy info
+215. `create_work_item` - Create a new work item (issue, task, incident, test_case, epic, key_result, objective, requirement, ticket). Supports setting title, description, labels, assignees, weight, parent, health status, start/due dates, milestone, and confidentiality
+216. `update_work_item` - Update a work item. Can modify title, description, labels, assignees, weight, state, status, parent hierarchy, children, health status, start/due dates, milestone, confidentiality, linked items, and custom fields
+217. `convert_work_item_type` - Convert a work item to a different type (e.g. issue to task, task to incident)
+218. `list_work_item_statuses` - List available statuses for a work item type in a project. Requires GitLab Premium/Ultimate with configurable statuses
+219. `list_custom_field_definitions` - List available custom field definitions for a work item type in a project. Returns field names, types, and IDs needed for setting custom fields via update_work_item
+220. `move_work_item` - Move a work item (issue, task, etc.) to a different project. Uses GitLab GraphQL issueMove mutation
+221. `list_work_item_notes` - List notes and discussions on a work item. Returns threaded discussions with author, body, timestamps, and system/internal flags
+222. `create_work_item_note` - Add a note/comment to a work item. Supports Markdown, internal notes, and threaded replies
+223. `list_work_item_emoji_reactions` - List all emoji reactions on a work item
+224. `list_work_item_note_emoji_reactions` - List all emoji reactions on a work item note (comment, thread, or thread reply)
+225. `create_work_item_emoji_reaction` - Add an emoji reaction to a work item (e.g. thumbsup, rocket, eyes)
+226. `delete_work_item_emoji_reaction` - Remove an emoji reaction from a work item
+227. `create_work_item_note_emoji_reaction` - Add an emoji reaction to a work item note (comment, thread, or thread reply)
+228. `delete_work_item_note_emoji_reaction` - Remove an emoji reaction from a work item note (comment, thread, or thread reply)
+229. `get_timeline_events` - List timeline events for an incident. Returns chronological events with notes, timestamps, and tags
+230. `create_timeline_event` - Create a timeline event on an incident. Supports tags: 'Start time', 'End time', 'Impact detected', 'Response initiated', 'Impact mitigated', 'Cause identified'
+231. `list_webhooks` - List all configured webhooks for a GitLab project or group. Provide either project_id or group_id
+232. `create_webhook` - Create a webhook on a GitLab project or group
+233. `update_webhook` - Update an existing project or group webhook
+234. `delete_webhook` - Delete a project or group webhook
+235. `list_webhook_events` - List recent webhook events (past 7 days) for a project or group webhook. Use summary mode for overview, then get_webhook_event for full details
+236. `get_webhook_event` - Get full details of a specific webhook event by ID, including request/response payloads
+237. `search_code` - Search for code across all projects on the GitLab instance (requires advanced search or exact code search to be enabled)
+238. `search_project_code` - Search for code within a specific GitLab project (requires advanced search or exact code search to be enabled)
+239. `search_group_code` - Search for code within a specific GitLab group (requires advanced search or exact code search to be enabled)
+240. `list_project_variables` - List CI/CD variables for a project with optional environment scope filter
+241. `get_project_variable` - Get a single CI/CD variable from a project by key, with optional environment scope filter
+242. `create_project_variable` - Create a new CI/CD variable in a project
+243. `update_project_variable` - Update an existing CI/CD variable in a project, with optional filter to disambiguate by environment scope
+244. `delete_project_variable` - Delete a CI/CD variable from a project, with optional filter to disambiguate by environment scope
+245. `list_group_variables` - List CI/CD variables for a group with optional environment scope filter
+246. `get_group_variable` - Get a single CI/CD variable from a group by key, with optional environment scope filter
+247. `create_group_variable` - Create a new CI/CD variable in a group
+248. `update_group_variable` - Update an existing CI/CD variable in a group, with optional filter to disambiguate by environment scope
+249. `delete_group_variable` - Delete a CI/CD variable from a group, with optional filter to disambiguate by environment scope
+250. `get_dependency_proxy_settings` - Get dependency proxy settings for a group (enabled status, blob count, total size, image prefix, TTL policy)
+251. `update_dependency_proxy_settings` - Update dependency proxy settings for a group (enable/disable, credentials for authenticated Docker Hub pulls)
+252. `list_dependency_proxy_blobs` - List cached dependency proxy blobs for a group with cursor-based pagination
+253. `purge_dependency_proxy_cache` - Schedule purge of all cached dependency proxy blobs for a group
+254. `list_project_vulnerabilities` - List vulnerabilities for a project with optional state, severity, and report type filters (GraphQL-backed, cursor pagination)
+255. `get_vulnerability` - Get full details of a specific vulnerability
+256. `dismiss_vulnerability` - Dismiss a vulnerability with a reason (acceptable_risk, false_positive, used_in_tests, mitigating_control, not_applicable) and optional comment
+257. `confirm_vulnerability` - Confirm a vulnerability as a real finding requiring remediation
+258. `orbit_query` - Execute a GitLab Orbit graph query over the indexed SDLC knowledge graph
+259. `orbit_get_schema` - Fetch the current GitLab Orbit graph schema (node and edge types)
+260. `orbit_get_status` - Check GitLab Orbit indexing status for the enabled scope
+261. `orbit_list_tools` - List the MCP tool definitions exposed by GitLab Orbit
+262. `discover_tools` - Discover and activate additional tool categories for this session. Available categories: merge_requests, issues, repositories, branches, projects, labels, ci, groups, pipelines, milestones, wiki, releases, tags, users, workitems, webhooks, search, variables, dependency_proxy, vulnerabilities, orbit. Already-active categories are listed in the response.
 
 <!-- TOOLS-END -->
 

package/README.zh-CN.md

@@ -17,7 +17,7 @@
 
 ### 为什么使用这个 GitLab MCP？
 
-- **232 个工具 + `discover_tools`** — 从小型 toolset 开始，运行时按需激活类别
+- **261 个工具 + `discover_tools`** — 从小型 toolset 开始，运行时按需激活类别
 - **MR 两步审查** — `list_merge_request_changed_files` → 批量 `get_merge_request_file_diff`
 - **内置 Agent Skill** — `skills/gitlab-mcp/` 工作流指南
 - **认证灵活** — Personal Access Token、本地 OAuth2 浏览器流程、MCP OAuth 代理、按请求远程授权
@@ -30,7 +30,7 @@
 | | @zereight/mcp-gitlab | GitLab MCP A（社区 CQRS 型） |
 |---|----------------------|------------------------------|
 | **更适合** | AI 代理工作流 | 企业多实例 / 分组工具 |
-| **工具模型** | ~232 个细粒度工具 + `discover_tools` | ~50–60 个 `browse_*` / `manage_*` 分组工具 |
+| **工具模型** | ~261 个细粒度工具 + `discover_tools` | ~50–60 个 `browse_*` / `manage_*` 分组工具 |
 | **MR 审查** | 两步批量 diff | 因服务器而异 |
 | **Node.js** | >=18.17 | 通常 >=24 |
 | **许可证** | MIT | 因服务器而异 |
@@ -110,7 +110,7 @@ command = lib.getExe inputs.gitlab-mcp.packages.${system}.default;
 
 示例使用 `zereight-mcp-gitlab`，这是比旧的 `mcp-gitlab` 更不容易冲突的别名。如果 MCP 客户端找不到它，请使用 `which zereight-mcp-gitlab` 输出的绝对路径。
 
-如果不想全局安装，请将 `npx` 固定到上一个稳定版本（即文档推荐的版本），例如 `npx -y @zereight/mcp-gitlab@2.1.58`。如果始终想使用最新版本，请改用 `npx -y @zereight/mcp-gitlab@latest`。有新版本发布时，服务器会在启动时通过 stderr 提示（可用 `GITLAB_DISABLE_VERSION_CHECK=true` 关闭）。
+如果不想全局安装，请将 `npx` 固定到上一个稳定版本（即文档推荐的版本），例如 `npx -y @zereight/mcp-gitlab@2.1.60`。如果始终想使用最新版本，请改用 `npx -y @zereight/mcp-gitlab@latest`。有新版本发布时，服务器会在启动时通过 stderr 提示（可用 `GITLAB_DISABLE_VERSION_CHECK=true` 关闭）。
 
 #### 使用 CLI 参数（适用于环境变量有问题的客户端）
 

package/build/index.js

@@ -111,7 +111,7 @@ GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
 GitLabDraftNoteSchema, GitLabForkSchema, GitLabBranchSchema, GitLabProtectedBranchSchema, GitLabGroupSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestPipelineSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabGroupMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineScheduleSchema, GitLabPipelineScheduleVariableSchema, GitLabPipelineSchedulePlayResultSchema, ListPipelineSchedulesSchema, GetPipelineScheduleSchema, ListPipelineSchedulePipelinesSchema, CreatePipelineScheduleSchema, UpdatePipelineScheduleSchema, DeletePipelineScheduleSchema, PlayPipelineScheduleSchema, TakeOwnershipPipelineScheduleSchema, GetPipelineScheduleVariableSchema, CreatePipelineScheduleVariableSchema, UpdatePipelineScheduleVariableSchema, DeletePipelineScheduleVariableSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitStatusesSchema, ListBranchesSchema, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, GitLabCiVariableSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GitLabDependencyProxySchema, GitLabDependencyProxyBlobSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
-GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListProjectMembersSchema, ListGroupMembersSchema, ListProjectMilestonesSchema, ListGroupMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, CreateWebhookSchema, UpdateWebhookSchema, DeleteWebhookSchema, ListWebhookEventsSchema, GetWebhookEventSchema, HealthCheckSchema, } from "./schemas.js";
+GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListProjectMembersSchema, ListGroupMembersSchema, ListProjectMilestonesSchema, ListGroupMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, OrbitQuerySchema, OrbitSchemaSchema, OrbitStatusSchema, OrbitToolsSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, CreateWebhookSchema, UpdateWebhookSchema, DeleteWebhookSchema, ListWebhookEventsSchema, GetWebhookEventSchema, HealthCheckSchema, } from "./schemas.js";
 import { randomUUID, timingSafeEqual, } from "node:crypto";
 import { createLogger } from "./utils/logger.js";
 const logger = createLogger();
@@ -7145,6 +7145,47 @@ async function listProjectVulnerabilities(projectId, options = {}) {
         pageInfo: data.project.vulnerabilities.pageInfo,
     };
 }
+/**
+ * Execute a GitLab Orbit graph query.
+ * Note: the `llm` format returns compact plain text, not JSON.
+ */
+async function orbitQuery(query, format) {
+    const url = new URL(`${getEffectiveApiUrl()}/orbit/query`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+        method: "POST",
+        body: JSON.stringify({ query, format }),
+    });
+    await handleGitLabError(response);
+    if (format === "raw") {
+        return response.json();
+    }
+    return response.text();
+}
+async function orbitGetSchema() {
+    const url = new URL(`${getEffectiveApiUrl()}/orbit/schema`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    return response.json();
+}
+async function orbitGetStatus() {
+    const url = new URL(`${getEffectiveApiUrl()}/orbit/status`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    return response.json();
+}
+async function orbitListTools() {
+    const url = new URL(`${getEffectiveApiUrl()}/orbit/tools`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    return response.json();
+}
 async function getVulnerability(vulnerabilityId) {
     const data = await executeGraphQL(`query getVulnerability($id: VulnerabilityID!) {
       vulnerability(id: $id) {
@@ -9907,6 +9948,31 @@ async function handleToolCall(params) {
                 const result = await confirmVulnerability(args.vulnerability_id, args.comment);
                 return { content: [{ type: "text", text: JSON.stringify(result) }] };
             }
+            case "orbit_query": {
+                rejectIfStrictProjectScope("orbit_query");
+                const args = OrbitQuerySchema.parse(params.arguments);
+                const result = await orbitQuery(args.query, args.format);
+                const text = typeof result === "string" ? result : JSON.stringify(result);
+                return { content: [{ type: "text", text }] };
+            }
+            case "orbit_get_schema": {
+                rejectIfStrictProjectScope("orbit_get_schema");
+                OrbitSchemaSchema.parse(params.arguments);
+                const result = await orbitGetSchema();
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            }
+            case "orbit_get_status": {
+                rejectIfStrictProjectScope("orbit_get_status");
+                OrbitStatusSchema.parse(params.arguments);
+                const result = await orbitGetStatus();
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            }
+            case "orbit_list_tools": {
+                rejectIfStrictProjectScope("orbit_list_tools");
+                OrbitToolsSchema.parse(params.arguments);
+                const result = await orbitListTools();
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            }
             case "upload_markdown": {
                 if (IS_REMOTE) {
                     const args = MarkdownUploadRemoteSchema.parse(params.arguments);

package/build/schemas.js

@@ -4634,3 +4634,23 @@ export const ConfirmVulnerabilitySchema = z.object({
         .describe("The ID of the vulnerability to confirm (numeric or GraphQL global ID)"),
     comment: z.string().optional().describe("Optional comment explaining the confirmation"),
 });
+// --- GitLab Orbit (knowledge graph) ---
+// Query the Orbit property graph: groups, projects, MRs, pipelines, issues,
+// vulnerabilities, and source code indexed as one queryable graph.
+// Requires Premium/Ultimate; Beta; query calls consume GitLab credits.
+export const OrbitQuerySchema = z.object({
+    query: z
+        .record(z.string(), z.unknown())
+        .describe("GitLab Orbit query DSL object (see the Orbit query-language reference for node/edge types and operators)"),
+    format: z
+        .enum(["raw", "llm"])
+        .optional()
+        .default("llm")
+        .describe("Response format: 'raw' for structured JSON, 'llm' for compact agent-optimized text (default)"),
+});
+// Schema for fetching the current Orbit graph schema (node/edge types)
+export const OrbitSchemaSchema = z.object({});
+// Schema for checking Orbit indexing status
+export const OrbitStatusSchema = z.object({});
+// Schema for listing the MCP tool definitions Orbit exposes
+export const OrbitToolsSchema = z.object({});

package/build/scripts/generate-tool-docs.js

@@ -119,6 +119,10 @@ const GROUP_META = {
         title: "Vulnerabilities",
         blurb: "AI-assisted vulnerability triage — list findings, inspect details, dismiss with reason, or confirm for remediation. Backed by the GitLab GraphQL API; requires GitLab Ultimate.",
     },
+    orbit: {
+        title: "GitLab Orbit",
+        blurb: "Query the Orbit SDLC knowledge graph (Beta; Premium/Ultimate). Graph queries consume GitLab credits; schema, status, and tool listing are free.",
+    },
 };
 const GROUP_ORDER = [
     "projects",
@@ -141,6 +145,7 @@ const GROUP_ORDER = [
     "search",
     "dependency_proxy",
     "vulnerabilities",
+    "orbit",
 ];
 // Authoritative classification — uses the `readOnlyTools` set from
 // tools/registry.ts. That set is what the server itself consults to decide

package/build/test/test-orbit.js

@@ -0,0 +1,155 @@
+import { describe, test, before, after } from "node:test";
+import assert from "node:assert";
+import { spawn } from "child_process";
+import { MockGitLabServer, findMockServerPort } from "./utils/mock-gitlab-server.js";
+const MOCK_TOKEN = "glpat-mock-token-12345";
+const mockSchema = {
+    nodes: [{ name: "Project", properties: ["id", "name"] }],
+    edges: [{ name: "HAS_MERGE_REQUEST", from: "Project", to: "MergeRequest" }],
+};
+const mockStatus = {
+    status: "ready",
+    last_indexed_at: "2026-09-05T10:00:00Z",
+    indexed_groups: 3,
+};
+const mockTools = {
+    tools: [{ name: "orbit_query", description: "Execute a graph query" }],
+};
+const mockQueryRaw = {
+    results: [{ project: "group/a", failures: 7 }],
+};
+const mockQueryLlm = "Top failing project: group/a (7 failures).";
+function baseEnv(mockGitLabUrl) {
+    return {
+        GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+        GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        GITLAB_TOOLSETS: "orbit",
+    };
+}
+async function callToolAsync(env, name, args) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn("node", ["build/index.js"], {
+            stdio: ["pipe", "pipe", "pipe"],
+            env: { ...process.env, ...env },
+        });
+        let output = "";
+        let errorOutput = "";
+        proc.stdout?.on("data", (chunk) => (output += chunk));
+        proc.stderr?.on("data", (chunk) => (errorOutput += chunk));
+        proc.on("close", code => {
+            if (code !== 0) {
+                return reject(new Error(`Process exited with code ${code}: ${errorOutput}`));
+            }
+            const line = output.split("\n").find(entry => entry.startsWith("{"));
+            if (!line) {
+                return reject(new Error("No JSON output found"));
+            }
+            try {
+                const response = JSON.parse(line);
+                if (response.error) {
+                    reject(new Error(JSON.stringify(response.error)));
+                    return;
+                }
+                const content = response.result?.content?.[0]?.text;
+                if (content === undefined) {
+                    reject(new Error("No tool result content"));
+                    return;
+                }
+                resolve(content);
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+        proc.stdin?.end(JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/call",
+            params: { name, arguments: args },
+        }) + "\n");
+    });
+}
+describe("orbit tools", () => {
+    let mockGitLab;
+    let mockGitLabUrl;
+    let lastQueryBody = null;
+    before(async () => {
+        const mockPort = await findMockServerPort();
+        mockGitLab = new MockGitLabServer({
+            port: mockPort,
+            validTokens: [MOCK_TOKEN],
+        });
+        mockGitLab.addMockHandler("get", "/orbit/schema", (_req, res) => {
+            res.json(mockSchema);
+        });
+        mockGitLab.addMockHandler("get", "/orbit/status", (_req, res) => {
+            res.json(mockStatus);
+        });
+        mockGitLab.addMockHandler("get", "/orbit/tools", (_req, res) => {
+            res.json(mockTools);
+        });
+        mockGitLab.addMockHandler("post", "/orbit/query", (req, res) => {
+            lastQueryBody = req.body;
+            if (req.body?.format === "raw") {
+                res.json(mockQueryRaw);
+                return;
+            }
+            res.type("text/plain").send(mockQueryLlm);
+        });
+        await mockGitLab.start();
+        mockGitLabUrl = mockGitLab.getUrl();
+    });
+    after(async () => {
+        await mockGitLab.stop();
+    });
+    test("orbit_get_schema returns the graph schema", async () => {
+        const text = await callToolAsync(baseEnv(mockGitLabUrl), "orbit_get_schema", {});
+        assert.deepEqual(JSON.parse(text), mockSchema);
+    });
+    test("orbit_get_status returns indexing status", async () => {
+        const text = await callToolAsync(baseEnv(mockGitLabUrl), "orbit_get_status", {});
+        assert.deepEqual(JSON.parse(text), mockStatus);
+    });
+    test("orbit_list_tools returns tool definitions", async () => {
+        const text = await callToolAsync(baseEnv(mockGitLabUrl), "orbit_list_tools", {});
+        assert.deepEqual(JSON.parse(text), mockTools);
+    });
+    test("orbit_query with format=raw returns structured JSON", async () => {
+        const query = { node: "Project", limit: 5 };
+        const text = await callToolAsync(baseEnv(mockGitLabUrl), "orbit_query", {
+            query,
+            format: "raw",
+        });
+        assert.deepEqual(JSON.parse(text), mockQueryRaw);
+        assert.deepEqual(lastQueryBody, { query, format: "raw" });
+    });
+    test("orbit_query defaults to llm format and passes text through", async () => {
+        const query = { node: "Project", limit: 5 };
+        const text = await callToolAsync(baseEnv(mockGitLabUrl), "orbit_query", { query });
+        assert.equal(text, mockQueryLlm);
+        assert.deepEqual(lastQueryBody, { query, format: "llm" });
+    });
+    for (const toolName of [
+        "orbit_query",
+        "orbit_get_schema",
+        "orbit_get_status",
+        "orbit_list_tools",
+    ]) {
+        test(`${toolName} is refused under strict project scope`, async () => {
+            const env = {
+                ...baseEnv(mockGitLabUrl),
+                ENABLE_STRICT_PROJECT_SCOPE: "true",
+                GITLAB_ALLOWED_PROJECT_IDS: "1,2",
+            };
+            const args = toolName === "orbit_query" ? { query: {} } : {};
+            let message = "";
+            try {
+                message = await callToolAsync(env, toolName, args);
+            }
+            catch (error) {
+                message = error.message;
+            }
+            assert.match(message, /not allowed while a project allowlist is in effect/);
+        });
+    }
+});

package/build/test/test-toolset-filtering.js

@@ -36,6 +36,7 @@ const TOOLSET_TOOL_COUNTS = {
     variables: 10,
     dependency_proxy: 4,
     vulnerabilities: 4,
+    orbit: 4,
 };
 const LEGACY_PIPELINE_CI_TOOL_COUNT = 2;
 const LEGACY_PIPELINE_TOOL_COUNT = TOOLSET_TOOL_COUNTS.pipelines + LEGACY_PIPELINE_CI_TOOL_COUNT;
@@ -62,6 +63,7 @@ const NON_DEFAULT_TOOLSETS = [
     "variables",
     "dependency_proxy",
     "vulnerabilities",
+    "orbit",
 ];
 // discover_tools meta-tool is always force-injected (Step 5.5)
 const DISCOVER_TOOLS_COUNT = 1;

package/build/test/tool-description-quality.test.js

@@ -1,6 +1,11 @@
 import assert from "node:assert/strict";
 import { describe, it } from "node:test";
 import { allTools, TOOLSET_DEFINITIONS } from "../tools/registry.js";
+function getExposedTool(name) {
+    const tool = allTools.find(candidate => candidate.name === name);
+    assert.ok(tool);
+    return tool;
+}
 function getDefaultToolNames() {
     return new Set(TOOLSET_DEFINITIONS.filter(definition => definition.isDefault).flatMap(definition => [
         ...definition.tools,
@@ -17,9 +22,29 @@ describe("When MCP tool descriptions are exposed", () => {
     });
     describe("with create_branch", () => {
         it("should explain its source revision and neighboring branch operations", () => {
-            const tool = allTools.find(candidate => candidate.name === "create_branch");
-            assert.ok(tool);
+            const tool = getExposedTool("create_branch");
             assert.match(tool.description, /source branch|tag|commit[\s\S]*protect_branch[\s\S]*already-exists/i);
         });
     });
+    describe("with list_issues", () => {
+        it("should include issue-management guidance and omit group_id", () => {
+            const tool = getExposedTool("list_issues");
+            assert.match(tool.description, /issue management/i);
+            assert.doesNotMatch(tool.description, /group_id/);
+        });
+    });
+    describe("with my_issues", () => {
+        it("should include issue-management guidance and omit group_id", () => {
+            const tool = getExposedTool("my_issues");
+            assert.match(tool.description, /issue management/i);
+            assert.doesNotMatch(tool.description, /group_id/);
+        });
+    });
+    describe("with get_issue", () => {
+        it("should include issue-management guidance and omit group_id", () => {
+            const tool = getExposedTool("get_issue");
+            assert.match(tool.description, /issue management/i);
+            assert.doesNotMatch(tool.description, /group_id/);
+        });
+    });
 });

package/build/tools/registry.js

@@ -2,7 +2,7 @@ import { zodToJsonSchema } from "zod-to-json-schema";
 import { toJSONSchema } from "../utils/schema.js";
 import { USE_GITLAB_WIKI, USE_MILESTONE, USE_PIPELINE, SSE, STREAMABLE_HTTP, } from "../config.js";
 import { getToolDescription } from "./tool-descriptions.js";
-import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, ErasePipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWebhookSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWebhookSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, CreateDeploymentSchema, UpdateDeploymentSchema, DeploymentApprovalSchema, ListDeploymentMergeRequestsSchema, GetDraftNoteSchema, GetEnvironmentSchema, UpdateEnvironmentSchema, StopEnvironmentSchema, StopStaleEnvironmentsSchema, DeleteReviewAppEnvironmentsSchema, PipelineTriggerIdSchema, ListPipelineTriggersSchema, CreatePipelineTriggerSchema, UpdatePipelineTriggerSchema, TriggerPipelineSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetPipelineVariablesSchema, UpdatePipelineMetadataSchema, DeletePipelineSchema, PipelineReportSchema, WaitForPipelineSchema, WaitForPipelineJobSchema, PlayPipelineJobsSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListPipelineSchedulesSchema, GetPipelineScheduleSchema, ListPipelineSchedulePipelinesSchema, CreatePipelineScheduleSchema, UpdatePipelineScheduleSchema, DeletePipelineScheduleSchema, PlayPipelineScheduleSchema, TakeOwnershipPipelineScheduleSchema, GetPipelineScheduleVariableSchema, CreatePipelineScheduleVariableSchema, UpdatePipelineScheduleVariableSchema, DeletePipelineScheduleVariableSchema, ListGroupMembersSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWebhookSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, } from "../schemas.js";
+import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, ErasePipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateCommitStatusSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateGroupMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWebhookSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteBranchSchema, GetProtectedBranchSchema, ListProtectedBranchesSchema, ProtectBranchSchema, UnprotectBranchSchema, UpdateDefaultBranchSchema, DeleteDraftNoteSchema, DeleteGroupMilestoneSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWebhookSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadAttachmentRemoteSchema, DownloadJobArtifactsSchema, DownloadJobArtifactsRemoteSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, EditGroupMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, HealthCheckSchema, GetBranchSchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetFileBlameSchema, GetDeploymentSchema, CreateDeploymentSchema, UpdateDeploymentSchema, DeploymentApprovalSchema, ListDeploymentMergeRequestsSchema, GetDraftNoteSchema, GetEnvironmentSchema, UpdateEnvironmentSchema, StopEnvironmentSchema, StopStaleEnvironmentsSchema, DeleteReviewAppEnvironmentsSchema, PipelineTriggerIdSchema, ListPipelineTriggersSchema, CreatePipelineTriggerSchema, UpdatePipelineTriggerSchema, TriggerPipelineSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetGroupMilestoneSchema, GetGroupMilestoneIssuesSchema, GetGroupMilestoneMergeRequestsSchema, GetGroupMilestoneBurndownEventsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, PipelineJobControlSchema, GetPipelineSchema, GetPipelineVariablesSchema, UpdatePipelineMetadataSchema, DeletePipelineSchema, PipelineReportSchema, WaitForPipelineSchema, WaitForPipelineJobSchema, PlayPipelineJobsSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetUserSchema, WhoAmISchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListBranchesSchema, ListCommitsSchema, ListCommitStatusesSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupMilestonesSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestPipelinesSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListGroupMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListCiCatalogResourcesSchema, GetCiCatalogResourceSchema, ListPipelinesSchema, ListPipelineSchedulesSchema, GetPipelineScheduleSchema, ListPipelineSchedulePipelinesSchema, CreatePipelineScheduleSchema, UpdatePipelineScheduleSchema, DeletePipelineScheduleSchema, PlayPipelineScheduleSchema, TakeOwnershipPipelineScheduleSchema, GetPipelineScheduleVariableSchema, CreatePipelineScheduleVariableSchema, UpdatePipelineScheduleVariableSchema, DeletePipelineScheduleVariableSchema, ListGroupMembersSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MarkdownUploadRemoteSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, OrbitQuerySchema, OrbitSchemaSchema, OrbitStatusSchema, OrbitToolsSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateIssueDescriptionPatchSchema, UpdateLabelSchema, UpdateProjectSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWebhookSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, ListProjectVariablesSchema, GetProjectVariableSchema, CreateProjectVariableSchema, UpdateProjectVariableSchema, DeleteProjectVariableSchema, ListGroupVariablesSchema, GetGroupVariableSchema, CreateGroupVariableSchema, UpdateGroupVariableSchema, DeleteGroupVariableSchema, GetDependencyProxySettingsSchema, UpdateDependencyProxySettingsSchema, ListDependencyProxyBlobsSchema, PurgeDependencyProxyCacheSchema, ListProjectVulnerabilitiesSchema, GetVulnerabilitySchema, DismissVulnerabilitySchema, ConfirmVulnerabilitySchema, } from "../schemas.js";
 const IS_REMOTE = SSE || STREAMABLE_HTTP;
 // Define all available tools
 export const allTools = [
@@ -1223,6 +1223,27 @@ export const allTools = [
         description: "Confirm a vulnerability as a real finding requiring remediation",
         inputSchema: toJSONSchema(ConfirmVulnerabilitySchema),
     },
+    // --- GitLab Orbit (knowledge graph) tools ---
+    {
+        name: "orbit_query",
+        description: "Execute a GitLab Orbit graph query over the indexed SDLC knowledge graph",
+        inputSchema: toJSONSchema(OrbitQuerySchema),
+    },
+    {
+        name: "orbit_get_schema",
+        description: "Fetch the current GitLab Orbit graph schema (node and edge types)",
+        inputSchema: toJSONSchema(OrbitSchemaSchema),
+    },
+    {
+        name: "orbit_get_status",
+        description: "Check GitLab Orbit indexing status for the enabled scope",
+        inputSchema: toJSONSchema(OrbitStatusSchema),
+    },
+    {
+        name: "orbit_list_tools",
+        description: "List the MCP tool definitions exposed by GitLab Orbit",
+        inputSchema: toJSONSchema(OrbitToolsSchema),
+    },
     // --- Meta tool: Dynamic tool discovery ---
     {
         name: "discover_tools",
@@ -1373,6 +1394,10 @@ export const readOnlyTools = new Set([
     "list_dependency_proxy_blobs",
     "list_project_vulnerabilities",
     "get_vulnerability",
+    "orbit_query",
+    "orbit_get_schema",
+    "orbit_get_status",
+    "orbit_list_tools",
 ]);
 // Define which tools are destructive (data loss potential)
 export const destructiveTools = new Set([
@@ -1917,6 +1942,11 @@ export const TOOLSET_DEFINITIONS = [
             "confirm_vulnerability",
         ]),
     },
+    {
+        id: "orbit",
+        isDefault: false,
+        tools: new Set(["orbit_query", "orbit_get_schema", "orbit_get_status", "orbit_list_tools"]),
+    },
 ];
 // Derived lookup: tool name → toolset ID
 export const TOOLSET_BY_TOOL_NAME = new Map();

package/build/tools/tool-descriptions.js

@@ -8,6 +8,9 @@ const TOOL_GUIDANCE = {
     create_or_update_file: "Use this for a single repository file when you know whether the target path is new or already exists; use `push_files` for a multi-file commit. Optional `encoding` (`text` or `base64`) defaults to `GITLAB_REPO_FILE_ENCODING` so existing callers stay unchanged. The operation creates or updates remote content in a commit, requires repository write permission, and returns the commit result or a conflict/validation error.",
     push_files: "Use this to commit several file changes atomically; use `create_or_update_file` when only one path is involved. Each file defaults to action `create`; optional per-file `action` (create/update/delete/move) and `encoding` (text/base64) are additive. `GITLAB_PERMISSION_MODE=modify` rejects `delete` and `move`. The operation writes repository history on the selected branch, requires repository write permission, and returns the commit result or a validation, conflict, or protected-branch error.",
     create_issue: "Use this to open a new issue; use `update_issue` for an existing issue and `create_issue_note` to add discussion without changing issue fields. The operation creates remote project data, requires issue creation permission, and returns the new issue or a validation, permission, or duplicate-related error.",
+    list_issues: "Use this for issue management: list GitLab issues, optionally scoped with `project_id`. Use `get_issue` when the issue iid is already known and `my_issues` for issues assigned to the current user. It is read-only and paginated, requires issue read permission, and returns issue records or GitLab errors for invalid identifiers, missing resources, or rate limits.",
+    my_issues: "Use this for issue management: list issues assigned to the authenticated user. Use `list_issues` for project-wide or author-scoped listing and `get_issue` for one issue. It is read-only and paginated, requires authentication, and returns assigned issue records or permission/rate-limit errors.",
+    get_issue: "Use this for issue management: inspect one issue's fields; use `list_issues` or `my_issues` to discover issues first. It is read-only, requires issue read permission, and returns the issue or an error when the identifier is invalid, the issue is missing, or access is denied.",
     create_merge_request: "Use this to open a new merge request from an existing source branch to a target branch; use `update_merge_request` after it exists. The operation creates remote review state, requires project access, and returns the new merge request or a validation, permission, branch, or duplicate-related error.",
     fork_repository: "Use this to create a copy of an existing project in the current user's namespace or a permitted namespace; use `search_repositories` or `get_project` to inspect projects without copying them. The operation creates a new project, requires fork permission, and returns the forked project or a namespace/permission error.",
     create_branch: "Use this to create a branch from a branch, tag, or commit; use `get_branch` or `list_branches` to inspect branches and `protect_branch` to configure protection afterward. The operation changes remote repository state, requires branch-creation permission, and returns the new branch or a validation, missing-ref, protected-project, or already-exists error. `project_id` accepts a numeric ID or URL-encoded path, `branch` is the new name, and `ref` selects its starting revision.",
@@ -48,6 +51,10 @@ const TOOL_GUIDANCE = {
     delete_pipeline_schedule_variable: "Use this only after confirming the key with `get_pipeline_schedule` or `get_pipeline_schedule_variable`; use `update_pipeline_schedule_variable` to change a value without removing it. The operation permanently removes the variable from the schedule so later scheduled pipelines no longer receive it, requires the Developer, Maintainer, or Owner role and ownership of the schedule, and returns a confirmation or a missing-key or permission error.",
     stop_stale_environments: "Use this to stop eligible stale environments in a project. GitLab excludes protected environments, and this operation stops environments without deleting them. It requires the necessary project permission and returns the result or a validation, permission, or rate-limit error.",
     delete_review_app_environments: "Use this to clean up stopped review-app environments after verifying the scope. GitLab schedules deletion one week later rather than deleting environments immediately; `dry_run` defaults to `true`, so actual scheduling requires `dry_run: false`. It requires the necessary project permission and returns the cleanup result or a validation, permission, or rate-limit error.",
+    orbit_query: "Use this to answer cross-project relationship questions (blast radius, file-to-MR history, dependency fans) in one call instead of chaining list/get tools; use `orbit_get_schema` first when the node/edge types are unknown. It is read-only but each call consumes GitLab credits, requires Premium/Ultimate on an Orbit-enabled scope, and returns the graph result or a query/permission error.",
+    orbit_get_schema: "Use this to learn the node and edge types available for `orbit_query` before writing a query; use `orbit_get_status` when the concern is index freshness rather than shape. It is read-only and free of credit charges, and returns the current graph schema or a permission error.",
+    orbit_get_status: "Use this to check whether Orbit indexing has completed before trusting `orbit_query` results; results reflect the last index cycle, not real-time state. It is read-only and free of credit charges, and returns the indexing status or a permission error.",
+    orbit_list_tools: "Use this to see which MCP tool definitions Orbit itself exposes; use `orbit_query` to run graph queries directly. It is read-only and free of credit charges, and returns the tool definition list or a permission error.",
 };
 const PARAMETER_GUIDANCE = "When `project_id` or `group_id` is accepted, provide the numeric ID or complete URL-encoded path described by the schema; use required identifiers and pagination fields exactly as documented.";
 function ensureSentence(text) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.1.59",
+  "version": "2.1.61",
   "mcpName": "io.github.zereight/gitlab-mcp",
   "description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
   "keywords": [