@zereight/mcp-gitlab 2.1.6 → 2.1.7

package/README.md

@@ -8,13 +8,13 @@
 
 ## @zereight/mcp-gitlab
 
-A comprehensive GitLab MCP server for AI clients. Manage projects, merge requests, issues, pipelines, wiki, releases, milestones, and more through stdio, SSE, and Streamable HTTP.
+A comprehensive GitLab MCP server for AI clients. Manage projects, merge requests, issues, pipelines, wiki, releases, tags, milestones, and more through stdio, SSE, and Streamable HTTP.
 
 Supports PAT, OAuth, read-only mode, dynamic API URLs, and remote authorization for VS Code, Claude, Cursor, Copilot, and other MCP clients.
 
 ### Why use this GitLab MCP?
 
-- Broad GitLab coverage — projects, repository browsing, merge requests, issues, pipelines, wiki, releases, labels, milestones, and more
+- Broad GitLab coverage — projects, repository browsing, merge requests, issues, pipelines, wiki, releases, tags, labels, milestones, and more
 - Flexible auth — Personal Access Token, local OAuth2 browser flow, MCP OAuth proxy, and per-request remote authorization
 - Multiple transports — stdio for local clients, SSE for legacy clients, and Streamable HTTP for modern remote deployments
 - Client-friendly setup — examples for Claude Code, Codex, Antigravity, OpenCode, Copilot, Cline, Roo Code, Cursor, Kilo Code, and Amp Code
@@ -564,30 +564,35 @@ Register the skill directory in your AI client to get optimal tool usage guidanc
 115. `delete_release` - Delete a release from a GitLab project (does not delete the associated tag)
 116. `create_release_evidence` - Create release evidence for an existing release (GitLab Premium/Ultimate only)
 117. `download_release_asset` - Download a release asset file by direct asset path
-118. `get_users` - Get GitLab user details by usernames
-119. `list_events` - List all events for the currently authenticated user
-120. `get_project_events` - List all visible events for a specified project
-121. `upload_markdown` - Upload a file to a GitLab project for use in markdown content
-122. `download_attachment` - Download an uploaded file from a GitLab project by secret and filename
-123. `get_work_item` - Get a single work item with full details including status, hierarchy (parent/children), type, labels, assignees, and all widgets
-124. `list_work_items` - List work items in a project with filters (type, state, search, assignees, labels). Returns items with status and hierarchy info
-125. `create_work_item` - Create a new work item (issue, task, incident, test_case, epic, key_result, objective, requirement, ticket). Supports setting title, description, labels, assignees, weight, parent, health status, start/due dates, milestone, and confidentiality
-126. `update_work_item` - Update a work item. Can modify title, description, labels, assignees, weight, state, status, parent hierarchy, children, health status, start/due dates, milestone, confidentiality, linked items, and custom fields
-127. `convert_work_item_type` - Convert a work item to a different type (e.g. issue to task, task to incident)
-128. `list_work_item_statuses` - List available statuses for a work item type in a project. Requires GitLab Premium/Ultimate with configurable statuses
-129. `list_custom_field_definitions` - List available custom field definitions for a work item type in a project. Returns field names, types, and IDs needed for setting custom fields via update_work_item
-130. `move_work_item` - Move a work item (issue, task, etc.) to a different project. Uses GitLab GraphQL issueMove mutation
-131. `list_work_item_notes` - List notes and discussions on a work item. Returns threaded discussions with author, body, timestamps, and system/internal flags
-132. `create_work_item_note` - Add a note/comment to a work item. Supports Markdown, internal notes, and threaded replies
-133. `get_timeline_events` - List timeline events for an incident. Returns chronological events with notes, timestamps, and tags
-134. `create_timeline_event` - Create a timeline event on an incident. Supports tags: 'Start time', 'End time', 'Impact detected', 'Response initiated', 'Impact mitigated', 'Cause identified'
-135. `list_webhooks` - List all configured webhooks for a GitLab project or group. Provide either project_id or group_id
-136. `list_webhook_events` - List recent webhook events (past 7 days) for a project or group webhook. Use summary mode for overview, then get_webhook_event for full details
-137. `get_webhook_event` - Get full details of a specific webhook event by ID, including request/response payloads
-138. `search_code` - Search for code across all projects on the GitLab instance (requires advanced search or exact code search to be enabled)
-139. `search_project_code` - Search for code within a specific GitLab project (requires advanced search or exact code search to be enabled)
-140. `search_group_code` - Search for code within a specific GitLab group (requires advanced search or exact code search to be enabled)
-141. `execute_graphql` - Execute a GitLab GraphQL query
+118. `list_tags` - List repository tags with filtering and pagination support
+119. `get_tag` - Get details of a specific repository tag
+120. `create_tag` - Create a new tag in the repository
+121. `delete_tag` - Delete a tag from the repository
+122. `get_tag_signature` - Get the signature of a signed tag
+123. `get_users` - Get GitLab user details by usernames
+124. `list_events` - List all events for the currently authenticated user
+125. `get_project_events` - List all visible events for a specified project
+126. `upload_markdown` - Upload a file to a GitLab project for use in markdown content
+127. `download_attachment` - Download an uploaded file from a GitLab project by secret and filename
+128. `get_work_item` - Get a single work item with full details including status, hierarchy (parent/children), type, labels, assignees, and all widgets
+129. `list_work_items` - List work items in a project with filters (type, state, search, assignees, labels). Returns items with status and hierarchy info
+130. `create_work_item` - Create a new work item (issue, task, incident, test_case, epic, key_result, objective, requirement, ticket). Supports setting title, description, labels, assignees, weight, parent, health status, start/due dates, milestone, and confidentiality
+131. `update_work_item` - Update a work item. Can modify title, description, labels, assignees, weight, state, status, parent hierarchy, children, health status, start/due dates, milestone, confidentiality, linked items, and custom fields
+132. `convert_work_item_type` - Convert a work item to a different type (e.g. issue to task, task to incident)
+133. `list_work_item_statuses` - List available statuses for a work item type in a project. Requires GitLab Premium/Ultimate with configurable statuses
+134. `list_custom_field_definitions` - List available custom field definitions for a work item type in a project. Returns field names, types, and IDs needed for setting custom fields via update_work_item
+135. `move_work_item` - Move a work item (issue, task, etc.) to a different project. Uses GitLab GraphQL issueMove mutation
+136. `list_work_item_notes` - List notes and discussions on a work item. Returns threaded discussions with author, body, timestamps, and system/internal flags
+137. `create_work_item_note` - Add a note/comment to a work item. Supports Markdown, internal notes, and threaded replies
+138. `get_timeline_events` - List timeline events for an incident. Returns chronological events with notes, timestamps, and tags
+139. `create_timeline_event` - Create a timeline event on an incident. Supports tags: 'Start time', 'End time', 'Impact detected', 'Response initiated', 'Impact mitigated', 'Cause identified'
+140. `list_webhooks` - List all configured webhooks for a GitLab project or group. Provide either project_id or group_id
+141. `list_webhook_events` - List recent webhook events (past 7 days) for a project or group webhook. Use summary mode for overview, then get_webhook_event for full details
+142. `get_webhook_event` - Get full details of a specific webhook event by ID, including request/response payloads
+143. `search_code` - Search for code across all projects on the GitLab instance (requires advanced search or exact code search to be enabled)
+144. `search_project_code` - Search for code within a specific GitLab project (requires advanced search or exact code search to be enabled)
+145. `search_group_code` - Search for code within a specific GitLab group (requires advanced search or exact code search to be enabled)
+146. `execute_graphql` - Execute a GitLab GraphQL query
 <!-- TOOLS-END -->
 
 </details>

package/build/index.js

@@ -33,7 +33,7 @@ GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
 GitLabDraftNoteSchema, GitLabForkSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
-GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, } from "./schemas.js";
+GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, } from "./schemas.js";
 import { randomUUID } from "node:crypto";
 import { pino } from "pino";
 const logger = pino({
@@ -5700,6 +5700,92 @@ async function downloadReleaseAsset(projectId, tagName, directAssetPath) {
     await handleGitLabError(response);
     return await response.text();
 }
+/**
+ * List repository tags
+ *
+ * @param projectId The ID or URL-encoded path of the project
+ * @param options Optional parameters for filtering and pagination
+ * @returns Array of GitLab tags
+ */
+async function listTags(projectId, options = {}) {
+    const effectiveProjectId = getEffectiveProjectId(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/repository/tags`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            url.searchParams.append(key, value.toString());
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabTagSchema.array().parse(data);
+}
+/**
+ * Get a repository tag by name
+ *
+ * @param projectId The ID or URL-encoded path of the project
+ * @param tagName The name of the tag
+ * @returns GitLab tag
+ */
+async function getTag(projectId, tagName) {
+    const effectiveProjectId = getEffectiveProjectId(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/repository/tags/${encodeURIComponent(tagName)}`, {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabTagSchema.parse(data);
+}
+/**
+ * Create a new repository tag
+ *
+ * @param projectId The ID or URL-encoded path of the project
+ * @param options Options for creating the tag
+ * @returns Created GitLab tag
+ */
+async function createTag(projectId, options) {
+    const effectiveProjectId = getEffectiveProjectId(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/repository/tags`, {
+        ...getFetchConfig(),
+        method: "POST",
+        body: JSON.stringify(options),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabTagSchema.parse(data);
+}
+/**
+ * Delete a repository tag
+ *
+ * @param projectId The ID or URL-encoded path of the project
+ * @param tagName The name of the tag
+ */
+async function deleteTag(projectId, tagName) {
+    const effectiveProjectId = getEffectiveProjectId(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/repository/tags/${encodeURIComponent(tagName)}`, {
+        ...getFetchConfig(),
+        method: "DELETE",
+    });
+    await handleGitLabError(response);
+}
+/**
+ * Get the signature of a repository tag
+ *
+ * @param projectId The ID or URL-encoded path of the project
+ * @param tagName The name of the tag
+ * @returns Tag signature
+ */
+async function getTagSignature(projectId, tagName) {
+    const effectiveProjectId = getEffectiveProjectId(projectId);
+    const response = await fetch(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(effectiveProjectId)}/repository/tags/${encodeURIComponent(tagName)}/signature`, {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabTagSignatureSchema.parse(data);
+}
 // Request handlers are now registered inside createServer() factory function
 // to ensure each transport connection gets its own Server instance (GHSA-345p-7cg4-v4c7).
 async function handleToolCall(params) {
@@ -7191,6 +7277,48 @@ async function handleToolCall(params) {
                     content: [{ type: "text", text: assetContent }],
                 };
             }
+            case "list_tags": {
+                const args = ListTagsSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const tags = await listTags(project_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(tags, null, 2) }],
+                };
+            }
+            case "get_tag": {
+                const args = GetTagSchema.parse(params.arguments);
+                const tag = await getTag(args.project_id, args.tag_name);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(tag, null, 2) }],
+                };
+            }
+            case "create_tag": {
+                const args = CreateTagSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const tag = await createTag(project_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(tag, null, 2) }],
+                };
+            }
+            case "delete_tag": {
+                const args = DeleteTagSchema.parse(params.arguments);
+                await deleteTag(args.project_id, args.tag_name);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({ status: "success", message: `Tag '${args.tag_name}' deleted successfully` }, null, 2),
+                        },
+                    ],
+                };
+            }
+            case "get_tag_signature": {
+                const args = GetTagSignatureSchema.parse(params.arguments);
+                const signature = await getTagSignature(args.project_id, args.tag_name);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(signature, null, 2) }],
+                };
+            }
             case "list_webhooks": {
                 const args = ListWebhooksSchema.parse(params.arguments);
                 const webhooks = await listWebhooks(args);

package/build/schemas.js

@@ -2570,6 +2570,84 @@ export const DownloadReleaseAssetSchema = z.object({
         .string()
         .describe("Path to the release asset file as specified when creating or updating its link"),
 });
+// Tag schemas
+export const ListTagsSchema = z
+    .object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    order_by: z
+        .enum(["name", "updated", "version"])
+        .optional()
+        .describe("Return tags ordered by name, updated, or version. Default is updated."),
+    sort: z.enum(["asc", "desc"]).optional().describe("Sort direction"),
+    search: z
+        .string()
+        .optional()
+        .describe("Restrict on tag name. You can use ^term and term$ to find tags that begin and end with term. No other regular expressions are supported."),
+})
+    .merge(PaginationOptionsSchema);
+export const GetTagSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    tag_name: z.string().describe("The name of the tag"),
+});
+export const CreateTagSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    tag_name: z.string().describe("The name of the tag"),
+    ref: z.string().describe("Create tag using commit SHA, another tag name, or branch name"),
+    message: z.string().optional().describe("Create annotated tag with message"),
+});
+export const DeleteTagSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    tag_name: z.string().describe("The name of the tag"),
+});
+export const GetTagSignatureSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    tag_name: z.string().describe("The name of the tag"),
+});
+export const GitLabTagSchema = z.object({
+    name: z.string(),
+    message: z.string().nullable(),
+    target: z.string(),
+    commit: z.object({
+        id: z.string(),
+        short_id: z.string(),
+        title: z.string(),
+        created_at: z.string(),
+        parent_ids: z.array(z.string()),
+        message: z.string(),
+        author_name: z.string(),
+        author_email: z.string(),
+        authored_date: z.string(),
+        committer_name: z.string(),
+        committer_email: z.string(),
+        committed_date: z.string(),
+    }),
+    release: z
+        .object({
+        tag_name: z.string(),
+        description: z.string(),
+    })
+        .nullable(),
+    protected: z.boolean(),
+    created_at: z.string().nullable(),
+});
+export const GitLabTagSignatureSchema = z.object({
+    signature_type: z.literal("X509"),
+    verification_status: z.string(),
+    x509_certificate: z.object({
+        id: z.number(),
+        subject: z.string(),
+        subject_key_identifier: z.string(),
+        email: z.string().nullable().optional(),
+        serial_number: z.number(),
+        certificate_status: z.string(),
+        x509_issuer: z.object({
+            id: z.number(),
+            subject: z.string(),
+            subject_key_identifier: z.string(),
+            crl_url: z.string().nullable().optional(),
+        }),
+    }),
+});
 // --- Work item schemas (GraphQL-based) ---
 // Case-insensitive work item type enum (accepts "ISSUE", "Issue", "issue")
 const workItemTypeEnum = z.string().transform(v => v.toLowerCase()).pipe(z.enum(["issue", "task", "incident", "test_case", "epic", "key_result", "objective", "requirement", "ticket"]));

package/build/test/test-tags.js

@@ -0,0 +1,206 @@
+import { after, before, describe, test } from "node:test";
+import assert from "node:assert";
+import { spawn } from "child_process";
+import { MockGitLabServer, findMockServerPort } from "./utils/mock-gitlab-server.js";
+const MOCK_TOKEN = "glpat-mock-token-tags";
+const TEST_PROJECT_ID = "123";
+const TEST_TAG_NAME = "v1.0.0";
+function buildTag(overrides = {}) {
+    return {
+        name: TEST_TAG_NAME,
+        message: "Annotated release tag",
+        target: "abc123def4567890",
+        commit: {
+            id: "abc123def4567890",
+            short_id: "abc123de",
+            title: "Release v1.0.0",
+            created_at: "2026-03-13T10:00:00.000Z",
+            parent_ids: ["1111111111111111"],
+            message: "Release v1.0.0",
+            author_name: "Test User",
+            author_email: "test@example.com",
+            authored_date: "2026-03-13T09:55:00.000Z",
+            committer_name: "Test User",
+            committer_email: "test@example.com",
+            committed_date: "2026-03-13T10:00:00.000Z",
+        },
+        release: {
+            tag_name: TEST_TAG_NAME,
+            description: "Release notes",
+        },
+        protected: false,
+        created_at: "2026-03-13T10:00:00.000Z",
+        ...overrides,
+    };
+}
+async function callTool(toolName, args, env) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn("node", ["build/index.js"], {
+            stdio: ["pipe", "pipe", "pipe"],
+            env: {
+                ...process.env,
+                ...env,
+            },
+        });
+        let output = "";
+        let errorOutput = "";
+        proc.stdout?.on("data", (d) => (output += d));
+        proc.stderr?.on("data", (d) => (errorOutput += d));
+        proc.on("close", code => {
+            if (code !== 0) {
+                return reject(new Error(`Process exited with code ${code}: ${errorOutput}`));
+            }
+            const line = output.split("\n").find(l => l.startsWith("{"));
+            if (!line) {
+                return reject(new Error("No JSON output found"));
+            }
+            try {
+                const response = JSON.parse(line);
+                if (response.error) {
+                    reject(response.error);
+                    return;
+                }
+                const content = response.result?.content?.[0]?.text;
+                if (!content) {
+                    resolve(response.result);
+                    return;
+                }
+                try {
+                    resolve(JSON.parse(content));
+                }
+                catch {
+                    resolve(content);
+                }
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+        proc.stdin?.end(JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/call",
+            params: { name: toolName, arguments: args },
+        }) + "\n");
+    });
+}
+describe("tag tools", () => {
+    let mockGitLab;
+    let mockGitLabUrl;
+    before(async () => {
+        const mockPort = await findMockServerPort(20000, 50);
+        mockGitLab = new MockGitLabServer({
+            port: mockPort,
+            validTokens: [MOCK_TOKEN],
+        });
+        mockGitLab.addMockHandler("get", `/projects/${TEST_PROJECT_ID}/repository/tags`, (req, res) => {
+            assert.strictEqual(req.query.search, "^v");
+            assert.strictEqual(req.query.order_by, "version");
+            assert.strictEqual(req.query.sort, "desc");
+            assert.strictEqual(req.query.page, "2");
+            assert.strictEqual(req.query.per_page, "10");
+            res.json([buildTag()]);
+        });
+        mockGitLab.addMockHandler("get", `/projects/${TEST_PROJECT_ID}/repository/tags/${encodeURIComponent(TEST_TAG_NAME)}`, (_req, res) => {
+            res.json(buildTag());
+        });
+        mockGitLab.addMockHandler("post", `/projects/${TEST_PROJECT_ID}/repository/tags`, (req, res) => {
+            assert.deepStrictEqual(req.body, {
+                tag_name: TEST_TAG_NAME,
+                ref: "main",
+                message: "Release tag",
+            });
+            res.json(buildTag({ created_at: null }));
+        });
+        mockGitLab.addMockHandler("delete", `/projects/${TEST_PROJECT_ID}/repository/tags/${encodeURIComponent(TEST_TAG_NAME)}`, (_req, res) => {
+            res.status(204).send();
+        });
+        mockGitLab.addMockHandler("get", `/projects/${TEST_PROJECT_ID}/repository/tags/${encodeURIComponent(TEST_TAG_NAME)}/signature`, (_req, res) => {
+            res.json({
+                signature_type: "X509",
+                verification_status: "unverified",
+                x509_certificate: {
+                    id: 1,
+                    subject: "CN=Test User,O=Example",
+                    subject_key_identifier: "A1725E379E7B25B2",
+                    email: null,
+                    serial_number: 123456789,
+                    certificate_status: "good",
+                    x509_issuer: {
+                        id: 1,
+                        subject: "CN=Example CA,O=Example",
+                        subject_key_identifier: "C6411E6F5B9E2CFD",
+                        crl_url: null,
+                    },
+                },
+            });
+        });
+        await mockGitLab.start();
+        mockGitLabUrl = mockGitLab.getUrl();
+    });
+    after(async () => {
+        await mockGitLab.stop();
+    });
+    const env = () => ({
+        GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+        GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        GITLAB_TOOLSETS: "tags",
+    });
+    test("list_tags returns parsed tags with query filters", async () => {
+        const result = await callTool("list_tags", {
+            project_id: TEST_PROJECT_ID,
+            search: "^v",
+            order_by: "version",
+            sort: "desc",
+            page: 2,
+            per_page: 10,
+        }, env());
+        assert.ok(Array.isArray(result));
+        assert.strictEqual(result.length, 1);
+        assert.strictEqual(result[0].name, TEST_TAG_NAME);
+    });
+    test("get_tag returns a single tag", async () => {
+        const result = await callTool("get_tag", { project_id: TEST_PROJECT_ID, tag_name: TEST_TAG_NAME }, env());
+        assert.strictEqual(result.name, TEST_TAG_NAME);
+        assert.strictEqual(result.commit.short_id, "abc123de");
+    });
+    test("create_tag posts the expected payload", async () => {
+        const result = await callTool("create_tag", {
+            project_id: TEST_PROJECT_ID,
+            tag_name: TEST_TAG_NAME,
+            ref: "main",
+            message: "Release tag",
+        }, env());
+        assert.strictEqual(result.name, TEST_TAG_NAME);
+        assert.strictEqual(result.release.description, "Release notes");
+        assert.strictEqual(result.created_at, null);
+    });
+    test("delete_tag returns a success payload", async () => {
+        const result = await callTool("delete_tag", { project_id: TEST_PROJECT_ID, tag_name: TEST_TAG_NAME }, env());
+        assert.deepStrictEqual(result, {
+            status: "success",
+            message: `Tag '${TEST_TAG_NAME}' deleted successfully`,
+        });
+    });
+    test("get_tag_signature returns signature data", async () => {
+        const result = await callTool("get_tag_signature", { project_id: TEST_PROJECT_ID, tag_name: TEST_TAG_NAME }, env());
+        assert.deepStrictEqual(result, {
+            signature_type: "X509",
+            verification_status: "unverified",
+            x509_certificate: {
+                id: 1,
+                subject: "CN=Test User,O=Example",
+                subject_key_identifier: "A1725E379E7B25B2",
+                email: null,
+                serial_number: 123456789,
+                certificate_status: "good",
+                x509_issuer: {
+                    id: 1,
+                    subject: "CN=Example CA,O=Example",
+                    subject_key_identifier: "C6411E6F5B9E2CFD",
+                    crl_url: null,
+                },
+            },
+        });
+    });
+});

package/build/test/test-toolset-filtering.js

@@ -26,6 +26,7 @@ const TOOLSET_TOOL_COUNTS = {
     milestones: 9,
     wiki: 10,
     releases: 7,
+    tags: 5,
     users: 5,
     search: 3,
     workitems: 18,
@@ -40,7 +41,16 @@ const DEFAULT_TOOLSETS = [
     "labels",
     "users",
 ];
-const NON_DEFAULT_TOOLSETS = ["pipelines", "milestones", "wiki", "releases", "workitems", "webhooks", "search"];
+const NON_DEFAULT_TOOLSETS = [
+    "pipelines",
+    "milestones",
+    "wiki",
+    "releases",
+    "tags",
+    "workitems",
+    "webhooks",
+    "search",
+];
 // discover_tools meta-tool is always force-injected (Step 5.5)
 const DISCOVER_TOOLS_COUNT = 1;
 const DEFAULT_TOOL_COUNT = DEFAULT_TOOLSETS.reduce((sum, id) => sum + TOOLSET_TOOL_COUNTS[id], 0) + DISCOVER_TOOLS_COUNT;
@@ -57,6 +67,7 @@ const TOOLSET_SAMPLE_TOOLS = {
     milestones: ["list_milestones", "create_milestone", "get_milestone_burndown_events"],
     wiki: ["list_wiki_pages", "create_wiki_page", "list_group_wiki_pages", "create_group_wiki_page"],
     releases: ["list_releases", "create_release", "download_release_asset"],
+    tags: ["list_tags", "create_tag", "get_tag_signature"],
     users: ["get_users", "upload_markdown", "download_attachment"],
     search: ["search_code", "search_project_code", "search_group_code"],
     webhooks: ["list_webhooks", "list_webhook_events", "get_webhook_event"],

package/build/tools/registry.js

@@ -1,7 +1,7 @@
 import { zodToJsonSchema } from "zod-to-json-schema";
 import { toJSONSchema } from "../utils/schema.js";
 import { USE_GITLAB_WIKI, USE_MILESTONE, USE_PIPELINE, } from "../config.js";
-import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTimelineEventsSchema, GetUsersSchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListCommitsSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ListPipelinesSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, } from "../schemas.js";
+import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListCommitsSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ListPipelinesSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, } from "../schemas.js";
 // Define all available tools
 export const allTools = [
     {
@@ -681,6 +681,31 @@ export const allTools = [
         description: "Download a release asset file by direct asset path",
         inputSchema: toJSONSchema(DownloadReleaseAssetSchema),
     },
+    {
+        name: "list_tags",
+        description: "List repository tags for a project",
+        inputSchema: toJSONSchema(ListTagsSchema),
+    },
+    {
+        name: "get_tag",
+        description: "Get a repository tag by name",
+        inputSchema: toJSONSchema(GetTagSchema),
+    },
+    {
+        name: "create_tag",
+        description: "Create a new repository tag",
+        inputSchema: toJSONSchema(CreateTagSchema),
+    },
+    {
+        name: "delete_tag",
+        description: "Delete a repository tag",
+        inputSchema: toJSONSchema(DeleteTagSchema),
+    },
+    {
+        name: "get_tag_signature",
+        description: "Get the X.509 signature of a signed tag (404 if unsigned)",
+        inputSchema: toJSONSchema(GetTagSignatureSchema),
+    },
     // --- Work item tools (GraphQL-based) ---
     {
         name: "get_work_item",
@@ -892,6 +917,9 @@ export const readOnlyTools = new Set([
     "list_releases",
     "get_release",
     "download_release_asset",
+    "list_tags",
+    "get_tag",
+    "get_tag_signature",
     "get_merge_request_approval_state",
     "get_work_item",
     "list_work_items",
@@ -919,6 +947,7 @@ export const destructiveTools = new Set([
     "delete_group_wiki_page",
     "delete_milestone",
     "delete_release",
+    "delete_tag",
     "delete_merge_request_note",
     "delete_merge_request_discussion_note",
     "delete_draft_note",
@@ -1169,6 +1198,17 @@ export const TOOLSET_DEFINITIONS = [
             "download_release_asset",
         ]),
     },
+    {
+        id: "tags",
+        isDefault: false,
+        tools: new Set([
+            "list_tags",
+            "get_tag",
+            "create_tag",
+            "delete_tag",
+            "get_tag_signature",
+        ]),
+    },
     {
         id: "users",
         isDefault: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.1.6",
+  "version": "2.1.7",
   "mcpName": "io.github.zereight/gitlab-mcp",
   "description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
   "keywords": [
@@ -51,7 +51,7 @@
     "changelog": "auto-changelog -p",
     "test": "npm run test:all",
     "test:all": "npm run build && npm run test:mock && npm run test:live",
-    "test:mock": "node --import tsx/esm --test test/remote-auth-simple-test.ts && node --import tsx/esm --test test/mcp-oauth-tests.ts && tsx test/oauth-tests.ts && tsx test/test-list-merge-requests.ts && tsx test/test-list-project-members.ts && tsx test/test-download-attachment.ts && node --import tsx/esm --test test/test-job-artifacts.ts && node --import tsx/esm --test test/test-deployment-tools.ts && node --import tsx/esm --test test/test-merge-request-approval-state-tools.ts && node --import tsx/esm --test test/test-search-code.ts && node --import tsx/esm --test test/test-toolset-filtering.ts && node --import tsx/esm --test test/test-auth-retry.ts && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts",
+    "test:mock": "node --import tsx/esm --test test/remote-auth-simple-test.ts && node --import tsx/esm --test test/mcp-oauth-tests.ts && tsx test/oauth-tests.ts && tsx test/test-list-merge-requests.ts && tsx test/test-list-project-members.ts && tsx test/test-download-attachment.ts && node --import tsx/esm --test test/test-job-artifacts.ts && node --import tsx/esm --test test/test-deployment-tools.ts && node --import tsx/esm --test test/test-merge-request-approval-state-tools.ts && node --import tsx/esm --test test/test-search-code.ts && node --import tsx/esm --test test/test-tags.ts && node --import tsx/esm --test test/test-toolset-filtering.ts && node --import tsx/esm --test test/test-auth-retry.ts && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts",
     "test:stateless": "npm run build && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts",
     "test:mcp-oauth": "npm run build && node --import tsx/esm --test test/mcp-oauth-tests.ts",
     "test:live": "node test/validate-api.js",