@zereight/mcp-gitlab 2.1.7 → 2.1.8

package/README.ko.md

@@ -155,6 +155,21 @@ docker run -i --rm \
 
 MCP OAuth 사양을 지원하는 원격 MCP 클라이언트(예: Claude.ai)용입니다. 서버는 완전한 OAuth 2.0 인증 서버로 동작합니다. 인증되지 않은 요청은 `401 + WWW-Authenticate` 응답을 받고, 클라이언트 측 OAuth 브라우저 플로우가 자동으로 시작됩니다.
 
+OpenCode, MCPJam, Claude.ai 같은 원격 MCP 클라이언트는 인증 중에 자체 callback URL을 보낼 수 있습니다. 모든 클라이언트 callback URL을 GitLab에 등록할 수 없다면 `GITLAB_OAUTH_CALLBACK_PROXY=true`를 켜세요. 콜백 프록시 모드에서는 GitLab에 `{MCP_SERVER_URL}/callback` 하나만 Redirect URI로 등록하면 됩니다.
+
+`GITLAB_OAUTH_REDIRECT_URI`는 로컬 OAuth(`GITLAB_USE_OAUTH`) 전용입니다. 원격 MCP OAuth 클라이언트 callback URL을 덮어쓰지 않으며, 원격 `Unregistered redirect_uri` 오류 해결용으로 사용하면 안 됩니다.
+
+이 변수가 존재하는 이유는 로컬 OAuth 플로우가 MCP 서버와 같은 머신에서 브라우저를 열고, `http://127.0.0.1:8888/callback` 같은 로컬 HTTP 서버로 callback을 받기 때문입니다.
+
+원격 MCP OAuth는 다릅니다. `GITLAB_MCP_OAUTH=true` 모드에서는 MCP 클라이언트가 `/authorize` 요청 중에 자체 callback URL을 제공합니다. `GITLAB_OAUTH_REDIRECT_URI`는 그 클라이언트 제공 URL을 대체하지 않습니다.
+
+| 모드 | 활성화 변수 | Callback 변수 | GitLab Redirect URI |
+| --- | --- | --- | --- |
+| 로컬 OAuth | `GITLAB_USE_OAUTH=true` | `GITLAB_OAUTH_REDIRECT_URI` | `http://127.0.0.1:8888/callback` 또는 로컬 callback |
+| 원격 MCP OAuth | `GITLAB_MCP_OAUTH=true` | `GITLAB_OAUTH_CALLBACK_PROXY=true` | `{MCP_SERVER_URL}/callback` |
+
+MCP 서버가 직접 로컬 브라우저 callback을 받을 때만 `GITLAB_OAUTH_REDIRECT_URI`를 사용하세요. 원격 MCP 클라이언트가 callback URL을 소유하는 경우에는 `GITLAB_OAUTH_CALLBACK_PROXY=true`를 사용하세요.
+
 **동작 방식**: 공개 HTTPS URL을 가진 위치에 이 MCP 서버를 배포합니다. MCP 클라이언트는 `{MCP_SERVER_URL}/mcp`로 연결합니다. 서버는 OAuth 2.0 플로우를 처리하고 GitLab과 자격 증명을 교환합니다.
 
 **사전 준비:**
@@ -173,6 +188,16 @@ MCP OAuth 사양을 지원하는 원격 MCP 클라이언트(예: Claude.ai)용
 | `GITLAB_OAUTH_CALLBACK_PROXY` | 선택 | MCP 서버의 고정 `/callback` URL을 사용하려면 `true` |
 | `GITLAB_OAUTH_SCOPES` | 선택 | 쉼표로 구분된 scope 목록(기본값: `api,read_api,read_user`) |
 
+> **`Unregistered redirect_uri` 문제 해결**
+>
+> 브라우저 URL의 `redirect_uri`를 확인하세요. 값이 `http://127.0.0.1:xxxxx/.../callback` 같은 클라이언트 callback을 가리키면 다음 설정을 켜세요.
+>
+> ```env
+> GITLAB_OAUTH_CALLBACK_PROXY=true
+> ```
+>
+> 원격 MCP OAuth 문제를 `GITLAB_OAUTH_REDIRECT_URI` 변경으로 해결하려고 하지 마세요. 이 변수는 로컬 OAuth(`GITLAB_USE_OAUTH`) 전용입니다.
+
 ```shell
 docker run -i --rm \
   -e HOST=0.0.0.0 \

package/README.md

@@ -33,6 +33,7 @@ Quick start: choose either Personal Access Token or OAuth2 setup below and use `
 - [OAuth2 Authentication Setup Guide](./docs/oauth-setup.md)
 - [Environment Variables Reference](./docs/environment-variables.md)
 - [Stateless Mode — Multi-Pod HPA](./docs/stateless-mode.md)
+- [Custom Agents and Multiple PAT Setup](./docs/custom-agent-multiple-pat.md)
 
 ## Usage
 
@@ -159,6 +160,32 @@ The server acts as a full OAuth 2.0 authorization server — unauthenticated req
 receive a `401 + WWW-Authenticate` response, which triggers the OAuth browser flow
 automatically on the client side.
 
+Remote MCP clients such as OpenCode, MCPJam, and Claude.ai can send their own
+callback URL during authorization. If you cannot register every client callback
+URL in GitLab, enable `GITLAB_OAUTH_CALLBACK_PROXY=true`. With callback proxy
+mode, GitLab only needs one registered redirect URI: `{MCP_SERVER_URL}/callback`.
+
+`GITLAB_OAUTH_REDIRECT_URI` is for local OAuth (`GITLAB_USE_OAUTH`) only. It does
+not override remote MCP OAuth client callback URLs and should not be used to fix
+remote `Unregistered redirect_uri` errors.
+
+This variable exists because the local OAuth flow starts a browser on the same
+machine as the MCP server and listens for the callback on a local HTTP server,
+for example `http://127.0.0.1:8888/callback`.
+
+Remote MCP OAuth is different. In `GITLAB_MCP_OAUTH=true` mode, the MCP client
+provides its own callback URL during `/authorize`. `GITLAB_OAUTH_REDIRECT_URI`
+does not replace that client-provided URL.
+
+| Mode | Enable with | Callback variable | GitLab redirect URI |
+| --- | --- | --- | --- |
+| Local OAuth | `GITLAB_USE_OAUTH=true` | `GITLAB_OAUTH_REDIRECT_URI` | `http://127.0.0.1:8888/callback` or your local callback |
+| Remote MCP OAuth | `GITLAB_MCP_OAUTH=true` | `GITLAB_OAUTH_CALLBACK_PROXY=true` | `{MCP_SERVER_URL}/callback` |
+
+Use `GITLAB_OAUTH_REDIRECT_URI` only when the MCP server itself owns the local
+browser callback. Use `GITLAB_OAUTH_CALLBACK_PROXY=true` when a remote MCP client
+owns the callback URL.
+
 **How it works**: You deploy this MCP server somewhere with a public HTTPS URL. MCP
 clients connect to `{MCP_SERVER_URL}/mcp`. The server handles the OAuth 2.0 flow,
 exchanging credentials with GitLab on behalf of the client.
@@ -179,6 +206,18 @@ exchanging credentials with GitLab on behalf of the client.
 | `GITLAB_OAUTH_CALLBACK_PROXY` | optional | Set to `true` to use the MCP server's fixed `/callback` URL |
 | `GITLAB_OAUTH_SCOPES` | optional | Comma-separated scopes (default: `api,read_api,read_user`) |
 
+> **Troubleshooting `Unregistered redirect_uri`**
+>
+> Check the `redirect_uri` in the browser URL. If it points to a client callback
+> such as `http://127.0.0.1:xxxxx/.../callback`, enable:
+>
+> ```env
+> GITLAB_OAUTH_CALLBACK_PROXY=true
+> ```
+>
+> Do not fix remote MCP OAuth by changing `GITLAB_OAUTH_REDIRECT_URI`. That
+> variable is for local OAuth (`GITLAB_USE_OAUTH`) only.
+
 ```shell
 docker run -i --rm \
   -e HOST=0.0.0.0 \
@@ -497,102 +536,108 @@ Register the skill directory in your AI client to get optimal tool usage guidanc
 48. `get_issue` - Get details of a specific issue in a GitLab project
 49. `update_issue` - Update an issue in a GitLab project
 50. `delete_issue` - Delete an issue from a GitLab project
-51. `list_issue_links` - List all issue links for a specific issue
-52. `list_issue_discussions` - List discussions for an issue in a GitLab project
-53. `get_issue_link` - Get a specific issue link
-54. `create_issue_link` - Create an issue link between two issues
-55. `delete_issue_link` - Delete an issue link
-56. `list_namespaces` - List all namespaces available to the current user
-57. `get_namespace` - Get details of a namespace by ID or path
-58. `verify_namespace` - Verify if a namespace path exists
-59. `get_project` - Get details of a specific project
-60. `list_projects` - List projects accessible by the current user
-61. `list_project_members` - List members of a GitLab project
-62. `list_group_projects` - List projects in a GitLab group with filtering options
-63. `list_group_iterations` - List group iterations with filtering options
-64. `list_labels` - List labels for a project
-65. `get_label` - Get a single label from a project
-66. `create_label` - Create a new label in a project
-67. `update_label` - Update an existing label in a project
-68. `delete_label` - Delete a label from a project
-69. `list_pipelines` - List pipelines in a GitLab project with filtering options
-70. `get_pipeline` - Get details of a specific pipeline in a GitLab project
-71. `list_pipeline_jobs` - List all jobs in a specific pipeline
-72. `list_pipeline_trigger_jobs` - List all trigger jobs (bridges) in a specific pipeline that trigger downstream pipelines
-73. `get_pipeline_job` - Get details of a GitLab pipeline job number
-74. `get_pipeline_job_output` - Get the output/trace of a GitLab pipeline job with optional pagination to limit context window usage
-75. `create_pipeline` - Create a new pipeline for a branch or tag
-76. `retry_pipeline` - Retry a failed or canceled pipeline
-77. `cancel_pipeline` - Cancel a running pipeline
-78. `play_pipeline_job` - Run a manual pipeline job
-79. `retry_pipeline_job` - Retry a failed or canceled pipeline job
-80. `cancel_pipeline_job` - Cancel a running pipeline job
-81. `list_deployments` - List deployments in a GitLab project with filtering options
-82. `get_deployment` - Get details of a specific deployment in a GitLab project
-83. `list_environments` - List environments in a GitLab project
-84. `get_environment` - Get details of a specific environment in a GitLab project
-85. `list_job_artifacts` - List artifact files in a job's artifacts archive. Returns file names, paths, types, and sizes
-86. `download_job_artifacts` - Download the entire artifact archive (zip) for a job to a local path. Returns the saved file path
-87. `get_job_artifact_file` - Get the content of a single file from a job's artifacts by its path within the archive
-88. `list_milestones` - List milestones in a GitLab project with filtering options
-89. `get_milestone` - Get details of a specific milestone
-90. `create_milestone` - Create a new milestone in a GitLab project
-91. `edit_milestone` - Edit an existing milestone in a GitLab project
-92. `delete_milestone` - Delete a milestone from a GitLab project
-93. `get_milestone_issue` - Get issues associated with a specific milestone
-94. `get_milestone_merge_requests` - Get merge requests associated with a specific milestone
-95. `promote_milestone` - Promote a milestone to the next stage
-96. `get_milestone_burndown_events` - Get burndown events for a specific milestone
-97. `list_wiki_pages` - List wiki pages in a GitLab project
-98. `get_wiki_page` - Get details of a specific wiki page
-99. `create_wiki_page` - Create a new wiki page in a GitLab project
-100. `update_wiki_page` - Update an existing wiki page in a GitLab project
-101. `delete_wiki_page` - Delete a wiki page from a GitLab project
-102. `list_group_wiki_pages` - List wiki pages in a GitLab group
-103. `get_group_wiki_page` - Get details of a specific group wiki page
-104. `create_group_wiki_page` - Create a new wiki page in a GitLab group
-105. `update_group_wiki_page` - Update an existing wiki page in a GitLab group
-106. `delete_group_wiki_page` - Delete a wiki page from a GitLab group
-107. `get_repository_tree` - Get the repository tree for a GitLab project (list files and directories)
-108. `list_commits` - List repository commits with filtering options
-109. `get_commit` - Get details of a specific commit
-110. `get_commit_diff` - Get changes/diffs of a specific commit
-111. `list_releases` - List all releases for a project
-112. `get_release` - Get a release by tag name
-113. `create_release` - Create a new release in a GitLab project
-114. `update_release` - Update an existing release in a GitLab project
-115. `delete_release` - Delete a release from a GitLab project (does not delete the associated tag)
-116. `create_release_evidence` - Create release evidence for an existing release (GitLab Premium/Ultimate only)
-117. `download_release_asset` - Download a release asset file by direct asset path
-118. `list_tags` - List repository tags with filtering and pagination support
-119. `get_tag` - Get details of a specific repository tag
-120. `create_tag` - Create a new tag in the repository
-121. `delete_tag` - Delete a tag from the repository
-122. `get_tag_signature` - Get the signature of a signed tag
-123. `get_users` - Get GitLab user details by usernames
-124. `list_events` - List all events for the currently authenticated user
-125. `get_project_events` - List all visible events for a specified project
-126. `upload_markdown` - Upload a file to a GitLab project for use in markdown content
-127. `download_attachment` - Download an uploaded file from a GitLab project by secret and filename
-128. `get_work_item` - Get a single work item with full details including status, hierarchy (parent/children), type, labels, assignees, and all widgets
-129. `list_work_items` - List work items in a project with filters (type, state, search, assignees, labels). Returns items with status and hierarchy info
-130. `create_work_item` - Create a new work item (issue, task, incident, test_case, epic, key_result, objective, requirement, ticket). Supports setting title, description, labels, assignees, weight, parent, health status, start/due dates, milestone, and confidentiality
-131. `update_work_item` - Update a work item. Can modify title, description, labels, assignees, weight, state, status, parent hierarchy, children, health status, start/due dates, milestone, confidentiality, linked items, and custom fields
-132. `convert_work_item_type` - Convert a work item to a different type (e.g. issue to task, task to incident)
-133. `list_work_item_statuses` - List available statuses for a work item type in a project. Requires GitLab Premium/Ultimate with configurable statuses
-134. `list_custom_field_definitions` - List available custom field definitions for a work item type in a project. Returns field names, types, and IDs needed for setting custom fields via update_work_item
-135. `move_work_item` - Move a work item (issue, task, etc.) to a different project. Uses GitLab GraphQL issueMove mutation
-136. `list_work_item_notes` - List notes and discussions on a work item. Returns threaded discussions with author, body, timestamps, and system/internal flags
-137. `create_work_item_note` - Add a note/comment to a work item. Supports Markdown, internal notes, and threaded replies
-138. `get_timeline_events` - List timeline events for an incident. Returns chronological events with notes, timestamps, and tags
-139. `create_timeline_event` - Create a timeline event on an incident. Supports tags: 'Start time', 'End time', 'Impact detected', 'Response initiated', 'Impact mitigated', 'Cause identified'
-140. `list_webhooks` - List all configured webhooks for a GitLab project or group. Provide either project_id or group_id
-141. `list_webhook_events` - List recent webhook events (past 7 days) for a project or group webhook. Use summary mode for overview, then get_webhook_event for full details
-142. `get_webhook_event` - Get full details of a specific webhook event by ID, including request/response payloads
-143. `search_code` - Search for code across all projects on the GitLab instance (requires advanced search or exact code search to be enabled)
-144. `search_project_code` - Search for code within a specific GitLab project (requires advanced search or exact code search to be enabled)
-145. `search_group_code` - Search for code within a specific GitLab group (requires advanced search or exact code search to be enabled)
-146. `execute_graphql` - Execute a GitLab GraphQL query
+51. `list_todos` - List GitLab to-do items for the current user
+52. `mark_todo_done` - Mark a GitLab to-do item as done
+53. `mark_all_todos_done` - Mark all pending GitLab to-do items as done for the current user
+54. `list_issue_links` - List all issue links for a specific issue
+55. `list_issue_discussions` - List discussions for an issue in a GitLab project
+56. `get_issue_link` - Get a specific issue link
+57. `create_issue_link` - Create an issue link between two issues
+58. `delete_issue_link` - Delete an issue link
+59. `list_namespaces` - List all namespaces available to the current user
+60. `get_namespace` - Get details of a namespace by ID or path
+61. `verify_namespace` - Verify if a namespace path exists
+62. `get_project` - Get details of a specific project
+63. `list_projects` - List projects accessible by the current user
+64. `list_project_members` - List members of a GitLab project
+65. `list_group_projects` - List projects in a GitLab group with filtering options
+66. `list_group_iterations` - List group iterations with filtering options
+67. `list_labels` - List labels for a project
+68. `get_label` - Get a single label from a project
+69. `create_label` - Create a new label in a project
+70. `update_label` - Update an existing label in a project
+71. `delete_label` - Delete a label from a project
+72. `list_pipelines` - List pipelines in a GitLab project with filtering options
+73. `get_pipeline` - Get details of a specific pipeline in a GitLab project
+74. `list_pipeline_jobs` - List all jobs in a specific pipeline
+75. `list_pipeline_trigger_jobs` - List all trigger jobs (bridges) in a specific pipeline that trigger downstream pipelines
+76. `get_pipeline_job` - Get details of a GitLab pipeline job number
+77. `get_pipeline_job_output` - Get the output/trace of a GitLab pipeline job with optional pagination to limit context window usage
+78. `validate_ci_lint` - Validate provided GitLab CI/CD YAML content for a project
+79. `validate_project_ci_lint` - Validate an existing `.gitlab-ci.yml` configuration for a project
+80. `create_pipeline` - Create a new pipeline for a branch or tag
+81. `retry_pipeline` - Retry a failed or canceled pipeline
+82. `cancel_pipeline` - Cancel a running pipeline
+83. `play_pipeline_job` - Run a manual pipeline job
+84. `retry_pipeline_job` - Retry a failed or canceled pipeline job
+85. `cancel_pipeline_job` - Cancel a running pipeline job
+86. `list_deployments` - List deployments in a GitLab project with filtering options
+87. `get_deployment` - Get details of a specific deployment in a GitLab project
+88. `list_environments` - List environments in a GitLab project
+89. `get_environment` - Get details of a specific environment in a GitLab project
+90. `list_job_artifacts` - List artifact files in a job's artifacts archive. Returns file names, paths, types, and sizes
+91. `download_job_artifacts` - Download the entire artifact archive (zip) for a job to a local path. Returns the saved file path
+92. `get_job_artifact_file` - Get the content of a single file from a job's artifacts by its path within the archive
+93. `list_milestones` - List milestones in a GitLab project with filtering options
+94. `get_milestone` - Get details of a specific milestone
+95. `create_milestone` - Create a new milestone in a GitLab project
+96. `edit_milestone` - Edit an existing milestone in a GitLab project
+97. `delete_milestone` - Delete a milestone from a GitLab project
+98. `get_milestone_issue` - Get issues associated with a specific milestone
+99. `get_milestone_merge_requests` - Get merge requests associated with a specific milestone
+100. `promote_milestone` - Promote a milestone to the next stage
+101. `get_milestone_burndown_events` - Get burndown events for a specific milestone
+102. `list_wiki_pages` - List wiki pages in a GitLab project
+103. `get_wiki_page` - Get details of a specific wiki page
+104. `create_wiki_page` - Create a new wiki page in a GitLab project
+105. `update_wiki_page` - Update an existing wiki page in a GitLab project
+106. `delete_wiki_page` - Delete a wiki page from a GitLab project
+107. `list_group_wiki_pages` - List wiki pages in a GitLab group
+108. `get_group_wiki_page` - Get details of a specific group wiki page
+109. `create_group_wiki_page` - Create a new wiki page in a GitLab group
+110. `update_group_wiki_page` - Update an existing wiki page in a GitLab group
+111. `delete_group_wiki_page` - Delete a wiki page from a GitLab group
+112. `get_repository_tree` - Get the repository tree for a GitLab project (list files and directories)
+113. `list_commits` - List repository commits with filtering options
+114. `get_commit` - Get details of a specific commit
+115. `get_commit_diff` - Get changes/diffs of a specific commit
+116. `list_releases` - List all releases for a project
+117. `get_release` - Get a release by tag name
+118. `create_release` - Create a new release in a GitLab project
+119. `update_release` - Update an existing release in a GitLab project
+120. `delete_release` - Delete a release from a GitLab project (does not delete the associated tag)
+121. `create_release_evidence` - Create release evidence for an existing release (GitLab Premium/Ultimate only)
+122. `download_release_asset` - Download a release asset file by direct asset path
+123. `list_tags` - List repository tags with filtering and pagination support
+124. `get_tag` - Get details of a specific repository tag
+125. `create_tag` - Create a new tag in the repository
+126. `delete_tag` - Delete a tag from the repository
+127. `get_tag_signature` - Get the signature of a signed tag
+128. `get_users` - Get GitLab user details by usernames
+129. `list_events` - List all events for the currently authenticated user
+130. `get_project_events` - List all visible events for a specified project
+131. `upload_markdown` - Upload a file to a GitLab project for use in markdown content
+132. `download_attachment` - Download an uploaded file from a GitLab project by secret and filename
+133. `get_work_item` - Get a single work item with full details including status, hierarchy (parent/children), type, labels, assignees, and all widgets
+134. `list_work_items` - List work items in a project with filters (type, state, search, assignees, labels). Returns items with status and hierarchy info
+135. `create_work_item` - Create a new work item (issue, task, incident, test_case, epic, key_result, objective, requirement, ticket). Supports setting title, description, labels, assignees, weight, parent, health status, start/due dates, milestone, and confidentiality
+136. `update_work_item` - Update a work item. Can modify title, description, labels, assignees, weight, state, status, parent hierarchy, children, health status, start/due dates, milestone, confidentiality, linked items, and custom fields
+137. `convert_work_item_type` - Convert a work item to a different type (e.g. issue to task, task to incident)
+138. `list_work_item_statuses` - List available statuses for a work item type in a project. Requires GitLab Premium/Ultimate with configurable statuses
+139. `list_custom_field_definitions` - List available custom field definitions for a work item type in a project. Returns field names, types, and IDs needed for setting custom fields via update_work_item
+140. `move_work_item` - Move a work item (issue, task, etc.) to a different project. Uses GitLab GraphQL issueMove mutation
+141. `list_work_item_notes` - List notes and discussions on a work item. Returns threaded discussions with author, body, timestamps, and system/internal flags
+142. `create_work_item_note` - Add a note/comment to a work item. Supports Markdown, internal notes, and threaded replies
+143. `get_timeline_events` - List timeline events for an incident. Returns chronological events with notes, timestamps, and tags
+144. `create_timeline_event` - Create a timeline event on an incident. Supports tags: 'Start time', 'End time', 'Impact detected', 'Response initiated', 'Impact mitigated', 'Cause identified'
+145. `list_webhooks` - List all configured webhooks for a GitLab project or group. Provide either project_id or group_id
+146. `list_webhook_events` - List recent webhook events (past 7 days) for a project or group webhook. Use summary mode for overview, then get_webhook_event for full details
+147. `get_webhook_event` - Get full details of a specific webhook event by ID, including request/response payloads
+148. `search_code` - Search for code across all projects on the GitLab instance (requires advanced search or exact code search to be enabled)
+149. `search_project_code` - Search for code within a specific GitLab project (requires advanced search or exact code search to be enabled)
+150. `search_group_code` - Search for code within a specific GitLab group (requires advanced search or exact code search to be enabled)
+151. `execute_graphql` - Execute a GitLab GraphQL query
+
 <!-- TOOLS-END -->
 
 </details>

package/README.zh-CN.md

@@ -155,6 +155,21 @@ docker run -i --rm \
 
 适用于支持 MCP OAuth 规范的远程 MCP 客户端（例如 Claude.ai）。服务器会作为完整 OAuth 2.0 授权服务器运行。未认证请求会收到 `401 + WWW-Authenticate` 响应，从而触发客户端侧 OAuth 浏览器流程。
 
+OpenCode、MCPJam、Claude.ai 等远程 MCP 客户端可能会在授权时发送自己的 callback URL。如果你无法在 GitLab 中注册每个客户端 callback URL，请启用 `GITLAB_OAUTH_CALLBACK_PROXY=true`。启用回调代理模式后，GitLab 只需要注册一个 Redirect URI：`{MCP_SERVER_URL}/callback`。
+
+`GITLAB_OAUTH_REDIRECT_URI` 仅用于本地 OAuth（`GITLAB_USE_OAUTH`）。它不会覆盖远程 MCP OAuth 客户端 callback URL，也不应用来修复远程 `Unregistered redirect_uri` 错误。
+
+这个变量存在是因为本地 OAuth 流程会在与 MCP 服务器相同的机器上打开浏览器，并通过本地 HTTP 服务器接收 callback，例如 `http://127.0.0.1:8888/callback`。
+
+远程 MCP OAuth 不同。在 `GITLAB_MCP_OAUTH=true` 模式下，MCP 客户端会在 `/authorize` 请求中提供自己的 callback URL。`GITLAB_OAUTH_REDIRECT_URI` 不会替换这个客户端提供的 URL。
+
+| 模式 | 启用方式 | Callback 变量 | GitLab Redirect URI |
+| --- | --- | --- | --- |
+| 本地 OAuth | `GITLAB_USE_OAUTH=true` | `GITLAB_OAUTH_REDIRECT_URI` | `http://127.0.0.1:8888/callback` 或你的本地 callback |
+| 远程 MCP OAuth | `GITLAB_MCP_OAUTH=true` | `GITLAB_OAUTH_CALLBACK_PROXY=true` | `{MCP_SERVER_URL}/callback` |
+
+只有当 MCP 服务器自己接收本地浏览器 callback 时，才使用 `GITLAB_OAUTH_REDIRECT_URI`。当远程 MCP 客户端拥有 callback URL 时，请使用 `GITLAB_OAUTH_CALLBACK_PROXY=true`。
+
 **工作方式**：将此 MCP 服务器部署到拥有公开 HTTPS URL 的位置。MCP 客户端连接到 `{MCP_SERVER_URL}/mcp`。服务器处理 OAuth 2.0 流程，并代表客户端与 GitLab 交换凭据。
 
 **前置条件：**
@@ -173,6 +188,16 @@ docker run -i --rm \
 | `GITLAB_OAUTH_CALLBACK_PROXY` | 可选 | 设置为 `true` 时使用 MCP 服务器固定的 `/callback` URL |
 | `GITLAB_OAUTH_SCOPES` | 可选 | 逗号分隔的 scope（默认：`api,read_api,read_user`） |
 
+> **排查 `Unregistered redirect_uri`**
+>
+> 检查浏览器 URL 中的 `redirect_uri`。如果它指向客户端 callback，例如 `http://127.0.0.1:xxxxx/.../callback`，请启用：
+>
+> ```env
+> GITLAB_OAUTH_CALLBACK_PROXY=true
+> ```
+>
+> 不要通过修改 `GITLAB_OAUTH_REDIRECT_URI` 来修复远程 MCP OAuth。该变量仅用于本地 OAuth（`GITLAB_USE_OAUTH`）。
+
 ```shell
 docker run -i --rm \
   -e HOST=0.0.0.0 \

package/build/index.js

@@ -25,15 +25,13 @@ import { requireBearerAuth } from "@modelcontextprotocol/sdk/server/auth/middlew
 import { GitLabClientPool } from "./gitlab-client-pool.js";
 import { allTools, readOnlyTools, destructiveTools, parseEnabledToolsets, parseIndividualTools, buildFeatureFlagOverrides, isToolInEnabledToolset, TOOLSET_DEFINITIONS, ALL_TOOLSET_IDS, } from "./tools/registry.js";
 import { BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, // Added
-CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateRepositorySchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetDeploymentSchema, GetEnvironmentSchema, GetNamespaceSchema, 
-// pipeline job schemas
-GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
+CreateMergeRequestNoteSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, CreateMergeRequestNoteEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateRepositorySchema, CreateWikiPageSchema, CreateGroupWikiPageSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteProjectMilestoneSchema, DeleteWikiPageSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, EditProjectMilestoneSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDraftNoteSchema, GetFileContentsSchema, GetIssueLinkSchema, GetIssueSchema, GetLabelSchema, GetMergeRequestDiffsSchema, GetMergeRequestSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetDeploymentSchema, GetEnvironmentSchema, GetNamespaceSchema, GitLabCiLintResultSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectMilestoneSchema, GetProjectSchema, GetRepositoryTreeSchema, GetUsersSchema, GetWikiPageSchema, GitLabCommitSchema, GitLabCompareResultSchema, GitLabContentSchema, GitLabCreateUpdateFileResponseSchema, GitLabDiffSchema, 
 // Discussion Schemas
 GitLabDiscussionNoteSchema, // Added
 GitLabDiscussionSchema, 
 // Draft Notes Schemas
-GitLabDraftNoteSchema, GitLabForkSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
-GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, } from "./schemas.js";
+GitLabDraftNoteSchema, GitLabForkSchema, GitLabIssueLinkSchema, GitLabIssueSchema, GitLabIssueWithLinkDetailsSchema, GitLabMarkdownUploadSchema, GitLabMergeRequestSchema, GitLabMilestonesSchema, GitLabNamespaceExistsResponseSchema, GitLabNamespaceSchema, GitLabPipelineJobSchema, GitLabDeploymentSchema, GitLabEnvironmentSchema, GitLabPipelineSchema, GitLabPipelineTriggerJobSchema, GitLabProjectMemberSchema, GitLabProjectSchema, GitLabTodoSchema, GitLabReferenceSchema, GitLabRepositorySchema, GitLabSearchBlobResultSchema, GitLabSearchResponseSchema, GitLabTreeItemSchema, GitLabUserSchema, GitLabUsersResponseSchema, GitLabWikiPageSchema, GroupIteration, ListCommitsSchema, ListDraftNotesSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListTodosSchema, ListLabelsSchema, ListMergeRequestDiffsSchema, // Added
+GetMergeRequestFileDiffSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestsSchema, ListMergeRequestVersionsSchema, GetMergeRequestVersionSchema, GitLabMergeRequestVersionSchema, GitLabMergeRequestVersionDetailSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelinesSchema, ListDeploymentsSchema, ListEnvironmentsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListWikiPagesSchema, GetGroupWikiPageSchema, ListGroupWikiPagesSchema, UpdateGroupWikiPageSchema, MarkdownUploadSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, GetJobArtifactFileSchema, GitLabArtifactEntrySchema, ListJobArtifactsSchema, MergeMergeRequestSchema, ApproveMergeRequestSchema, UnapproveMergeRequestSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GitLabMergeRequestApprovalsResponseSchema, GitLabMergeRequestApprovalStateSchema, MyIssuesSchema, MarkAllTodosDoneSchema, MarkTodoDoneSchema, PaginatedDiscussionsResponseSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PlayPipelineJobSchema, PushFilesSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UpdateDraftNoteSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestSchema, UpdateWikiPageSchema, VerifyNamespaceSchema, GitLabEventSchema, ListEventsSchema, GetProjectEventsSchema, ExecuteGraphQLSchema, GitLabReleaseSchema, ListReleasesSchema, GetReleaseSchema, CreateReleaseSchema, UpdateReleaseSchema, DeleteReleaseSchema, CreateReleaseEvidenceSchema, DownloadReleaseAssetSchema, ListTagsSchema, GetTagSchema, CreateTagSchema, DeleteTagSchema, GetTagSignatureSchema, GitLabTagSchema, GitLabTagSignatureSchema, GetMergeRequestNotesSchema, GetMergeRequestNoteSchema, DeleteMergeRequestDiscussionNoteSchema, ResolveMergeRequestThreadSchema, GetWorkItemSchema, ListWorkItemsSchema, CreateWorkItemSchema, UpdateWorkItemSchema, ConvertWorkItemTypeSchema, ListWorkItemStatusesSchema, ListWorkItemNotesSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, MoveWorkItemSchema, ListCustomFieldDefinitionsSchema, GetTimelineEventsSchema, CreateTimelineEventSchema, ListWebhooksSchema, ListWebhookEventsSchema, GetWebhookEventSchema, } from "./schemas.js";
 import { randomUUID } from "node:crypto";
 import { pino } from "pino";
 const logger = pino({
@@ -1097,6 +1095,36 @@ async function listIssues(projectId, options = {}) {
     const data = await response.json();
     return z.array(GitLabIssueSchema).parse(data);
 }
+async function listTodos(options = {}) {
+    const url = new URL(`${getEffectiveApiUrl()}/todos`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            url.searchParams.append(key, String(value));
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return z.array(GitLabTodoSchema).parse(data);
+}
+async function markTodoDone(id) {
+    const response = await fetch(`${getEffectiveApiUrl()}/todos/${id}/mark_as_done`, {
+        ...getFetchConfig(),
+        method: "POST",
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabTodoSchema.parse(data);
+}
+async function markAllTodosDone() {
+    const response = await fetch(`${getEffectiveApiUrl()}/todos/mark_as_done`, {
+        ...getFetchConfig(),
+        method: "POST",
+    });
+    await handleGitLabError(response);
+}
 /**
  * List merge requests globally or for a specific GitLab project
  *
@@ -4769,6 +4797,38 @@ async function getPipelineJobOutput(projectId, jobId, limit, offset) {
     }
     return fullTrace;
 }
+async function validateCiLint(projectId, options) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/ci/lint`);
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+        method: "POST",
+        body: JSON.stringify(options),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiLintResultSchema.parse(data);
+}
+async function validateProjectCiLint(projectId, options) {
+    projectId = decodeURIComponent(projectId);
+    const url = new URL(`${getEffectiveApiUrl()}/projects/${encodeURIComponent(getEffectiveProjectId(projectId))}/ci/lint`);
+    Object.entries(options).forEach(([key, value]) => {
+        if (value !== undefined) {
+            if (typeof value === "boolean") {
+                url.searchParams.append(key, value ? "true" : "false");
+            }
+            else {
+                url.searchParams.append(key, value.toString());
+            }
+        }
+    });
+    const response = await fetch(url.toString(), {
+        ...getFetchConfig(),
+    });
+    await handleGitLabError(response);
+    const data = await response.json();
+    return GitLabCiLintResultSchema.parse(data);
+}
 /**
  * List artifact files in a job's artifacts archive
  *
@@ -5791,7 +5851,7 @@ async function getTagSignature(projectId, tagName) {
 async function handleToolCall(params) {
     try {
         if (!params.arguments) {
-            throw new Error("Arguments are required");
+            params.arguments = {};
         }
         // Ensure session is established for every request if cookie authentication is enabled
         if (GITLAB_AUTH_COOKIE_PATH) {
@@ -6150,6 +6210,35 @@ async function handleToolCall(params) {
                 await deleteRestAwardEmoji(path);
                 return { content: [{ type: "text", text: "Issue note emoji reaction deleted successfully" }] };
             }
+            case "list_todos": {
+                const args = ListTodosSchema.parse(params.arguments);
+                const todos = await listTodos(args);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(todos, null, 2) }],
+                };
+            }
+            case "mark_todo_done": {
+                const args = MarkTodoDoneSchema.parse(params.arguments);
+                const todo = await markTodoDone(args.id);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(todo, null, 2) }],
+                };
+            }
+            case "mark_all_todos_done": {
+                MarkAllTodosDoneSchema.parse(params.arguments);
+                await markAllTodosDone();
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({
+                                status: "success",
+                                message: "All pending to-do items marked as done",
+                            }, null, 2),
+                        },
+                    ],
+                };
+            }
             case "get_merge_request": {
                 const args = GetMergeRequestSchema.parse(params.arguments);
                 const mergeRequest = await getMergeRequest(args.project_id, args.merge_request_iid, args.source_branch);
@@ -6902,6 +6991,22 @@ async function handleToolCall(params) {
                     ],
                 };
             }
+            case "validate_ci_lint": {
+                const args = ValidateCiLintSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const result = await validateCiLint(project_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+                };
+            }
+            case "validate_project_ci_lint": {
+                const args = ValidateProjectCiLintSchema.parse(params.arguments);
+                const { project_id, ...options } = args;
+                const result = await validateProjectCiLint(project_id, options);
+                return {
+                    content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+                };
+            }
             case "create_pipeline": {
                 const { project_id, ref, variables, inputs } = CreatePipelineSchema.parse(params.arguments);
                 const pipeline = await createPipeline(project_id, ref, variables, inputs);

package/build/schemas.js

@@ -275,6 +275,34 @@ export const ListPipelineTriggerJobsSchema = z
         .describe("The scope of trigger jobs to show"),
 })
     .merge(PaginationOptionsSchema);
+export const GitLabCiLintResultSchema = z.object({
+    valid: z.coerce.boolean(),
+    errors: z.array(z.string()),
+    warnings: z.array(z.string()).optional(),
+    merged_yaml: z.string().optional(),
+    includes: z.array(z.unknown()).optional(),
+    jobs: z.array(z.unknown()).optional(),
+});
+export const ValidateCiLintSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    content: z.string().describe("GitLab CI/CD YAML content to validate"),
+    dry_run: z.coerce.boolean().optional().describe("Run pipeline creation simulation"),
+    include_jobs: z.coerce.boolean().optional().describe("Include jobs in the lint response"),
+    ref: z.string().optional().describe("Branch or tag context for dry_run validation"),
+});
+export const ValidateProjectCiLintSchema = z.object({
+    project_id: z.coerce.string().describe("Project ID or URL-encoded path"),
+    content_ref: z
+        .string()
+        .optional()
+        .describe("Commit SHA, branch, or tag to read the existing CI config from"),
+    dry_run: z.coerce.boolean().optional().describe("Run pipeline creation simulation"),
+    dry_run_ref: z
+        .string()
+        .optional()
+        .describe("Branch or tag context for dry_run validation"),
+    include_jobs: z.coerce.boolean().optional().describe("Include jobs in the lint response"),
+});
 // Deployment related schemas
 export const GitLabDeploymentSchema = z.object({
     id: z.coerce.string(),
@@ -1234,6 +1262,60 @@ export const CreateIssueSchema = ProjectParamsSchema.extend({
         .describe("The type of issue. One of issue, incident, test_case or task."),
     weight: z.coerce.number().optional().describe("Weight of the issue (numeric, typically hours of work)"),
 });
+export const GitLabTodoSchema = z.object({
+    id: z.coerce.number(),
+    project: z.unknown().optional(),
+    author: z.unknown().optional(),
+    action_name: z.string().optional(),
+    target_type: z.string().optional(),
+    target: z.unknown().optional(),
+    target_url: z.string().optional(),
+    body: z.string().optional(),
+    state: z.string(),
+    created_at: z.string().optional(),
+    updated_at: z.string().optional(),
+});
+export const ListTodosSchema = z
+    .object({
+    action: z
+        .enum([
+        "assigned",
+        "mentioned",
+        "build_failed",
+        "marked",
+        "approval_required",
+        "unmergeable",
+        "directly_addressed",
+        "merge_train_removed",
+        "member_access_requested",
+    ])
+        .optional()
+        .describe("Filter by to-do action"),
+    author_id: z.coerce.number().optional().describe("Filter by author ID"),
+    project_id: z.coerce.number().optional().describe("Filter by project ID"),
+    group_id: z.coerce.number().optional().describe("Filter by group ID"),
+    state: z.enum(["pending", "done"]).optional().describe("Filter by to-do state"),
+    type: z
+        .enum([
+        "Issue",
+        "MergeRequest",
+        "Commit",
+        "Epic",
+        "DesignManagement::Design",
+        "AlertManagement::Alert",
+        "Project",
+        "Namespace",
+        "Vulnerability",
+        "WikiPage::Meta",
+    ])
+        .optional()
+        .describe("Filter by to-do target type"),
+})
+    .merge(PaginationOptionsSchema);
+export const MarkTodoDoneSchema = z.object({
+    id: z.coerce.number().describe("The ID of the to-do item"),
+});
+export const MarkAllTodosDoneSchema = z.object({});
 const MergeRequestOptionsSchema = {
     title: z.string().describe("Merge request title"),
     description: z.string().optional().describe("Merge request description"),

package/build/test/test-ci-lint.js

@@ -0,0 +1,191 @@
+import { describe, test, before, after } from "node:test";
+import assert from "node:assert";
+import { spawn } from "child_process";
+import { MockGitLabServer, findMockServerPort } from "./utils/mock-gitlab-server.js";
+const MOCK_TOKEN = "glpat-ci-lint-test-token";
+const TEST_PROJECT_ID = "123";
+async function callTool(toolName, args, env) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn("node", ["build/index.js"], {
+            stdio: ["pipe", "pipe", "pipe"],
+            env: {
+                ...process.env,
+                ...env,
+                USE_PIPELINE: "true",
+            },
+        });
+        let output = "";
+        let errorOutput = "";
+        proc.stdout?.on("data", (d) => (output += d));
+        proc.stderr?.on("data", (d) => (errorOutput += d));
+        proc.on("close", code => {
+            if (code !== 0) {
+                return reject(new Error(`Process exited with code ${code}: ${errorOutput}`));
+            }
+            const line = output.split("\n").find(l => l.startsWith("{"));
+            if (!line)
+                return reject(new Error("No JSON output found"));
+            try {
+                const response = JSON.parse(line);
+                if (response.error) {
+                    reject(response.error);
+                }
+                else {
+                    const content = response.result?.content?.[0]?.text;
+                    resolve(content ? JSON.parse(content) : response.result);
+                }
+            }
+            catch (e) {
+                reject(e);
+            }
+        });
+        proc.stdin?.end(JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/call",
+            params: { name: toolName, arguments: args },
+        }) + "\n");
+    });
+}
+async function listToolNames(env) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn("node", ["build/index.js"], {
+            stdio: ["pipe", "pipe", "pipe"],
+            env: {
+                ...process.env,
+                ...env,
+            },
+        });
+        let output = "";
+        let errorOutput = "";
+        proc.stdout?.on("data", (d) => (output += d));
+        proc.stderr?.on("data", (d) => (errorOutput += d));
+        proc.on("close", code => {
+            if (code !== 0) {
+                return reject(new Error(`Process exited with code ${code}: ${errorOutput}`));
+            }
+            const line = output.split("\n").find(l => l.startsWith("{"));
+            if (!line)
+                return reject(new Error("No JSON output found"));
+            try {
+                const response = JSON.parse(line);
+                if (response.error) {
+                    reject(response.error);
+                }
+                else {
+                    resolve(response.result.tools.map((tool) => tool.name));
+                }
+            }
+            catch (e) {
+                reject(e);
+            }
+        });
+        proc.stdin?.end(JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/list",
+            params: {},
+        }) + "\n");
+    });
+}
+describe("GitLab CI lint tools", () => {
+    let mockGitLab;
+    let mockGitLabUrl;
+    before(async () => {
+        const mockPort = await findMockServerPort(9260);
+        mockGitLab = new MockGitLabServer({
+            port: mockPort,
+            validTokens: [MOCK_TOKEN],
+        });
+        mockGitLab.addMockHandler("post", `/projects/${TEST_PROJECT_ID}/ci/lint`, (req, res) => {
+            assert.strictEqual(req.body.content, "stages: [test]\ntest:\n  script: echo ok");
+            assert.strictEqual(req.body.dry_run, true);
+            assert.strictEqual(req.body.include_jobs, true);
+            assert.strictEqual(req.body.ref, "main");
+            res.json({
+                valid: true,
+                errors: [],
+                warnings: [],
+                merged_yaml: "test:\n  script: echo ok\n",
+                includes: [],
+                jobs: [{ name: "test", stage: "test" }],
+            });
+        });
+        mockGitLab.addMockHandler("get", `/projects/${TEST_PROJECT_ID}/ci/lint`, (req, res) => {
+            assert.strictEqual(req.query.content_ref, "feature/test");
+            assert.strictEqual(req.query.dry_run, "true");
+            assert.strictEqual(req.query.dry_run_ref, "main");
+            assert.strictEqual(req.query.include_jobs, "true");
+            res.json({
+                valid: true,
+                errors: [],
+                warnings: [],
+                merged_yaml: "include-job:\n  script: echo included\n",
+                includes: [{ type: "local", location: "include.yml" }],
+                jobs: [{ name: "include-job", stage: "test" }],
+            });
+        });
+        await mockGitLab.start();
+        mockGitLabUrl = mockGitLab.getUrl();
+    });
+    after(async () => {
+        await mockGitLab.stop();
+    });
+    test("validate_ci_lint posts CI YAML content and returns lint result", async () => {
+        const result = await callTool("validate_ci_lint", {
+            project_id: TEST_PROJECT_ID,
+            content: "stages: [test]\ntest:\n  script: echo ok",
+            dry_run: true,
+            include_jobs: true,
+            ref: "main",
+        }, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        });
+        assert.strictEqual(result.valid, true);
+        assert.deepStrictEqual(result.errors, []);
+        assert.strictEqual(result.jobs[0].name, "test");
+    });
+    test("validate_ci_lint surfaces invalid lint responses", async () => {
+        mockGitLab.addMockHandler("post", `/projects/999/ci/lint`, (req, res) => {
+            res.json({
+                valid: false,
+                errors: ["jobs config should contain at least one visible job"],
+                warnings: [],
+            });
+        });
+        const result = await callTool("validate_ci_lint", {
+            project_id: "999",
+            content: ".hidden:\n  script: echo hidden",
+        }, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        });
+        assert.strictEqual(result.valid, false);
+        assert.deepStrictEqual(result.errors, ["jobs config should contain at least one visible job"]);
+    });
+    test("validate_project_ci_lint sends GET query parameters", async () => {
+        const result = await callTool("validate_project_ci_lint", {
+            project_id: TEST_PROJECT_ID,
+            content_ref: "feature/test",
+            dry_run: true,
+            dry_run_ref: "main",
+            include_jobs: true,
+        }, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        });
+        assert.strictEqual(result.valid, true);
+        assert.strictEqual(result.includes[0].location, "include.yml");
+        assert.strictEqual(result.jobs[0].name, "include-job");
+    });
+    test("CI lint tools are visible by default in read-only mode", async () => {
+        const tools = await listToolNames({
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+            GITLAB_READ_ONLY_MODE: "true",
+        });
+        assert.ok(tools.includes("validate_ci_lint"));
+        assert.ok(tools.includes("validate_project_ci_lint"));
+    });
+});

package/build/test/test-todos.js

@@ -0,0 +1,195 @@
+import { describe, test, before, after } from "node:test";
+import assert from "node:assert";
+import { spawn } from "child_process";
+import { MockGitLabServer, findMockServerPort } from "./utils/mock-gitlab-server.js";
+const MOCK_TOKEN = "glpat-todos-test-token";
+async function callTool(toolName, args, env) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn("node", ["build/index.js"], {
+            stdio: ["pipe", "pipe", "pipe"],
+            env: {
+                ...process.env,
+                ...env,
+            },
+        });
+        let output = "";
+        let errorOutput = "";
+        proc.stdout?.on("data", (d) => (output += d));
+        proc.stderr?.on("data", (d) => (errorOutput += d));
+        proc.on("close", code => {
+            if (code !== 0) {
+                return reject(new Error(`Process exited with code ${code}: ${errorOutput}`));
+            }
+            const line = output.split("\n").find(l => l.startsWith("{"));
+            if (!line)
+                return reject(new Error("No JSON output found"));
+            try {
+                const response = JSON.parse(line);
+                if (response.error) {
+                    reject(response.error);
+                }
+                else {
+                    const content = response.result?.content?.[0]?.text;
+                    resolve(content ? JSON.parse(content) : response.result);
+                }
+            }
+            catch (e) {
+                reject(e);
+            }
+        });
+        proc.stdin?.end(JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/call",
+            params: args === undefined ? { name: toolName } : { name: toolName, arguments: args },
+        }) + "\n");
+    });
+}
+async function listToolNames(env) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn("node", ["build/index.js"], {
+            stdio: ["pipe", "pipe", "pipe"],
+            env: {
+                ...process.env,
+                ...env,
+            },
+        });
+        let output = "";
+        let errorOutput = "";
+        proc.stdout?.on("data", (d) => (output += d));
+        proc.stderr?.on("data", (d) => (errorOutput += d));
+        proc.on("close", code => {
+            if (code !== 0) {
+                return reject(new Error(`Process exited with code ${code}: ${errorOutput}`));
+            }
+            const line = output.split("\n").find(l => l.startsWith("{"));
+            if (!line)
+                return reject(new Error("No JSON output found"));
+            try {
+                const response = JSON.parse(line);
+                if (response.error) {
+                    reject(response.error);
+                }
+                else {
+                    resolve(response.result.tools.map((tool) => tool.name));
+                }
+            }
+            catch (e) {
+                reject(e);
+            }
+        });
+        proc.stdin?.end(JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/list",
+            params: {},
+        }) + "\n");
+    });
+}
+function todoFixture(id, state = "pending") {
+    return {
+        id,
+        project: { id: 123, path_with_namespace: "group/project" },
+        author: { id: 1, username: "root" },
+        action_name: "marked",
+        target_type: "MergeRequest",
+        target: { id: 34, iid: 7, project_id: 123, title: "Review this MR" },
+        target_url: "https://gitlab.example.com/group/project/-/merge_requests/7",
+        body: "Review this MR",
+        state,
+        created_at: "2026-01-01T00:00:00.000Z",
+        updated_at: "2026-01-01T00:00:00.000Z",
+    };
+}
+describe("GitLab todos tools", () => {
+    let mockGitLab;
+    let mockGitLabUrl;
+    before(async () => {
+        const mockPort = await findMockServerPort(9250);
+        mockGitLab = new MockGitLabServer({
+            port: mockPort,
+            validTokens: [MOCK_TOKEN],
+        });
+        mockGitLab.addMockHandler("get", "/todos", (req, res) => {
+            assert.strictEqual(req.query.state, "pending");
+            assert.strictEqual(req.query.action, "assigned");
+            assert.strictEqual(req.query.project_id, "123");
+            assert.strictEqual(req.query.page, "2");
+            assert.strictEqual(req.query.per_page, "5");
+            res.json([todoFixture(102)]);
+        });
+        mockGitLab.addMockHandler("post", "/todos/102/mark_as_done", (req, res) => {
+            res.json(todoFixture(102, "done"));
+        });
+        mockGitLab.addMockHandler("post", "/todos/mark_as_done", (req, res) => {
+            res.status(204).send();
+        });
+        await mockGitLab.start();
+        mockGitLabUrl = mockGitLab.getUrl();
+    });
+    after(async () => {
+        await mockGitLab.stop();
+    });
+    test("list_todos sends filters and returns todos", async () => {
+        const result = await callTool("list_todos", {
+            state: "pending",
+            action: "assigned",
+            project_id: 123,
+            page: 2,
+            per_page: 5,
+        }, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        });
+        assert.ok(Array.isArray(result));
+        assert.strictEqual(result[0].id, 102);
+        assert.strictEqual(result[0].state, "pending");
+    });
+    test("mark_todo_done marks one todo done", async () => {
+        const result = await callTool("mark_todo_done", { id: 102 }, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        });
+        assert.strictEqual(result.id, 102);
+        assert.strictEqual(result.state, "done");
+    });
+    test("mark_all_todos_done reports success", async () => {
+        const result = await callTool("mark_all_todos_done", {}, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        });
+        assert.deepStrictEqual(result, {
+            status: "success",
+            message: "All pending to-do items marked as done",
+        });
+    });
+    test("mark_all_todos_done accepts omitted arguments", async () => {
+        const result = await callTool("mark_all_todos_done", undefined, {
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        });
+        assert.deepStrictEqual(result, {
+            status: "success",
+            message: "All pending to-do items marked as done",
+        });
+    });
+    test("todo tools are visible in the default issues toolset", async () => {
+        const tools = await listToolNames({
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+        });
+        assert.ok(tools.includes("list_todos"));
+        assert.ok(tools.includes("mark_todo_done"));
+        assert.ok(tools.includes("mark_all_todos_done"));
+    });
+    test("read-only mode keeps list_todos and hides todo mutations", async () => {
+        const tools = await listToolNames({
+            GITLAB_API_URL: `${mockGitLabUrl}/api/v4`,
+            GITLAB_PERSONAL_ACCESS_TOKEN: MOCK_TOKEN,
+            GITLAB_READ_ONLY_MODE: "true",
+        });
+        assert.ok(tools.includes("list_todos"));
+        assert.ok(!tools.includes("mark_todo_done"));
+        assert.ok(!tools.includes("mark_all_todos_done"));
+    });
+});

package/build/test/test-toolset-filtering.js

@@ -17,11 +17,12 @@ const MCP_PORT_BASE = 3200;
 // Known tool counts per toolset (from TOOLSET_DEFINITIONS)
 const TOOLSET_TOOL_COUNTS = {
     merge_requests: 40,
-    issues: 20,
+    issues: 23,
     repositories: 7,
     branches: 4,
     projects: 8,
     labels: 5,
+    ci: 2,
     pipelines: 19,
     milestones: 9,
     wiki: 10,
@@ -32,6 +33,7 @@ const TOOLSET_TOOL_COUNTS = {
     workitems: 18,
     webhooks: 3,
 };
+const LEGACY_PIPELINE_TOOL_COUNT = TOOLSET_TOOL_COUNTS.pipelines + TOOLSET_TOOL_COUNTS.ci;
 const DEFAULT_TOOLSETS = [
     "merge_requests",
     "issues",
@@ -39,6 +41,7 @@ const DEFAULT_TOOLSETS = [
     "branches",
     "projects",
     "labels",
+    "ci",
     "users",
 ];
 const NON_DEFAULT_TOOLSETS = [
@@ -58,11 +61,12 @@ const ALL_TOOLSET_TOOL_COUNT = Object.values(TOOLSET_TOOL_COUNTS).reduce((sum, c
 // Representative tools per toolset for spot-checking
 const TOOLSET_SAMPLE_TOOLS = {
     merge_requests: ["merge_merge_request", "create_merge_request_thread", "list_draft_notes"],
-    issues: ["create_issue", "list_issues", "create_note"],
+    issues: ["create_issue", "list_issues", "create_note", "list_todos"],
     repositories: ["search_repositories", "get_file_contents", "push_files"],
     branches: ["create_branch", "list_commits"],
     projects: ["get_project", "list_namespaces", "list_group_iterations"],
     labels: ["list_labels", "create_label"],
+    ci: ["validate_ci_lint", "validate_project_ci_lint"],
     pipelines: ["list_pipelines", "create_pipeline", "cancel_pipeline_job", "list_deployments", "list_job_artifacts"],
     milestones: ["list_milestones", "create_milestone", "get_milestone_burndown_events"],
     wiki: ["list_wiki_pages", "create_wiki_page", "list_group_wiki_pages", "create_group_wiki_page"],
@@ -260,7 +264,7 @@ describe("Toolset Filtering", { concurrency: 1 }, () => {
         });
         after(() => cleanupServers([server]));
         test("returns issue tools + all pipeline tools + discover_tools", () => {
-            assert.strictEqual(tools.length, TOOLSET_TOOL_COUNTS.issues + TOOLSET_TOOL_COUNTS.pipelines + DISCOVER_TOOLS_COUNT);
+            assert.strictEqual(tools.length, TOOLSET_TOOL_COUNTS.issues + LEGACY_PIPELINE_TOOL_COUNT + DISCOVER_TOOLS_COUNT);
         });
         test("includes all pipeline tools via legacy flag", () => {
             assertContainsAll(tools, TOOLSET_SAMPLE_TOOLS.pipelines, "pipelines");
@@ -297,6 +301,7 @@ describe("Toolset Filtering", { concurrency: 1 }, () => {
             "list_issue_links",
             "list_issue_discussions",
             "get_issue_link",
+            "list_todos",
             "list_issue_emoji_reactions",
             "list_issue_note_emoji_reactions",
         ];
@@ -304,6 +309,8 @@ describe("Toolset Filtering", { concurrency: 1 }, () => {
             "create_issue",
             "update_issue",
             "delete_issue",
+            "mark_todo_done",
+            "mark_all_todos_done",
             "create_issue_note",
             "update_issue_note",
             "create_issue_link",
@@ -396,7 +403,7 @@ describe("Toolset Filtering", { concurrency: 1 }, () => {
         });
         after(() => cleanupServers([server]));
         test("returns exactly pipeline tool count + discover_tools (no duplicates)", () => {
-            assert.strictEqual(tools.length, TOOLSET_TOOL_COUNTS.pipelines + DISCOVER_TOOLS_COUNT);
+            assert.strictEqual(tools.length, LEGACY_PIPELINE_TOOL_COUNT + DISCOVER_TOOLS_COUNT);
         });
     });
     // ---- 12. GITLAB_TOOLS with tool already in enabled toolset (no dupes) ----

package/build/tools/registry.js

@@ -1,7 +1,7 @@
 import { zodToJsonSchema } from "zod-to-json-schema";
 import { toJSONSchema } from "../utils/schema.js";
 import { USE_GITLAB_WIKI, USE_MILESTONE, USE_PIPELINE, } from "../config.js";
-import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListCommitsSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ListPipelinesSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, } from "../schemas.js";
+import { ApproveMergeRequestSchema, BulkPublishDraftNotesSchema, CancelPipelineJobSchema, CancelPipelineSchema, ConvertWorkItemTypeSchema, CreateBranchSchema, CreateDraftNoteSchema, CreateGroupWikiPageSchema, CreateIssueLinkSchema, CreateIssueNoteSchema, CreateIssueSchema, CreateIssueEmojiReactionSchema, CreateIssueNoteEmojiReactionSchema, ListIssueEmojiReactionsSchema, ListIssueNoteEmojiReactionsSchema, CreateLabelSchema, MarkAllTodosDoneSchema, ListTodosSchema, MarkTodoDoneSchema, CreateMergeRequestDiscussionNoteSchema, CreateMergeRequestEmojiReactionSchema, ListMergeRequestEmojiReactionsSchema, ListMergeRequestNoteEmojiReactionsSchema, CreateMergeRequestNoteSchema, CreateMergeRequestNoteEmojiReactionSchema, CreateMergeRequestSchema, CreateMergeRequestThreadSchema, CreateNoteSchema, CreateOrUpdateFileSchema, CreatePipelineSchema, CreateProjectMilestoneSchema, CreateReleaseEvidenceSchema, CreateReleaseSchema, CreateRepositorySchema, CreateTagSchema, CreateTimelineEventSchema, CreateWikiPageSchema, CreateWorkItemNoteSchema, CreateWorkItemEmojiReactionSchema, CreateWorkItemNoteEmojiReactionSchema, ListWorkItemEmojiReactionsSchema, ListWorkItemNoteEmojiReactionsSchema, CreateWorkItemSchema, DeleteDraftNoteSchema, DeleteGroupWikiPageSchema, DeleteIssueLinkSchema, DeleteIssueSchema, DeleteIssueEmojiReactionSchema, DeleteIssueNoteEmojiReactionSchema, DeleteLabelSchema, DeleteMergeRequestDiscussionNoteSchema, DeleteMergeRequestNoteSchema, DeleteMergeRequestEmojiReactionSchema, DeleteMergeRequestNoteEmojiReactionSchema, DeleteProjectMilestoneSchema, DeleteReleaseSchema, DeleteTagSchema, DeleteWikiPageSchema, DeleteWorkItemEmojiReactionSchema, DeleteWorkItemNoteEmojiReactionSchema, DownloadAttachmentSchema, DownloadJobArtifactsSchema, DownloadReleaseAssetSchema, EditProjectMilestoneSchema, ExecuteGraphQLSchema, ForkRepositorySchema, GetBranchDiffsSchema, GetCommitDiffSchema, GetCommitSchema, GetDeploymentSchema, GetDraftNoteSchema, GetEnvironmentSchema, GetFileContentsSchema, GetGroupWikiPageSchema, GetIssueLinkSchema, GetIssueSchema, GetJobArtifactFileSchema, GetLabelSchema, GetMergeRequestApprovalStateSchema, GetMergeRequestConflictsSchema, GetMergeRequestDiffsSchema, GetMergeRequestFileDiffSchema, GetMergeRequestNoteSchema, GetMergeRequestNotesSchema, GetMergeRequestSchema, GetMergeRequestVersionSchema, GetMilestoneBurndownEventsSchema, GetMilestoneIssuesSchema, GetMilestoneMergeRequestsSchema, GetNamespaceSchema, GetPipelineJobOutputSchema, GetPipelineSchema, GetProjectEventsSchema, GetProjectMilestoneSchema, GetProjectSchema, GetReleaseSchema, GetRepositoryTreeSchema, GetTagSchema, GetTagSignatureSchema, GetTimelineEventsSchema, GetUsersSchema, GetWebhookEventSchema, GetWikiPageSchema, GetWorkItemSchema, ListCommitsSchema, ListCustomFieldDefinitionsSchema, ListDeploymentsSchema, ListDraftNotesSchema, ListEnvironmentsSchema, ListEventsSchema, ListGroupIterationsSchema, ListGroupProjectsSchema, ListGroupWikiPagesSchema, ListIssueDiscussionsSchema, ListIssueLinksSchema, ListIssuesSchema, ListJobArtifactsSchema, ListLabelsSchema, ListMergeRequestChangedFilesSchema, ListMergeRequestDiffsSchema, ListMergeRequestDiscussionsSchema, ListMergeRequestVersionsSchema, ListMergeRequestsSchema, ListNamespacesSchema, ListPipelineJobsSchema, ListPipelineTriggerJobsSchema, ValidateCiLintSchema, ValidateProjectCiLintSchema, ListPipelinesSchema, ListProjectMembersSchema, ListProjectMilestonesSchema, ListProjectsSchema, ListReleasesSchema, ListTagsSchema, ListWebhookEventsSchema, ListWebhooksSchema, ListWikiPagesSchema, ListWorkItemNotesSchema, ListWorkItemStatusesSchema, ListWorkItemsSchema, MarkdownUploadSchema, MergeMergeRequestSchema, MoveWorkItemSchema, MyIssuesSchema, PlayPipelineJobSchema, PromoteProjectMilestoneSchema, PublishDraftNoteSchema, PushFilesSchema, ResolveMergeRequestThreadSchema, RetryPipelineJobSchema, RetryPipelineSchema, SearchCodeSchema, SearchGroupCodeSchema, SearchProjectCodeSchema, SearchRepositoriesSchema, UnapproveMergeRequestSchema, UpdateDraftNoteSchema, UpdateGroupWikiPageSchema, UpdateIssueNoteSchema, UpdateIssueSchema, UpdateLabelSchema, UpdateMergeRequestDiscussionNoteSchema, UpdateMergeRequestNoteSchema, UpdateMergeRequestSchema, UpdateReleaseSchema, UpdateWikiPageSchema, UpdateWorkItemSchema, VerifyNamespaceSchema, } from "../schemas.js";
 // Define all available tools
 export const allTools = [
     {
@@ -316,6 +316,21 @@ export const allTools = [
         description: "Delete an issue",
         inputSchema: toJSONSchema(DeleteIssueSchema),
     },
+    {
+        name: "list_todos",
+        description: "List GitLab to-do items for the current user",
+        inputSchema: toJSONSchema(ListTodosSchema),
+    },
+    {
+        name: "mark_todo_done",
+        description: "Mark a GitLab to-do item as done",
+        inputSchema: toJSONSchema(MarkTodoDoneSchema),
+    },
+    {
+        name: "mark_all_todos_done",
+        description: "Mark all pending GitLab to-do items as done for the current user",
+        inputSchema: toJSONSchema(MarkAllTodosDoneSchema),
+    },
     {
         name: "list_issue_links",
         description: "List all issue links for a specific issue",
@@ -506,6 +521,16 @@ export const allTools = [
         description: "Get the output/trace of a pipeline job with optional pagination",
         inputSchema: toJSONSchema(GetPipelineJobOutputSchema),
     },
+    {
+        name: "validate_ci_lint",
+        description: "Validate provided GitLab CI/CD YAML content for a project",
+        inputSchema: toJSONSchema(ValidateCiLintSchema),
+    },
+    {
+        name: "validate_project_ci_lint",
+        description: "Validate an existing .gitlab-ci.yml configuration for a project",
+        inputSchema: toJSONSchema(ValidateProjectCiLintSchema),
+    },
     {
         name: "create_pipeline",
         description: "Create a new pipeline for a branch or tag",
@@ -867,6 +892,7 @@ export const readOnlyTools = new Set([
     "list_draft_notes",
     "mr_discussions",
     "list_issues",
+    "list_todos",
     "my_issues",
     "list_merge_requests",
     "get_issue",
@@ -889,6 +915,8 @@ export const readOnlyTools = new Set([
     "list_pipeline_trigger_jobs",
     "get_pipeline_job",
     "get_pipeline_job_output",
+    "validate_ci_lint",
+    "validate_project_ci_lint",
     "list_job_artifacts",
     "download_job_artifacts",
     "get_job_artifact_file",
@@ -998,6 +1026,8 @@ export const pipelineToolNames = new Set([
     "list_pipeline_trigger_jobs",
     "get_pipeline_job",
     "get_pipeline_job_output",
+    "validate_ci_lint",
+    "validate_project_ci_lint",
     "create_pipeline",
     "retry_pipeline",
     "cancel_pipeline",
@@ -1065,6 +1095,9 @@ export const TOOLSET_DEFINITIONS = [
             "get_issue",
             "update_issue",
             "delete_issue",
+            "list_todos",
+            "mark_todo_done",
+            "mark_all_todos_done",
             "create_issue_note",
             "update_issue_note",
             "list_issue_links",
@@ -1129,6 +1162,11 @@ export const TOOLSET_DEFINITIONS = [
             "delete_label",
         ]),
     },
+    {
+        id: "ci",
+        isDefault: true,
+        tools: new Set(["validate_ci_lint", "validate_project_ci_lint"]),
+    },
     {
         id: "pipelines",
         isDefault: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.1.7",
+  "version": "2.1.8",
   "mcpName": "io.github.zereight/gitlab-mcp",
   "description": "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more",
   "keywords": [
@@ -51,7 +51,7 @@
     "changelog": "auto-changelog -p",
     "test": "npm run test:all",
     "test:all": "npm run build && npm run test:mock && npm run test:live",
-    "test:mock": "node --import tsx/esm --test test/remote-auth-simple-test.ts && node --import tsx/esm --test test/mcp-oauth-tests.ts && tsx test/oauth-tests.ts && tsx test/test-list-merge-requests.ts && tsx test/test-list-project-members.ts && tsx test/test-download-attachment.ts && node --import tsx/esm --test test/test-job-artifacts.ts && node --import tsx/esm --test test/test-deployment-tools.ts && node --import tsx/esm --test test/test-merge-request-approval-state-tools.ts && node --import tsx/esm --test test/test-search-code.ts && node --import tsx/esm --test test/test-tags.ts && node --import tsx/esm --test test/test-toolset-filtering.ts && node --import tsx/esm --test test/test-auth-retry.ts && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts",
+    "test:mock": "node --import tsx/esm --test test/remote-auth-simple-test.ts && node --import tsx/esm --test test/mcp-oauth-tests.ts && tsx test/oauth-tests.ts && tsx test/test-list-merge-requests.ts && tsx test/test-list-project-members.ts && tsx test/test-download-attachment.ts && node --import tsx/esm --test test/test-job-artifacts.ts && node --import tsx/esm --test test/test-deployment-tools.ts && node --import tsx/esm --test test/test-merge-request-approval-state-tools.ts && node --import tsx/esm --test test/test-search-code.ts && node --import tsx/esm --test test/test-tags.ts && node --import tsx/esm --test test/test-toolset-filtering.ts && node --import tsx/esm --test test/test-ci-lint.ts && node --import tsx/esm --test test/test-todos.ts && node --import tsx/esm --test test/test-auth-retry.ts && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts",
     "test:stateless": "npm run build && node --import tsx/esm --test test/stateless/codec.test.ts test/stateless/client-id.test.ts test/stateless/callback-proxy.test.ts test/stateless/session-id.test.ts test/stateless/session-id-integration.test.ts test/stateless/config-ttl.test.ts",
     "test:mcp-oauth": "npm run build && node --import tsx/esm --test test/mcp-oauth-tests.ts",
     "test:live": "node test/validate-api.js",