gitlab-mcp 0.1.4 → 1.0.0

package/.dockerignore

@@ -0,0 +1,7 @@
+node_modules
+dist
+coverage
+.git
+.gitignore
+.vscode
+.DS_Store

package/.editorconfig

@@ -0,0 +1,9 @@
+root = true
+
+[*]
+charset = utf-8
+indent_style = space
+indent_size = 2
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true

package/.env.example

@@ -0,0 +1,75 @@
+NODE_ENV=development
+LOG_LEVEL=info
+
+MCP_SERVER_NAME=gitlab-mcp
+MCP_SERVER_VERSION=0.1.0
+
+# Base API URL(s). Supports comma-separated multi-instance URLs.
+# Each URL will be normalized to /api/v4 automatically.
+GITLAB_API_URL=https://gitlab.com/api/v4
+
+# For stdio/local mode. In REMOTE_AUTHORIZATION mode this can stay empty.
+GITLAB_PERSONAL_ACCESS_TOKEN=
+
+# Optional built-in OAuth (PKCE)
+GITLAB_USE_OAUTH=false
+GITLAB_OAUTH_CLIENT_ID=
+GITLAB_OAUTH_CLIENT_SECRET=
+GITLAB_OAUTH_GITLAB_URL=
+GITLAB_OAUTH_REDIRECT_URI=http://127.0.0.1:8765/callback
+GITLAB_OAUTH_SCOPES=api
+GITLAB_OAUTH_TOKEN_PATH=~/.gitlab-mcp-oauth-token.json
+GITLAB_OAUTH_AUTO_OPEN_BROWSER=true
+
+# Tool/runtime policy
+GITLAB_READ_ONLY_MODE=false
+GITLAB_ALLOWED_PROJECT_IDS=
+GITLAB_ALLOWED_TOOLS=
+GITLAB_DENIED_TOOLS_REGEX=
+GITLAB_ALLOW_GRAPHQL_WITH_PROJECT_SCOPE=false
+
+# Output tuning
+GITLAB_RESPONSE_MODE=json
+GITLAB_MAX_RESPONSE_BYTES=200000
+GITLAB_HTTP_TIMEOUT_MS=20000
+GITLAB_ERROR_DETAIL_MODE=
+
+# Optional auth/runtime enhancements
+GITLAB_AUTH_COOKIE_PATH=
+GITLAB_COOKIE_WARMUP_PATH=/user
+GITLAB_TOKEN_SCRIPT=
+GITLAB_TOKEN_SCRIPT_TIMEOUT_MS=10000
+GITLAB_TOKEN_CACHE_SECONDS=300
+GITLAB_TOKEN_FILE=
+GITLAB_ALLOW_INSECURE_TOKEN_FILE=false
+
+# Cloudflare/proxy compatibility
+GITLAB_CLOUDFLARE_BYPASS=false
+GITLAB_USER_AGENT=
+GITLAB_ACCEPT_LANGUAGE=en-US,en;q=0.9
+
+# TLS safety guard (must acknowledge if disabled)
+NODE_TLS_REJECT_UNAUTHORIZED=
+GITLAB_ALLOW_INSECURE_TLS=false
+GITLAB_CA_CERT_PATH=
+HTTP_PROXY=
+HTTPS_PROXY=
+
+# Feature toggles
+USE_GITLAB_WIKI=true
+USE_MILESTONE=true
+USE_PIPELINE=true
+USE_RELEASE=true
+
+# Remote auth/session controls (for Streamable HTTP)
+REMOTE_AUTHORIZATION=false
+ENABLE_DYNAMIC_API_URL=false
+SESSION_TIMEOUT_SECONDS=3600
+MAX_SESSIONS=1000
+MAX_REQUESTS_PER_MINUTE=300
+
+# HTTP server
+HTTP_HOST=127.0.0.1
+HTTP_PORT=3333
+HTTP_JSON_ONLY=false
+SSE=false

package/.github/workflows/nodejs.yml

@@ -0,0 +1,31 @@
+name: Node CI
+
+on: [push]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: [22.x]
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.28.1
+          run_install: false
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: "pnpm"
+      - name: pnpm install, build, and test
+        run: |
+          pnpm install --frozen-lockfile
+          pnpm build
+          pnpm test
+        env:
+          CI: true

package/.github/workflows/npm-publish.yml

@@ -0,0 +1,31 @@
+name: Node.js Package
+
+on:
+  release:
+    types: [created]
+
+jobs:
+  publish-npm:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.28.1
+          run_install: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22.x"
+          cache: "pnpm"
+          registry-url: "https://registry.npmjs.org"
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm build
+      - run: pnpm test
+      - run: npm publish --provenance
+        env:
+          NODE_AUTH_TOKEN: ${{secrets.NPM_AUTH_TOKEN}}
+          CI: true

package/.husky/pre-commit

@@ -0,0 +1 @@
+npm run lint-staged

package/.nvmrc

@@ -0,0 +1 @@
+22

package/.prettierrc.json

@@ -0,0 +1,6 @@
+{
+  "semi": true,
+  "singleQuote": false,
+  "trailingComma": "none",
+  "printWidth": 100
+}

package/Dockerfile

@@ -0,0 +1,20 @@
+FROM node:22-alpine AS deps
+WORKDIR /app
+RUN corepack enable
+COPY package.json pnpm-lock.yaml ./
+RUN pnpm install --frozen-lockfile
+
+FROM deps AS build
+COPY . .
+RUN pnpm build
+
+FROM node:22-alpine AS runtime
+WORKDIR /app
+ENV NODE_ENV=production
+RUN corepack enable
+COPY package.json pnpm-lock.yaml ./
+RUN pnpm install --prod --frozen-lockfile
+COPY --from=build /app/dist ./dist
+COPY .env.example ./.env.example
+EXPOSE 3333
+CMD ["node", "dist/http.js"]