| GITLAB_URL | No | GitLab instance URL (default: https://gitlab.com; set for self-managed instances) |
| GITLAB_TOKEN | Yes | GitLab Personal Access Token (glpat-...) Secret. |
| GITLAB_MCP_SKIP_TLS_VERIFY | No | Skip TLS certificate verification for self-signed certs (default: false) |
| GITLAB_MCP_TOOL_SURFACE | No | Tool catalog selector: dynamic, meta, or individual (default: dynamic) |
| GITLAB_MCP_TIER | No | GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools |
| GITLAB_MCP_READ_ONLY | No | Read-only mode: removes every mutating action from the served surface; reads keep working (default: false) |
| GITLAB_MCP_SAFE_MODE | No | Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false) |
| GITLAB_MCP_LOG_LEVEL | No | Logging verbosity (default: info) |
| GITLAB_URL | No | GitLab instance URL (default: https://gitlab.com; set for self-managed instances) |
| GITLAB_TOKEN | Yes | GitLab Personal Access Token (glpat-...) Secret. |
| GITLAB_MCP_SKIP_TLS_VERIFY | No | Skip TLS certificate verification for self-signed certs (default: false) |
| GITLAB_MCP_TOOL_SURFACE | No | Tool catalog selector: dynamic, meta, or individual (default: dynamic) |
| GITLAB_MCP_TIER | No | GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools |
| GITLAB_MCP_READ_ONLY | No | Read-only mode: removes every mutating action from the served surface; reads keep working (default: false) |
| GITLAB_MCP_SAFE_MODE | No | Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false) |
| GITLAB_MCP_LOG_LEVEL | No | Logging verbosity (default: info) |
| GITLAB_URL | No | GitLab instance URL (default: https://gitlab.com; set for self-managed instances) |
| GITLAB_TOKEN | Yes | GitLab Personal Access Token (glpat-...) Secret. |
| GITLAB_MCP_SKIP_TLS_VERIFY | No | Skip TLS certificate verification for self-signed certs (default: false) |
| GITLAB_MCP_TOOL_SURFACE | No | Tool catalog selector: dynamic, meta, or individual (default: dynamic) |
| GITLAB_MCP_TIER | No | GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools |
| GITLAB_MCP_READ_ONLY | No | Read-only mode: removes every mutating action from the served surface; reads keep working (default: false) |
| GITLAB_MCP_SAFE_MODE | No | Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false) |
| GITLAB_MCP_LOG_LEVEL | No | Logging verbosity (default: info) |
| GITLAB_URL | No | GitLab instance URL (default: https://gitlab.com; set for self-managed instances) |
| GITLAB_TOKEN | Yes | GitLab Personal Access Token (glpat-...) Secret. |
| GITLAB_MCP_SKIP_TLS_VERIFY | No | Skip TLS certificate verification for self-signed certs (default: false) |
| GITLAB_MCP_TOOL_SURFACE | No | Tool catalog selector: dynamic, meta, or individual (default: dynamic) |
| GITLAB_MCP_CAPABILITY_SURFACE | No | Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full |
| GITLAB_MCP_META_PARAM_SCHEMA | No | Meta-tool input schema detail: opaque, compact, or full (default: opaque) |
| GITLAB_MCP_TIER | No | GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools |
| GITLAB_MCP_READ_ONLY | No | Read-only mode: removes every mutating action from the served surface; reads keep working (default: false) |
| GITLAB_MCP_SAFE_MODE | No | Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false) |
| GITLAB_MCP_EMBEDDED_RESOURCES | No | Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true) |
| GITLAB_MCP_EXCLUDE_TOOLS | No | Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner) |
| GITLAB_MCP_IGNORE_SCOPES | No | Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false) |
| GITLAB_MCP_UPLOAD_MAX_FILE_SIZE | No | Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB) |
| GITLAB_MCP_ALLOWED_UPLOAD_DIRS | No | Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS | No | Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_IMPORT_DIRS | No | Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_RATE_LIMIT_RPS | No | Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0) |
| GITLAB_MCP_RATE_LIMIT_BURST | No | Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40) |
| GITLAB_MCP_LOG_LEVEL | No | Logging verbosity (default: info) |
| GITLAB_URL | No | GitLab instance URL (default: https://gitlab.com; set for self-managed instances) |
| GITLAB_TOKEN | Yes | GitLab Personal Access Token (glpat-...) Secret. |
| GITLAB_MCP_SKIP_TLS_VERIFY | No | Skip TLS certificate verification for self-signed certs (default: false) |
| GITLAB_MCP_TOOL_SURFACE | No | Tool catalog selector: dynamic, meta, or individual (default: dynamic) |
| GITLAB_MCP_CAPABILITY_SURFACE | No | Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full |
| GITLAB_MCP_META_PARAM_SCHEMA | No | Meta-tool input schema detail: opaque, compact, or full (default: opaque) |
| GITLAB_MCP_TIER | No | GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools |
| GITLAB_MCP_READ_ONLY | No | Read-only mode: removes every mutating action from the served surface; reads keep working (default: false) |
| GITLAB_MCP_SAFE_MODE | No | Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false) |
| GITLAB_MCP_EMBEDDED_RESOURCES | No | Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true) |
| GITLAB_MCP_EXCLUDE_TOOLS | No | Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner) |
| GITLAB_MCP_IGNORE_SCOPES | No | Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false) |
| GITLAB_MCP_UPLOAD_MAX_FILE_SIZE | No | Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB) |
| GITLAB_MCP_ALLOWED_UPLOAD_DIRS | No | Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS | No | Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_IMPORT_DIRS | No | Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_RATE_LIMIT_RPS | No | Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0) |
| GITLAB_MCP_RATE_LIMIT_BURST | No | Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40) |
| GITLAB_MCP_LOG_LEVEL | No | Logging verbosity (default: info) |
| GITLAB_URL | No | GitLab instance URL (default: https://gitlab.com; set for self-managed instances) |
| GITLAB_TOKEN | Yes | GitLab Personal Access Token (glpat-...) Secret. |
| GITLAB_MCP_SKIP_TLS_VERIFY | No | Skip TLS certificate verification for self-signed certs (default: false) |
| GITLAB_MCP_TOOL_SURFACE | No | Tool catalog selector: dynamic, meta, or individual (default: dynamic) |
| GITLAB_MCP_CAPABILITY_SURFACE | No | Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full |
| GITLAB_MCP_META_PARAM_SCHEMA | No | Meta-tool input schema detail: opaque, compact, or full (default: opaque) |
| GITLAB_MCP_TIER | No | GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools |
| GITLAB_MCP_READ_ONLY | No | Read-only mode: removes every mutating action from the served surface; reads keep working (default: false) |
| GITLAB_MCP_SAFE_MODE | No | Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false) |
| GITLAB_MCP_EMBEDDED_RESOURCES | No | Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true) |
| GITLAB_MCP_EXCLUDE_TOOLS | No | Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner) |
| GITLAB_MCP_IGNORE_SCOPES | No | Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false) |
| GITLAB_MCP_UPLOAD_MAX_FILE_SIZE | No | Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB) |
| GITLAB_MCP_ALLOWED_UPLOAD_DIRS | No | Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS | No | Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_IMPORT_DIRS | No | Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_RATE_LIMIT_RPS | No | Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0) |
| GITLAB_MCP_RATE_LIMIT_BURST | No | Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40) |
| GITLAB_MCP_LOG_LEVEL | No | Logging verbosity (default: info) |
| GITLAB_URL | No | GitLab instance URL (default: https://gitlab.com; set for self-managed instances) |
| GITLAB_TOKEN | Yes | GitLab Personal Access Token (glpat-...) Secret. |
| GITLAB_MCP_SKIP_TLS_VERIFY | No | Skip TLS certificate verification for self-signed certs (default: false) |
| GITLAB_MCP_TOOL_SURFACE | No | Tool catalog selector: dynamic, meta, or individual (default: dynamic) |
| GITLAB_MCP_CAPABILITY_SURFACE | No | Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full |
| GITLAB_MCP_META_PARAM_SCHEMA | No | Meta-tool input schema detail: opaque, compact, or full (default: opaque) |
| GITLAB_MCP_TIER | No | GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools |
| GITLAB_MCP_READ_ONLY | No | Read-only mode: removes every mutating action from the served surface; reads keep working (default: false) |
| GITLAB_MCP_SAFE_MODE | No | Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false) |
| GITLAB_MCP_EMBEDDED_RESOURCES | No | Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true) |
| GITLAB_MCP_EXCLUDE_TOOLS | No | Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner) |
| GITLAB_MCP_IGNORE_SCOPES | No | Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false) |
| GITLAB_MCP_UPLOAD_MAX_FILE_SIZE | No | Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB) |
| GITLAB_MCP_ALLOWED_UPLOAD_DIRS | No | Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS | No | Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_IMPORT_DIRS | No | Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_RATE_LIMIT_RPS | No | Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0) |
| GITLAB_MCP_RATE_LIMIT_BURST | No | Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40) |
| GITLAB_MCP_LOG_LEVEL | No | Logging verbosity (default: info) |
| GITLAB_URL | No | GitLab instance URL (default: https://gitlab.com; set for self-managed instances) |
| GITLAB_TOKEN | Yes | GitLab Personal Access Token (glpat-...) Secret. |
| GITLAB_MCP_SKIP_TLS_VERIFY | No | Skip TLS certificate verification for self-signed certs (default: false) |
| GITLAB_MCP_TOOL_SURFACE | No | Tool catalog selector: dynamic, meta, or individual (default: dynamic) |
| GITLAB_MCP_CAPABILITY_SURFACE | No | Resource and prompt catalog selector: full or minimal (default: full); resource subscriptions require full |
| GITLAB_MCP_META_PARAM_SCHEMA | No | Meta-tool input schema detail: opaque, compact, or full (default: opaque) |
| GITLAB_MCP_TIER | No | GitLab tier: free/ce, premium or ultimate, used as given. When unset, detected from the instance license, then from the plans of the namespaces the token administers, falling back to free. Gates Premium and Ultimate actions; GitLab.com Ultimate also serves the Orbit Knowledge Graph tools |
| GITLAB_MCP_READ_ONLY | No | Read-only mode: removes every mutating action from the served surface; reads keep working (default: false) |
| GITLAB_MCP_SAFE_MODE | No | Safe mode: a mutating action returns a preview card naming the action and echoing its arguments instead of running; reads keep working (default: false) |
| GITLAB_MCP_EMBEDDED_RESOURCES | No | Append EmbeddedResource content blocks (clickable links to MCP resources) to get_* tool results (default: true) |
| GITLAB_MCP_EXCLUDE_TOOLS | No | Comma-separated tool names, group names or canonical action IDs to exclude, on every surface (e.g. gitlab_admin,gitlab_runner) |
| GITLAB_MCP_IGNORE_SCOPES | No | Skip the scope filter and the read_api narrowing and register all tools regardless of token permissions; a token carrying neither read_api nor api is still refused (default: false) |
| GITLAB_MCP_UPLOAD_MAX_FILE_SIZE | No | Largest local file an upload or file-reading action accepts, in bytes or with a KB, MB or GB suffix (e.g. 2GB); at most 1 TB (default: 2147483648, 2 GB) |
| GITLAB_MCP_ALLOWED_UPLOAD_DIRS | No | Extra OS path-list-separated directories an action may read a local file from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_DOWNLOAD_DIRS | No | Extra OS path-list-separated directories an action may write a downloaded file into; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_ALLOWED_IMPORT_DIRS | No | Extra OS path-list-separated directories a project or group import archive may be read from; the working directory (unless it is the filesystem root or your home directory) and the OS temp directory are always allowed. Unused in HTTP mode, which refuses local paths |
| GITLAB_MCP_RATE_LIMIT_RPS | No | Rate limit per credential, in requests per second, on every call that reaches GitLab, with tools/list charged to a bucket of its own; 0, the default on stdio, disables it (default: 0) |
| GITLAB_MCP_RATE_LIMIT_BURST | No | Token-bucket burst size when GITLAB_MCP_RATE_LIMIT_RPS is greater than 0 (default: 40) |
| GITLAB_MCP_LOG_LEVEL | No | Logging verbosity (default: info) |
