Diátaxis type: Reference Domain: Security & Monitoring Individual tools: 28 Meta-tools:
gitlab_feature_flags,gitlab_admin,gitlab_user(GITLAB_MCP_TOOL_SURFACE=metacatalog) Dynamic IDs:admin.*,feature_flags.*,user.*(default surface, viagitlab_execute_action) GitLab API: Feature Flags · Feature Flag User Lists · Secure Files · Error Tracking · Alert Management · Impersonation Tokens Audience: 👤 End users, AI assistant users💡 Looking for the deployment security model? This page lists the tool schemas. For authentication, TLS, and transport-security guidance, see Security.
The security & monitoring domain covers project feature flags, feature flag user lists, CI/CD secure files, error tracking settings and client keys, alert management metric images, and user impersonation/personal access token management (admin only).
On the default dynamic surface, these operations are the admin.*, feature_flags.*, user.* entries of the canonical action catalog: find them with gitlab_find_action and run them with gitlab_execute_action by domain.action ID. With GITLAB_MCP_TOOL_SURFACE=individual, each is the tool named in the tables below.
With GITLAB_MCP_TOOL_SURFACE=meta, feature flag and feature-flag user-list actions are consolidated into gitlab_feature_flags with feature_flag_* and ff_user_list_* action prefixes. Secure file, error tracking, and alert metric image actions are exposed through gitlab_admin action prefixes, while user impersonation and personal access token actions are exposed through gitlab_user or gitlab_access depending on scope.
"Run a security scan on MR !15" "Check for vulnerabilities in my project" "Review the security of merge request !23"
| Annotation | ReadOnly | Destructive | Idempotent | Description |
|---|---|---|---|---|
| Read | Yes | No | Yes | Safe read-only operation |
| Create | — | No | — | Creates a new resource |
| Update | — | No | Yes | Modifies an existing resource |
| Delete | — | Yes | Yes | Destroys a resource; protected by confirmation |
Tools marked Delete require user confirmation before execution.
List feature flags for a project.
| Annotation | Read |
|---|
Get a single feature flag by name.
| Annotation | Read |
|---|
Create a new feature flag for a project.
| Annotation | Create |
|---|
Update an existing feature flag.
| Annotation | Update |
|---|
Delete a feature flag.
| Annotation | Delete |
|---|
Destructive: Protected by confirmation prompt.
List feature flag user lists for a project.
| Annotation | Read |
|---|
Get a single feature flag user list by IID.
| Annotation | Read |
|---|
Create a new feature flag user list.
| Annotation | Create |
|---|
Update a feature flag user list.
| Annotation | Update |
|---|
Delete a feature flag user list.
| Annotation | Delete |
|---|
Destructive: Protected by confirmation prompt.
List CI/CD secure files for a GitLab project.
| Annotation | Read |
|---|
Show details of a CI/CD secure file.
| Annotation | Read |
|---|
Create a new CI/CD secure file.
| Annotation | Create |
|---|
Remove a CI/CD secure file.
| Annotation | Delete |
|---|
Destructive: Protected by confirmation prompt.
Get error tracking settings for a GitLab project.
| Annotation | Read |
|---|
Enable or disable error tracking for a GitLab project.
| Annotation | Update |
|---|
List error tracking client keys for a GitLab project.
| Annotation | Read |
|---|
Create a new error tracking client key for a GitLab project.
| Annotation | Create |
|---|
Delete an error tracking client key for a GitLab project.
| Annotation | Delete |
|---|
Destructive: Protected by confirmation prompt.
List metric images for a GitLab alert.
| Annotation | Read |
|---|
Upload a metric image for a GitLab alert.
| Annotation | Create |
|---|
Update a metric image for a GitLab alert.
| Annotation | Update |
|---|
Delete a metric image from a GitLab alert.
| Annotation | Delete |
|---|
Destructive: Protected by confirmation prompt.
List all impersonation tokens for a GitLab user by user ID. Optionally filter by state.
| Parameter | Type | Required | Description |
|---|---|---|---|
user_id |
int | Yes | GitLab user ID |
state |
string | No | Filter by state: all/active/inactive |
page |
int | No | Page number for pagination |
per_page |
int | No | Items per page (max 100) |
| Annotation | Read |
|---|
Retrieve a specific impersonation token by user ID and token ID.
| Parameter | Type | Required | Description |
|---|---|---|---|
user_id |
int | Yes | GitLab user ID |
token_id |
int | Yes | Impersonation token ID |
| Annotation | Read |
|---|
Create an impersonation token for a GitLab user (admin only). Requires user ID, token name, and scopes.
| Parameter | Type | Required | Description |
|---|---|---|---|
user_id |
int | Yes | GitLab user ID |
name |
string | Yes | Name of the impersonation token |
scopes |
[]string | Yes | Array of scopes (api, read_user, read_api, read_repository, write_repository, etc.) |
expires_at |
string | No | Token expiration date (YYYY-MM-DD) |
| Annotation | Create |
|---|
Revoke an impersonation token for a GitLab user (admin only).
| Parameter | Type | Required | Description |
|---|---|---|---|
user_id |
int | Yes | GitLab user ID |
token_id |
int | Yes | Impersonation token ID to revoke |
| Annotation | Delete |
|---|
Destructive: Protected by confirmation prompt.
Create a personal access token for a specific GitLab user (admin only). Requires user ID, token name, and scopes.
| Parameter | Type | Required | Description |
|---|---|---|---|
user_id |
int | Yes | GitLab user ID |
name |
string | Yes | Name of the personal access token |
scopes |
[]string | Yes | Array of scopes |
description |
string | No | Description for the token |
expires_at |
string | No | Token expiration date (YYYY-MM-DD) |
| Annotation | Create |
|---|
| # | Tool Name | Category | Annotation |
|---|---|---|---|
| 1 | gitlab_feature_flag_list |
Feature Flags | Read |
| 2 | gitlab_feature_flag_get |
Feature Flags | Read |
| 3 | gitlab_feature_flag_create |
Feature Flags | Create |
| 4 | gitlab_feature_flag_update |
Feature Flags | Update |
| 5 | gitlab_feature_flag_delete |
Feature Flags | Delete |
| 6 | gitlab_ff_user_list_list |
FF User Lists | Read |
| 7 | gitlab_ff_user_list_get |
FF User Lists | Read |
| 8 | gitlab_ff_user_list_create |
FF User Lists | Create |
| 9 | gitlab_ff_user_list_update |
FF User Lists | Update |
| 10 | gitlab_ff_user_list_delete |
FF User Lists | Delete |
| 11 | gitlab_list_secure_files |
Secure Files | Read |
| 12 | gitlab_show_secure_file |
Secure Files | Read |
| 13 | gitlab_create_secure_file |
Secure Files | Create |
| 14 | gitlab_remove_secure_file |
Secure Files | Delete |
| 15 | gitlab_get_error_tracking_settings |
Error Tracking | Read |
| 16 | gitlab_enable_disable_error_tracking |
Error Tracking | Update |
| 17 | gitlab_list_error_tracking_client_keys |
Error Tracking | Read |
| 18 | gitlab_create_error_tracking_client_key |
Error Tracking | Create |
| 19 | gitlab_delete_error_tracking_client_key |
Error Tracking | Delete |
| 20 | gitlab_list_alert_metric_images |
Alert Management | Read |
| 21 | gitlab_upload_alert_metric_image |
Alert Management | Create |
| 22 | gitlab_update_alert_metric_image |
Alert Management | Update |
| 23 | gitlab_delete_alert_metric_image |
Alert Management | Delete |
| 24 | gitlab_list_impersonation_tokens |
Impersonation Tokens | Read |
| 25 | gitlab_get_impersonation_token |
Impersonation Tokens | Read |
| 26 | gitlab_create_impersonation_token |
Impersonation Tokens | Create |
| 27 | gitlab_revoke_impersonation_token |
Impersonation Tokens | Delete |
| 28 | gitlab_create_personal_access_token |
Impersonation Tokens | Create |
The following tools are annotated with DestructiveHint: true and require user confirmation before execution:
gitlab_feature_flag_delete— deletes a feature flaggitlab_ff_user_list_delete— deletes a feature flag user listgitlab_remove_secure_file— removes a CI/CD secure filegitlab_delete_error_tracking_client_key— deletes an error tracking client keygitlab_delete_alert_metric_image— deletes a metric image from an alertgitlab_revoke_impersonation_token— revokes an impersonation token (admin only)