registry / record

@modelcontextprotocol/server-gitlab

npm / sealed 2026-06-12 / No. da26d0e8

re-scan this server gate it in your CI

> throne registry @modelcontextprotocol/server-gitlab sealed

This server runs. It just needs your API keythe server installs and starts, then exits asking for an API key — GITLAB_PERSONAL_ACCESS_TOKEN environment variable is not set

receiptsealed evidence

scan id: da26d0e865984faebcceb7431d7f7fab
target: @modelcontextprotocol/server-gitlab
sealed at: 2026-06-12 06:54:07Z
evidence hash: sha256:76b5bfca68a4fc9c55607fa4ec2e79f4a08294c60c366d84ebdc92ea381ec30f

01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake — stderr: GITLAB_PERSONAL_ACCESS_TOKEN environment variable is not set

02discoverSKIPPED0ms

not run — server never launched

03validate_schemasSKIPPED0ms

not run — server never launched

04smoke_test_toolsSKIPPED0ms

not run — server never launched

05error_handlingSKIPPED0ms

not run — server never launched

06streamingSKIPPED0ms

not run — server never launched

07resource_lifecycleSKIPPED0ms

not run — server never launched

08concurrent_callsSKIPPED0ms

not run — server never launched

09reconnectSKIPPED0ms

not run — server never launched

01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake — stderr: GITLAB_PERSONAL_ACCESS_TOKEN environment variable is not set

02discoverSKIPPED0ms

not run — server never launched

03validate_schemasSKIPPED0ms

not run — server never launched

04smoke_test_toolsSKIPPED0ms

not run — server never launched

05error_handlingSKIPPED0ms

not run — server never launched

06streamingSKIPPED0ms

not run — server never launched

07resource_lifecycleSKIPPED0ms

not run — server never launched

08concurrent_callsSKIPPED0ms

not run — server never launched

09reconnectSKIPPED0ms

not run — server never launched

chatgpt desktopemulation profile pending real-traffic captureCOMING SOON

SECURITY: REVIEW / 2 finding(s) / review material, not a verdict

LOWTHR-INSTALL-03 / Install-time script execution (npm lifecycle)

"prepare" runs on git-dependency installs and local dev (not registry installs): 'npm run build'

package/package.json

LOWTHR-NET-05 / Hardcoded outbound endpoints

1 non-local endpoint host(s) referenced in code — verify each is expected for this server's purpose: gitlab.com (package/dist/index.js:18)

package/dist/index.js:18

VERDICT: NEEDS YOUR API KEYSANDBOXED RUN — submitted server executed in a disposable microVM — compatibility not assessable: needs credentials: the server installs and starts, then exits asking for an API key — GITLAB_PERSONAL_ACCESS_TOKEN environment variable is not set / security: review — 2 finding(s), 0 highsealed by THRONE / No. da26d0e8 / 2026-06-12

executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.