Yes, Repocollab is free to use.

How do I install Repocollab?

Repocollab is a local plugin. Install it using npm package: @reneturcios/repocollab and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Repocollab safe to use?

Repocollab scored 5.6/10 (moderate risk) in MCP Marketplace's automated security scan. It has 2 high or critical findings to review. It's listed, but review the security report on this page before installing.

What AI apps work with Repocollab?

Repocollab uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Repocollab MCP Server

by CloudCorpRecords

Developer ToolsModerate5.6MCP RegistryLocal

Free

Server data from the Official MCP Registry

GitLab projects, branches, files, issues and merge requests via the GitLab REST API.

About

GitLab projects, branches, files, issues and merge requests via the GitLab REST API.

Security Report

5.6

Moderate5.6Moderate Risk

repocollab is a clean, focused GitLab MCP server that authenticates via a personal access token in an environment variable, uses zod validation on tool calls, and talks only to the GitLab REST API at a configurable base URL. Its permissions (network_http to GitLab, env_vars for the token, and write operations on GitLab projects) match its stated purpose, and the only notable observations are minor: the token is attached to a user-configurable base URL and a broad catch swallows errors in the file-existence probe. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-repocollab": {
      "args": [
        "-y",
        "@reneturcios/repocollab"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

repocollab

repocollab puts the everyday GitLab project workflow behind an MCP server: find a project, create or fork one, cut a branch, read and write files, and open and track issues and merge requests. It is a core subset of the documented GitLab MCP surface — the twelve tools an agent reaches for most — talking to the GitLab REST v4 API.

Authentication is a personal access token in GITLAB_PERSONAL_ACCESS_TOKEN, sent as a Bearer token. By default the server talks to https://gitlab.com/api/v4; point GITLAB_API_URL at a self-managed instance to use that instead. A project_id is a string throughout: either the numeric project id or the URL-encoded project path both work.

Install

npx @reneturcios/repocollab search_repositories --search my-project
docker run -i -e GITLAB_PERSONAL_ACCESS_TOKEN ghcr.io/cloudcorprecords/repocollab

CLI

repocollab search_repositories --search my-project
repocollab create_repository --name demo --visibility private
repocollab get_file_contents --project-id group/demo --file-path README.md --ref main
repocollab create_issue --project-id 42 --title "Bug report" --labels bug
repocollab list_merge_requests --project-id 42 --state opened
repocollab --version

Exit codes: 0 success, 1 API error, 2 usage error.

MCP server

npx -y @reneturcios/repocollab mcp

{
  "mcpServers": {
    "repocollab": {
      "command": "npx",
      "args": ["-y", "@reneturcios/repocollab", "mcp"],
      "env": { "GITLAB_PERSONAL_ACCESS_TOKEN": "glpat-..." }
    }
  }
}

Tools

Tool	Required	Optional
`search_repositories`	`search`	—
`create_repository`	`name`	`description`, `visibility`
`fork_repository`	`project_id`	`namespace`
`create_branch`	`project_id`, `branch`	`ref`
`get_file_contents`	`project_id`, `file_path`	`ref`
`create_or_update_file`	`project_id`, `file_path`, `content`, `commit_message`, `branch`	`previous_path`
`create_issue`	`project_id`, `title`	`description`, `labels`
`list_issues`	`project_id`	`state`, `per_page`, `page`
`get_issue`	`project_id`, `issue_iid`	—
`create_merge_request`	`project_id`, `title`, `source_branch`, `target_branch`	`description`
`list_merge_requests`	`project_id`	`state`, `per_page`, `page`
`get_merge_request`	`project_id`, `merge_request_iid`	—

create_or_update_file checks whether the file already exists on the target branch and creates it (POST) or updates it (PUT) accordingly. A missing token is reported as a tool error naming GITLAB_PERSONAL_ACCESS_TOKEN; upstream HTTP errors surface with their status and GitLab's message.

Out of scope in this subset: pipelines and CI, wiki, snippets, milestones, label/epic management, user and group administration, protected branches, repository tree/archive/compare detail, merge request approvals, discussions and notes beyond get_merge_request, and search beyond projects.

Development

npm install
npm run build
npm test
npm run dev

Tests run entirely on fake-fetch fixtures; no network is used.

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.