At the same time, GitLab is adding controls for governing those external agents, giving security teams visibility into which agents are being used, by whom, and against which projects. The generally available GitLab MCP server provides agents with access to GitLab capabilities through the Model Context Protocol. New tools allow agents to discover groups, inspect individual CI/CD artifact files, and start or monitor GitLab Duo agents and flows.
Administrators can also select which MCP toolsets are exposed, reducing unnecessary tools and the context they consume. Giving an agent every available tool increases both context consumption and the number of actions the model could potentially take. Toolset selection provides a relatively simple form of least-privilege agent design.
