High-risk tools in Gitlab Mcp
17 of the 279 tools in Gitlab Mcp are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
approve_deploymentExecuteApprove or reject a protected-environment deployment
-
cancel_pipelineExecuteCancel a running pipeline
-
create_deploymentExecuteCreate a deployment
-
create_pipelineExecuteCreate a new pipeline for a branch or tag
-
execute_graphqlExecuteExecute a GitLab GraphQL query
-
omg_next_phaseExecuteAdvance the omg-autopilot workflow to the next phase. Returns the new phase details.
-
orbit_queryExecuteExecute a GitLab Orbit graph query over the indexed SDLC knowledge graph
-
play_pipeline_jobExecuteRun a manual pipeline job
-
play_pipeline_jobsExecutePlay multiple manual pipeline jobs sequentially
-
play_pipeline_scheduleExecuteRun a pipeline schedule immediately
-
retry_pipelineExecuteRetry a failed or canceled pipeline
-
retry_pipeline_jobExecuteRetry a failed or canceled pipeline job
-
stop_environmentExecuteStop an environment
-
stop_stale_environmentsExecuteStop eligible stale environments; protected environments are excluded and environments are stopped, not deleted
-
trigger_pipelineExecuteTrigger a pipeline with a pipeline trigger token
-
wait_for_jobExecuteWait for a job to reach a terminal status
-
wait_for_pipelineExecuteWait for a pipeline to reach a terminal status
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.