gitlab_list_branches

What gitlab_list_branches does on Gitlab

AI agents call gitlab_list_branches to retrieve information from Gitlab without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gitlab_list_branches is rated Low

This tool performs a straightforward data retrieval operation—listing branches and their metadata. It has no side effects, does not execute code, does not modify state, and does not delete or move resources. The blast radius of misuse is minimal; an agent could at worst enumerate repository structure information that is typically already visible to authorized users. It cleanly fits the 'Read' category as defined.

From the tool's definition Tool name 'gitlab_list_branches' and description 'List all branches in a project with protection status and last commit info' indicate a read-only operation that retrieves and queries branch data without modifying or executing anything.

The rule that runs gitlab_list_branches safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Gitlab, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gitlab_list_branches, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gitlab_list_branches": {}
  }
}

Questions about gitlab_list_branches