get_branch_diffs

What get_branch_diffs does on Gitlab Mcp

AI agents call get_branch_diffs to retrieve information from Gitlab Mcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_branch_diffs is rated Low

This tool purely queries and retrieves diff information between branches or commits. It performs no mutations, deletions, executions, or financial operations. The blast radius of misuse is minimal—an AI agent could view sensitive code patterns or internal logic, but cannot alter repositories, trigger pipelines, or cause destructive effects.

From the tool's definition Tool name 'get_branch_diffs' and description 'Get diffs between two branches or commits' both indicate a retrieval operation that compares and displays code differences without modifying any data.

The rule that runs get_branch_diffs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Gitlab Mcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_branch_diffs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_branch_diffs": {}
  }
}

Questions about get_branch_diffs