{"slug": "gitlab-19-5-makes-agentic-development-a-governed-part-of-the-devops-platform", "title": "GitLab 19.5 Makes Agentic Development a Governed Part of the DevOps Platform", "summary": "GitLab released GitLab 19.5 on October 15, making the GitLab MCP server generally available and adding governance controls that let organizations track external AI agents such as Claude Code, Cursor, and Codex through the AI Governance Dashboard. The release sets MCP rate limits on GitLab.com at 60 requests per minute for Free users and 600 for Premium and Ultimate users, and adds an opt-in auto mode to GitLab Duo CLI that lets agents run tools without per-command approval. GitLab also made GitLab Secrets Manager, built on OpenBao, generally available and expanded security configuration profiles for Secret Detection and SAST.", "body_md": "[GitLab 19.5](https://docs.gitlab.com/releases/19/gitlab-19-5-released/), released on October 15, puts agentic software development and governance at the centre of the platform, making its [GitLab MCP](https://docs.gitlab.com/user/model_context_protocol/mcp_server/) server generally available while expanding how external AI agents can interact with GitLab.\n\nThe release allows MCP-compatible tools such as [Claude Code](https://claude.com/product/claude-code) and [Cursor](https://cursor.com/) to access GitLab's broader tool catalogue and invoke [GitLab Duo Agent Platform](https://docs.gitlab.com/user/duo_agent_platform/) agents and flows. At the same time, GitLab is adding controls for governing those external agents, giving security teams visibility into which agents are being used, by whom, and against which projects.\n\nThe generally available GitLab MCP server provides agents with access to GitLab capabilities through the [Model Context Protocol](https://modelcontextprotocol.io/docs/2026-07-28/getting-started/intro). New tools allow agents to discover groups, inspect individual CI/CD artifact files, and start or monitor GitLab Duo agents and flows. Administrators can also select which MCP toolsets are exposed, reducing unnecessary tools and the context they consume.\n\nGiving an agent every available tool increases both context consumption and the number of actions the model could potentially take. Toolset selection provides a relatively simple form of least-privilege agent design.\n\nGitLab.com also introduces MCP rate limits of 60 requests per minute for Free users and 600 for Premium and Ultimate users, with reconnects and retries counting towards the limit.\n\nOne of the more significant additions is the ability to bring [Externally Connected Agents](https://docs.gitlab.com/user/ai-governance/externally-connected-agents/) into GitLab's AI Governance capabilities.\n\nPreviously, the [AI Governance Dashboard](https://docs.gitlab.com/user/ai-governance/governance-dashboard/) focused on GitLab Duo Agent Platform agents. GitLab 19.5 allows tools such as Claude Code, Cursor, and Codex to be connected through the GitLab CLI. Once configured, organisations can record qualifying agent sessions, including the user, agent, project, and timing, with activity appearing alongside GitLab's own agents. Audit events can also be streamed to a SIEM.\n\nThis is an important step beyond simply providing an MCP endpoint. Connectivity creates capability; governance determines whether that capability can be safely used at organisational scale.\n\nGitLab Duo CLI also gains an auto mode, allowing agents to execute tools without requesting approval for every shell command, Git operation, or MCP call. The feature is disabled by default and can be controlled at instance, group, and project levels, while tools explicitly marked Always Deny remain blocked.\n\nThe /goal command is also now generally available, allowing developers to describe an open-ended objective and have GitLab Duo delegate implementation and verification to a governed flow.\n\nTogether, these features move GitLab closer to an agent operating model in which developers provide intent while agents execute multiple steps across the development environment.\n\nThat makes the governance controls increasingly important: the more autonomous the agent becomes, the less practical it is to rely on a human approving every individual action.\n\nThe release also makes [GitLab Secrets Manager](https://docs.gitlab.com/ci/secrets/secrets_manager/) generally available. Built on [OpenBao](https://openbao.org/), it integrates with existing GitLab group and project permissions, scopes secrets to the jobs that require them, and generates audit events for secret operations.\n\nGitLab is also expanding security configuration profiles, allowing organisations to centrally customise settings such as excluded paths, analyzer images and full-history scans for Secret Detection and SAST rather than repeating configuration in every project's CI/CD file.\n\nThese changes complement the agent features by strengthening the controls around the repositories, credentials, and pipelines that agents may access.\n\nGitLab's direction increasingly resembles GitHub's strategy of turning [coding agents into participants in the software lifecycle](https://github.com/enterprise), but GitLab is placing particular emphasis on connecting external agents to its existing DevSecOps governance model.\n\nGitHub's ecosystem benefits from the reach of [GitHub Copilot](https://github.com/copilot) and coding agents, while tools such as Cursor and Claude Code focus more heavily on the developer's local environment. GitLab's MCP approach instead attempts to make the DevOps platform itself agent-accessible, including repositories, issues, pipelines, artifacts, and GitLab-native agents.\n\nThe competitive question GitLab is looking at is moving beyond which coding assistant generates better code to which platform provides the safest and most useful environment for autonomous agents to perform engineering work.", "url": "https://wpnews.pro/news/gitlab-19-5-makes-agentic-development-a-governed-part-of-the-devops-platform", "canonical_source": "https://www.infoq.com/news/2026/11/gitlab-19-5-agentic-platform/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global", "published_at": "2026-11-06 12:00:00+00:00", "updated_at": "2026-11-06 12:19:46.736701+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-policy", "developer-tools", "ai-tools"], "entities": ["GitLab", "GitLab 19.5", "GitLab MCP server", "GitLab Duo Agent Platform", "Claude Code", "Cursor", "Codex", "OpenBao"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/gitlab-19-5-makes-agentic-development-a-governed-part-of-the-devops-platform", "markdown": "https://wpnews.pro/news/gitlab-19-5-makes-agentic-development-a-governed-part-of-the-devops-platform.md", "text": "https://wpnews.pro/news/gitlab-19-5-makes-agentic-development-a-governed-part-of-the-devops-platform.txt", "jsonld": "https://wpnews.pro/news/gitlab-19-5-makes-agentic-development-a-governed-part-of-the-devops-platform.jsonld"}}