{"slug": "gitlab-19-5-mcp-server-ga-six-tools-deprecated", "title": "GitLab 19.5: MCP Server GA — Six Tools Deprecated", "summary": "GitLab 19.5, shipped October 15, made the GitLab MCP server generally available across Free, Premium and Ultimate tiers on GitLab.com, Self-Managed and Dedicated, while deprecating six MCP tools that are already removed from `tools/list` but still respond to direct calls until a future release. The release adds tools including `semantic_search`, `get_artifact_file`, `get_repository_file` and Duo Agent Platform tools (`start_duo_session`, `get_duo_session`, `list_duo_agents_and_flows`) that let external agents hand work to GitLab's own agent layer, and consolidates the deprecated merge request and pipeline tools into `get_merge_request` and `get_pipeline` calls using an `include` parameter. GitLab also set GitLab.com MCP rate limits effective October 15 at 60 requests per minute for Free users and 600 for Premium and Ultimate, with every reconnect and retry counting toward the limit, and made GitLab Secrets Manager generally available for Premium and Ultimate on GitLab.com and Self-Managed.", "body_md": "GitLab 19.5 shipped on October 15, and the headline is that the MCP server is now generally available. The real gotcha is buried further down the release notes: six MCP tools were quietly deprecated in the same release, and if your agents are calling any of them, they’ll keep working for now — but they’ve already been removed from `tools/list`. GitLab will pull them entirely. Check your configs today.\n\n## MCP Server Is Now GA\n\nThe GitLab MCP server has been in beta since early 2026. As of 19.5, it’s production-ready and available across all tiers — Free, Premium, and Ultimate — on GitLab.com, Self-Managed, and Dedicated. Any MCP-compatible agent works: Claude Code, Cursor, and anything else that speaks the protocol.\n\nThe GA release ships a meaningful expansion of available tools. New additions include `semantic_search` for finding code by meaning rather than file path, `get_artifact_file` for reading a single file from a CI/CD job’s artifacts without downloading the whole archive, `get_repository_file` for reading files at any ref, and a suite of Duo Agent Platform tools — `start_duo_session`, `get_duo_session`, and `list_duo_agents_and_flows` — that let external agents hand work off to GitLab’s own agent layer.\n\nThis is a meaningful shift. GitLab is not just exposing its data to agents — it’s making its own agent infrastructure callable. An external agent can now delegate a task to a GitLab Duo flow and get the result back. That’s a different model from GitHub’s MCP offering, which remains focused on data access rather than agent-to-agent handoffs.\n\n## Six Tools Deprecated: Migrate Now\n\nThese six tools are unlisted in 19.5 — they won’t show up in `tools/list`, but they still respond to direct calls while teams migrate. They will be removed in a future release.\n\n- `get_merge_request_commits` → use`get_merge_request` with`include: [\"commits\"]`\n- `get_merge_request_diffs` → use`get_merge_request` with`include: [\"diffs\"]`\n- `get_merge_request_pipelines` → use`get_merge_request` with`include: [\"pipelines\"]`\n- `get_merge_request_conflicts` → use`get_merge_request` with`include: [\"conflicts\"]`\n- `get_merge_request_notes` → use`get_merge_request` notes facet\n- `get_pipeline_jobs` → use`get_pipeline` with`include: [\"jobs\"]`\n\nThe pattern is intentional. GitLab is consolidating multiple specialized tools into single tools with an `include` parameter — fewer tools, less LLM context overhead, same data. Expect this to continue in 19.6 and beyond. If you’ve built agents against the GitLab MCP, audit every tool call now rather than waiting for the silent failure. The full migration reference is in the [GitLab MCP server tools docs](https://docs.gitlab.com/user/model_context_protocol/mcp_server_tools/).\n\n## Rate Limits Are Live\n\nAlso effective October 15: rate limits on GitLab.com. Free users get 60 MCP requests per minute. Premium and Ultimate get 600. Every reconnect and retry counts toward the limit — so if your agent retries aggressively on failures, you’ll burn your budget faster than the raw request count suggests.\n\nFor teams running automation on the Free tier, 60 req/min is tight. A single agent doing a code review loop — fetch MR, fetch diffs, post comments, update status — can hit that ceiling in under a minute on a busy PR. Consider batching with `include` parameters (which also reduces total tool call count) or moving to Premium if the workflow is business-critical.\n\n## Secrets Manager Reaches GA\n\nGitLab Secrets Manager, built on [OpenBao](https://openbao.org/) (the open-source HashiCorp Vault fork), is generally available in 19.5 for Premium and Ultimate on GitLab.com and Self-Managed. Dedicated support is coming.\n\nThe core value proposition: secrets scoped to individual CI/CD jobs. Declare what a job needs with the `secrets:` keyword in `.gitlab-ci.yml`, set conditions on branch and environment, and GitLab injects the credential only into matching jobs as a temporary file — masked in logs, encrypted at rest with AES-256-GCM, delivered via short-lived job-bound tokens. No more sharing a single environment secret across an entire pipeline stage. The audit trail follows your existing group and project permissions, so there’s no separate secrets hierarchy to maintain.\n\n## What to Do Now\n\n- **Audit your MCP configs** for the six deprecated tools and update to the`include:` equivalents before they’re removed.\n- **Check your request volume** against the new rate limits, especially on Free tier. Batching with`include` cuts both call count and latency.\n- **Evaluate Secrets Manager** if you’re on Premium or Ultimate and still using environment variables for CI credentials. Job-scoped secrets with audit trails are worth the migration for anything touching production.\n- **Update Duo CLI to 9.22.0+** if you want auto mode for longer-running autonomous workflows — it removes per-call approval prompts for shell commands, git operations, and MCP calls.\n\nFull details: [GitLab 19.5 release notes](https://docs.gitlab.com/releases/19/gitlab-19-5-released/) and the [MCP server GA announcement](https://about.gitlab.com/blog/mcp-server-ga/). The Secrets Manager deep-dive is at [about.gitlab.com/blog/secrets-manager-ga](https://about.gitlab.com/blog/secrets-manager-ga/).", "url": "https://wpnews.pro/news/gitlab-19-5-mcp-server-ga-six-tools-deprecated", "canonical_source": "https://byteiota.com/gitlab-19-5-mcp-server-ga/", "published_at": "2026-10-20 00:08:42+00:00", "updated_at": "2026-10-20 00:15:58.619304+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "developer-tools", "ai-tools"], "entities": ["GitLab", "GitLab 19.5", "GitLab MCP server", "GitLab Duo", "Claude Code", "Cursor", "GitHub", "OpenBao"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/gitlab-19-5-mcp-server-ga-six-tools-deprecated", "markdown": "https://wpnews.pro/news/gitlab-19-5-mcp-server-ga-six-tools-deprecated.md", "text": "https://wpnews.pro/news/gitlab-19-5-mcp-server-ga-six-tools-deprecated.txt", "jsonld": "https://wpnews.pro/news/gitlab-19-5-mcp-server-ga-six-tools-deprecated.jsonld"}}