MCP server community
Risk level
high
65/100

zereight-gitlab

zereight-gitlab is a community-maintained MCP server from zereight. Anomity scores its risk at 65 out of 100 (high). It matches 1 dangerous capability combination.

network:outbound credentials:access git:access

Analysis summary

zereight-gitlab is a community-maintained MCP server from zereight. Anomity scores its risk at 65 out of 100 (high). It matches 1 dangerous capability combination.

Why this entry scored 65 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is community-maintained, trust adjusts the score by -10. Declared high-risk capabilities add +10 (capped at +30). It matches 1 dangerous capability combination, which contributes additional severity weight. The clamped result is 65, placing it in the high band.

See the full scoring formula →

Findings

  • Established community project Trust offset
    Contribution to score: -10
  • 1 high-risk capability: credentials:access High
    Contribution to score: +10
  • Source code exfiltration risk (high) High
    Evidence
    Git repository access combined with outbound network access can push private source code off the machine.
    Contribution to score: +15

Capabilities

Every capability the entry declares, with the security implication of each.

  • network:outbound Outbound network
    Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access.
  • credentials:access Credentials access
    Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment.
  • git:access Git access
    Reads or writes through git. Allows changes to commit history, branches, and remotes.

Dangerous combinations matched

Capability pairings that compound into well-known attack patterns.

  • Source code exfiltration risk high
    Git repository access combined with outbound network access can push private source code off the machine.
    git:access network:outbound