# zereight-gitlab

> zereight-gitlab is a community-maintained MCP server from zereight. Anomity scores its risk at 65 out of 100 (high). It matches 1 dangerous capability combination.

- **Canonical URL:** https://catalog.anomity.ai/mcp/zereight-gitlab
- **Kind:** MCP server
- **Publisher:** zereight
- **Trust level:** community
- **Risk score:** 65/100 (high)
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/mcp/zereight-gitlab

## Why it scored 65

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Established community project | -10 | trust offset |  |
| 1 high-risk capability: credentials:access | +10 | high |  |
| Source code exfiltration risk (high) | +15 | high | Git repository access combined with outbound network access can push private source code off the machine. |

Clamped result: **65/100**, band **high**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |
| `credentials:access` | Credentials access | Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment. |
| `git:access` | Git access | Reads or writes through git. Allows changes to commit history, branches, and remotes. |

## Dangerous combinations matched

### Source code exfiltration risk (high)

Git repository access combined with outbound network access can push private source code off the machine.

Capabilities: `git:access`, `network:outbound`

## Related MCP servers

- [azure-devops](https://catalog.anomity.ai/mcp/azure-devops) — risk 35 (medium)
- [GitHub](https://catalog.anomity.ai/mcp/github) — risk 35 (medium)
- [GitHub MCP Server](https://catalog.anomity.ai/mcp/github-mcp-server) — risk 35 (medium)
- [github-binary](https://catalog.anomity.ai/mcp/github-binary) — risk 35 (medium)
- [github-official](https://catalog.anomity.ai/mcp/github-official) — risk 35 (medium)
- [github-remote](https://catalog.anomity.ai/mcp/github-remote) — risk 35 (medium)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json