# GitLab MCP Server vs Graphify (slim)

> Graphify scores 68.8 (B) to GitLab's 67.3 (B) for code repositories. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/gitlab-mcp-vs-graphify.md (~4,500 tokens) · this version ~2,680 tokens · JSON https://www.anchorterminal.com/compare/gitlab-mcp-vs-graphify.json · canonical https://www.anchorterminal.com/compare/gitlab-mcp-vs-graphify
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Graphify scores 68.8 (B) on agent readiness against GitLab MCP Server's 67.3 (B), and leads in 2 of 7 scored categories. GitLab MCP Server leads on schema & documentation, maintenance & community and transparency & trust. Both do code repositories.

- GitLab MCP Server: B 67.3, rank #334 of 1486 · https://www.anchorterminal.com/tools/gitlab-mcp.min.md
- Graphify: B 68.8, rank #271 of 1486 · https://www.anchorterminal.com/tools/graphify.min.md
- GitLab MCP Server, good for Agents working in GitLab projects, merge requests and pipelines, including self-managed instances. github-mcp-server and azure-devops-mcp are the closest listings; teams on GitHub should use GitHub's server. Ahead on Schema & documentation, 85 against 77; Maintenance & community, 85 against 80; Transparency & trust, 87 against 81. Also A hosted endpoint, with nothing to install.
- Graphify, good for A person or team who wants a coding agent to query a structural map of a repository, with docs and papers folded in, before grepping. Ahead on Agent ergonomics, 77 against 66; Payments & pricing, 60 against 30. Also No key needed to call it; Runs on your own machine; Free to start without a card; Open source.

| Category | GitLab MCP Server | Graphify |
| --- | --- | --- |
| Reliability (16%) | 62 | 58 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 85 | 77 |
| Agent ergonomics (13%) | 66 | 77 |
| Security & auth (14%) | 66 | 66 |
| Payments & pricing (10%) | 30 | 60 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 85 | 80 |
| Transparency & trust (7%) | 87 | 81 |

| Fact (where they differ) | GitLab MCP Server | Graphify |
| --- | --- | --- |
| Vendor | GitLab Inc. | Graphify Labs |
| Hosted endpoint | `https://gitlab.com/api/v4/mcp` | no (local only) |
| Transports | Streamable HTTP | stdio, Streamable HTTP |
| Auth | OAuth | None |
| Pricing | Freemium | Free |
| Licence | none | Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE |
| Tools exposed | 47 | 10 |
| MCP registry | `com.gitlab/mcp` | not listed |
| Last release | 2026-10-15 | 2026-11-01 |
| Terms last updated | no date given | couldn't be read |
| Privacy policy last updated | 2026-04-23 | couldn't be read |
| Customer content may train models | not found in the text | couldn't be read |
| Terms restrict automated access | not found in the text | couldn't be read |
| Terms restrict benchmarking | not found in the text | couldn't be read |
| Terms or service can change without notice | not found in the text | couldn't be read |
| Arbitration or class-action waiver | not found in the text | couldn't be read |

Why the edge:
- Payments & pricing, Graphify +30: GitLab MCP Server 30 (No x402, MPP or L402 (0). Plan prices are public for Free and Premium, Ultimate is by quote and GitLab Credits are $1 each, but the MCP server has no per-call price (10). GitLab.com Free needs no card, and the MCP server is on every tier (20). A person signs up, and an administrator must enable MCP and a user must authorise in a browser (0). 0 + 10 + 20 + 0 = 30.); Graphify 60 (Read with the self-hosted rule. No payment protocol (0). The package is free under Apache 2.0, needs no account or card, and builds a code graph with no key, so 20, 20 and 20 on the last three lines. Graphify Cloud, a separate hosted product with public plan prices, is not scored here.)
- Agent ergonomics, Graphify +11: GitLab MCP Server 66 (About 47 tools by default, plus 5 Duo tools where Duo is on, so more than 30 (5), with toolset and single-tool headers to cut the list (plus 10). Cursor pagination with first and after on most list tools, include facets one at a time, byte offsets and limits on files, jobs and artifacts (20). Documented error cases and a structured rate_limited result (15). The docs don't say whether tools carry readOnlyHint or destructiveHint; accept_merge_request has a SHA guard, and 19.4 governance sets write and delete tools to Always Ask for Duo (8). Sensible default toolsets, but no official SDKs for the REST API in two languages were found on the pages read (8). 15 + 20 + 15 + 8 + 8 = 66.); Graphify 77 (MCP reading. Ten compact tools, about 7,900 characters of tool-definition source in serve.py (25). `token_budget` on `query_graph`, `get_neighbors` and `get_community` (default 2,000), `depth` capped at 6, `max_hops`, `top_n`, `relation_filter` and `context_filter`, and `--budget` on the CLI. No cursor paging (17 of 20). Exit codes for answer, ambiguous name and no match, ambiguous names refused with candidates instead of guessed, and a clear message when graph.json is missing or corrupt. MCP errors come back as text (15 of 20). Every tool reads, so calls are safe to repeat, but none carries readOnlyHint or destructiveHint (10 of 20). `graphify install` and `/graphify .` build a first graph, `graph_stats` is the documented first call, and code needs no key. Python only, though the CLI works from any language (10 of 15).)
- Schema & documentation, GitLab MCP Server +8: GitLab MCP Server 85 (The tools reference documents every parameter with its type, required flag and enum values, and the server exposes JSON Schema through MCP; we read the reference, not the source (22). docs.gitlab.com/llms.txt is served (10). Each tool says what it does, and superseded tools name their replacement (`Use get_merge_request with include: commits`), though few say when not to use one (14). Enums for include facets, states, scopes and methods, with documented maximums such as first up to 100 and byte_limit up to 1 MB (13). The docs cover 403 insufficient_scope, 400 for an unknown toolset, 429 headers and troubleshooting for Windows and Claude Code, but give few example responses (11). Per-tool version history and monthly release notes (15). 22 + 10 + 14 + 13 + 11 + 15 = 85.); Graphify 77 (MCP reading. All ten tools carry typed JSON Schema inputs in serve.py, though `get_node` and `get_neighbors` mark no field required and no tool has an output schema (20 of 25). llms.txt at docs.graphify.com, a Markdown copy of every page, llms-full.txt, and an MCP tool reference generated from serve.py (10). Descriptions say what each tool does in one sentence; the three PR tools also say when to call them, the graph tools don't say when not to (10 of 20). Types, defaults and a `bfs`/`dfs` enum, but `depth` is limited to 1 to 6 in text and code rather than in the schema, and `relation_filter` is a free string (10 of 15). Worked examples in the README and docs, documented exit codes 0, 3 and 4, refusals that list candidate nodes, and a troubleshooting page (12 of 15). A dated CHANGELOG.md with 243 dated entries on 1 November 2026, a docs changelog, and `schema_version` in graph.json (15).)
- Transparency & trust, GitLab MCP Server +6: GitLab MCP Server 87 (GitLab's code is public in gitlab-org/gitlab, with the core under MIT and enterprise functions under GitLab's own licence; we didn't establish which licence covers the MCP server code (20). The privacy statement and a sub-processor page of 63 entries name AI providers and their purposes, but that page shows no update date and links no DPA (20). A dated deprecations and removals page and per-tool version history, with superseded tools kept as callable aliases (20). Sub-processors and their locations are disclosed, and Dedicated customers choose their AWS region (18). 20 + 20 + 20 + 18 = 78.); Graphify 81 (The editorial half. Apache 2.0, with the MIT portion before 0.9.25 kept in LICENSE-MIT (30). The README's privacy section says what stays local, which env vars send docs to which provider, that Kimi routes to China and how to turn backends off, and the docs agree. The README still says every query is logged by default while the code and configuration docs say logging is off by default, and graphify.com's security page says the core makes no network calls of its own, which the `claude` CLI fallback for community names stretches (20 of 30). The changelog dates breaking changes and removals, SECURITY.md supports the latest 0.9.x only, and graph.json carries a schema version. No deprecation policy or notice period (8 of 20). No telemetry, stated in the README and on the security page, and none found in the source (20).)
- Maintenance & community, GitLab MCP Server +5: GitLab MCP Server 85 (GitLab 19.5 made the server generally available on 15 October 2026, 22 days before this check, and 19.6 changes are already on GitLab.com (30). Monthly releases 19.3, 19.4 (17 September) and 19.5 each changed MCP tools (20). Issues are public on gitlab.com, with a feedback issue (630189) for the server, but we didn't measure reply times (15). The registry entry com.gitlab/mcp sits under a domain-verified namespace with the right remote, though its version is still 0.0.1 from 2 October 2025 (10). GitLab ships through its own CI with monthly and patch releases; no official multi-language API SDK was found (10). 30 + 20 + 15 + 10 + 10 = 85.); Graphify 80 (0.9.100 was tagged and dated in CHANGELOG.md on 1 November 2026, the day of this check (30). PyPI's pages didn't resolve from the shell on 1 November, so release dates come from the tags and the changelog. 68 dated releases in the 90 days to 1 November, 0.9.33 (5 August) to 0.9.100 (20). The 0.9.97 to 0.9.100 entries credit community pull requests by name, with issue and pull request numbers up to #4933, and the default branch had commits on every day from 25 October to 1 November. Issue threads and reply times weren't read, a judgement call (18 of 25). The official MCP registry still holds only `io.github.Graphify-Labs/graphify`, Graphify Cloud's hosted server at api.graphify.com/mcp; the local `graphify-mcp` isn't listed. Published on PyPI (5 of 15). A frozen uv.lock in CI on four Python versions, dependency floors raised for named CVEs (Pillow and pypdf in 0.9.96, anyio in the `mcp` extra in 0.9.97), and trusted publishing. No Dependabot configuration, and the bandit and pip-audit jobs still carry `continue-on-error` (7 of 10). 30+20+18+5+7 = 80. The 26 October check published 81 on the same lines, which add to 80, so the score is corrected to the sum.)