@gitkraken/gk

com.gitkraken/gk-cli · version 3.1.77 · 80,909 weekly npm downloads · audited 2026-11-03

Notes

Findings

No hidden-instruction or invisible-character findings in any tool, prompt, or resource description.

Claude Connectors Directory readiness

❌ Every tool has a title Missing on 31 of 31: app_tool_box, app_update_user_preferences, git_add, git_blame and 27 more
✅ Every tool declares readOnlyHint or destructiveHint 31 of 31 tools
✅ Tool names are 64 characters or fewer All within limit
✅ Descriptions avoid instructions about model behavior or other tools None found
✅ No hidden instructions or invisible characters in tool metadata None found

Checks the directory's published tool requirements that are visible from tools/list. Passing them does not guarantee acceptance.

What this server's tools can do

Makes outbound web requests: git_fetch, pull_request_assigned_to_me, pull_request_create, pull_request_create_review, pull_request_get_comments, pull_request_get_detail

Not a vulnerability by itself. It tells you what an injected prompt could ask this server to do, so you can decide which tools need approval.

Supply chain

Install scripts: yes (postinstall): code runs on install, before the server starts
npm provenance: no
Source repository linked: yes
License: CC-BY-3.0-US
Direct dependencies: 3

Tools (31)

Name	Hint	Description
`app_tool_box`	writes	Internal helper for GitKraken MCP apps. App-only — agents must not call this tool.
`app_update_user_preferences`	writes	Update GitKraken CLI user preferences for MCP apps. App-only; agents must not call this tool.
`git_add`	destructive	Add file contents to the index (git add <pathspec>).
`git_blame`	read-only	Show what revision and author last modified each line of a file (git blame <file>).
`git_branch`	destructive	List or create branches (git branch).
`git_checkout`	destructive	Switch branches or restore working tree files (git checkout <branch>).
`git_commit`	destructive	Record changes to the repository (git commit -m <message> [files...]).
`git_commit_composer`	read-only	Show the commit composer for a repository, will open a UI if client supports it.
`git_fetch`	writes	Download objects and refs from another repository (git fetch).
`git_graph`	read-only	Show the commit graph for a repository (git log --graph), will open a UI if client supports it.
`git_log_or_diff`	read-only	Show commit logs or changes between commits (git log --oneline or git diff).
`git_pull`	destructive	Fetch from and integrate with another repository or a local branch (git pull).
`git_push`	destructive	Update remote refs along with associated objects (git push).
`git_resolve`	read-only	Show the conflict resolution UI for a repository, will open a UI if client supports it.
`git_stash`	destructive	Stash the changes in a dirty working directory (git stash).
`git_status`	read-only	Show the working tree status (git status), will open a UI if client supports it.
`git_worktree`	destructive	List or add git worktrees (git worktree <action>).
`gitkraken_workspace_list`	read-only	Lists all Gitkraken workspaces
`gitlens_launchpad`	read-only	Gitlens Launchpad. Gets your open pull requests prioritized by what needs attention: ready to merge, has conflicts, awaiting review, etc. Helpful for checking todos, outstanding tasks, or deciding what to work on next.
`gitlens_start_review`	destructive	Gitlens Start Review. Creates a dedicated worktree and reviews your PR with an AI agent.
`gitlens_start_work`	destructive	Gitlens Start Work. Creates a work based on an issue. This tool will create a branch and link it with the issue, keeping context visible throughout your work.
`issues_add_comment`	destructive	Add a comment to an issue
`issues_assigned_to_me`	read-only	Fetch issues assigned to the user. Set assigned_to_me=false to broaden the result to all visible issues. To filter server-side by assignee, set unassigned=true for issues with no assignee, or assigned_to=<user> for issue…
`issues_create`	destructive	Create a new issue. For Jira, repository_name is the project key. For Linear, repository_organization is the team UUID, key, or name.
`issues_get_detail`	read-only	Retrieve detailed information about a specific issue by its unique ID. For Jira Epics, the response includes a childIssues array containing all issues linked to the epic.
`pull_request_assigned_to_me`	read-only	Search pull requests where you are the author or assignee. Set reviewer to true to also include pull requests where you are a requested reviewer (github and gitlab only).
`pull_request_create`	destructive	Create a new pull request
`pull_request_create_review`	destructive	Create a review for a pull request
`pull_request_get_comments`	read-only	Get all the comments in a pull requests
`pull_request_get_detail`	read-only	Get an specific pull request
`repository_get_file_content`	read-only	Get file content from a repository

Check your own setup

npx mcpvetter scan --live

Badge

Add this to a README:

[![MCPVetter](https://mcpvetter.com/badge/gitkraken-gk.svg)](https://mcpvetter.com/servers/gitkraken-gk)

Publish this server?

Get the MCPVetter verified badge, a re-audit within 24 hours of every npm release, and an email whenever tools, findings, or Claude directory readiness change. $29 per server per month. You prove ownership first, free.