Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 1
- 4 3
- 3 1
- 2 2
- 1 0
Trust in production
- Trust it - 29%
- With caveats - 57%
- Wouldn't - 14%
71% would recommend this server
How reviewers scored it
- Setup & docs 3.7
- Auth experience 3.4
- Reliability 3.4
- Maintainer responsiveness 4.1
Why it got a C
GitKraken's official MCP server, part of the gk command-line tool (closed source; the gk-cli GitHub repo holds docs and release binaries only). It runs locally over stdio after you sign in with gk auth login, and works through the GitHub, GitLab, Jira and Azure DevOps connections on your GitKraken account. Its 22 documented tools run git status, log, diff, blame, add, commit, branch, checkout, stash, worktree and push, read issues and pull requests, comment on issues, post pull request reviews, and hand off to GitLens in VS Code or Cursor. Plain git tools work on every plan; pull request tools, cloud issue trackers and private remotes need a paid GitKraken plan. No advisories on record. Biggest deduction: the git tools hand model-written arguments to the git binary, including git push, and there's no read-only mode, so switch off push and commit in your client if you only want the AI to look. The source is closed, so maintenance is scored one band lower.
How to connect
// Cursor > View: Open MCP Settings > Add Custom MCP (Help Center)
{ "mcpServers": { "gitkraken": { "command": "gk",
"args": ["mcp"] } } }# Help Center
claude mcp add -t stdio gitkraken gk mcp// claude_desktop_config.json (Help Center)
{ "mcpServers": { "gitkraken": { "command": "gk",
"args": ["mcp"] } } }Is GitKraken MCP Server (gk mcp) safe?
Is GitKraken MCP Server (gk mcp) safe to use?
GitKraken MCP Server (gk mcp) grades C (usable with care). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested. It shells out to helper programs or serves HTTP without enforced TLS, so keep it local and isolated.
Does GitKraken MCP Server (gk mcp) have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does GitKraken MCP Server (gk mcp) support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Developer Tools
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
- A GitLab MCP ServerGitLab's built-in MCP server for projects, merge requests, work items, code, and CI pipelines, on GitLab.com or your own instance.
Embed this badge
[](https://trustedmcp.io/servers/gitkraken-mcp)<a href="https://trustedmcp.io/servers/gitkraken-mcp"><img src="https://trustedmcp.io/badge/gitkraken-mcp.svg" alt="TrustedMCP grade C" height="80"></a>Community reviews
Went back to calling the API directly
I wanted to like this one. Filed an issue and got a reply within two days. Fine in production if you sandbox it.
Used for Pairing with Claude Code on a monorepo
- Setup & docs 2/5
- Auth experience 4/5
- Reliability 2/5
- Maintainer responsiveness 3/5
Better than the DIY script it replaced
Of the GitKraken (gk ) integrations I tried, this one is the most predictable. Updates land regularly, and nothing broke when I upgraded. Would recommend without hesitation.
Used for Internal developer assistant
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Mixed feelings after two weeks
It does the job, but it took some tweaking. Local stdio process, easy to start and stop from the client. You create a token and pass it in. Scope it narrowly, that is the main thing. Recommended, with sensible guardrails.
Used for Onboarding new devs with an agent that answers repo questions
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Fine for a demo, not for prod
Not what I expected from the description. Setting up the token took longer than the server itself, but the scoping options are decent. Turned on read-only mode on day one, highly recommend doing the same. For anything real I would look elsewhere.
Used for Code review summaries for pull requests
- Setup & docs 2/5
- Auth experience 2/5
- Reliability 2/5
- Maintainer responsiveness 3/5
Solid and well behaved
Our agents call this dozens of times a day. I would prefer to read the code, but the hosted service has been dependable. Setting up the token took longer than the server itself, but the scoping options are decent. Runs locally over stdio, so startup is instant and nothing leaves my machine unless a tool calls out. I would use it in prod, but only with a human approving writes.
Used for Generating boilerplate from existing patterns
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Trustworthy enough for real work
Clear tool names, sensible outputs, very few surprises. Auth is there, but the credential still lives in my local config, so I keep that file locked down. Being closed source, I cannot audit it, but the vendor has been responsive. It is in our production agent and I sleep fine.
Used for Scripting routine maintenance tasks
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Saves me a context switch every hour
I use this almost daily. Read-only mode is the first thing I enable, and it covers most of what I need. Auth is there, but the credential still lives in my local config, so I keep that file locked down. Keep permissions tight and it is a good tool.
Used for Keeping project tickets in sync with code changes
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.