GitLab 19.5 expands its platform for coding agents while adding controls over how those agents use repositories and pipelines. Its Model Context Protocol server is now generally available, giving compatible tools access to groups, CI/CD artifacts and GitLab Duo agents and flows.
Administrators can choose which MCP toolsets are exposed. That reduces prompt context and limits the actions an agent can attempt. GitLab.com also applies rate limits of 60 requests per minute for Free users and 600 for Premium and Ultimate users.
External tools including Claude Code, Cursor and Codex can now be connected through the GitLab CLI. Qualifying sessions record the user, agent, project and timing in the AI Governance Dashboard, and organizations can stream audit events to a security information system.
An optional auto mode lets GitLab Duo execute shell commands, Git operations and MCP calls without approval on every step. It is disabled by default and can be controlled at the instance, group or project level; tools marked “Always Deny” remain blocked. The release treats agent access as an auditable DevOps capability rather than only a developer-side assistant.