Action domain

ci_variable

Every action this domain exposes through gitlab_execute_action, from the gitlab://tools manifest. Each entry folds out to its full upstream description and required parameters.

15 · actions3 · destructive6 · read-only

Counted with a Free-tier token against gitlab.com, which is the only host this endpoint talks to: to use it against a self-managed instance, run the server yourself — its documentation covers that. The catalog is scoped to the token that asks, so the count moves with both its tier and its permissions: higher tiers expose more actions, and administration domains only appear to tokens allowed to use them. That is why the figures differ elsewhere: the upstream project counts 868 operations on Community Edition and up to 1,094 on GitLab.com's top tier, while this deployment publishes 768 because it is OAuth-only and acts with your token, so the administration domains a non-admin account cannot call never appear. All three describe the same catalog, counted from three vantage points.

Each entry also says what a GitLab fine-grained personal access token needs to run it, as GitLab 19.4.1 declares it: every permission of one line, at one of the boundaries named. Where there are alternatives, any one is enough.

Back to the server card

1. ci_variable.create

   CI Variable Create

   Create a CI/CD variable in a project with type, environment scope, and protected/masked/raw/masked_and_hidden flags. Returns: the created variable's key, value (redacted when masked or hidden), type, flags, environment scope, and description. See also: ci_variable.list, ci_variable.get, ci_variable.update.

   Required parameters: key (string), project_id (string|integer), value (string)

   Fine-grained token: Variable: Create at project

2. ci_variable.delete

   CI Variable Deletedestructive

   Delete a CI/CD variable by key, selecting an environment-scoped instance via the filter. Returns: a success confirmation message. See also: ci_variable.list, ci_variable.get.

   Required parameters: key (string), project_id (string|integer)

   Fine-grained token: Variable: Delete at project

3. ci_variable.get

   CI Variable Getread-only

   Get a single CI/CD variable by key, optionally selecting an environment-scoped instance via the filter. Returns: the variable's key, value (redacted when masked or hidden), type, protected/masked/hidden/raw flags, environment scope, and description. See also: ci_variable.list, ci_variable.update, ci_variable.delete.

   Required parameters: key (string), project_id (string|integer)

   Fine-grained token: Variable: Read at project

4. ci_variable.group_create

   Group Variable Create

   Create a CI/CD variable in a group with type, environment scope, and protected/masked/raw/masked_and_hidden flags. Returns: the created variable's key, value, type, flags, environment scope, and description. See also: ci_variable.group_list, ci_variable.group_get, ci_variable.group_update.

   Required parameters: group_id (string|integer), key (string)

   Fine-grained token: Variable: Create at group

5. ci_variable.group_delete

   Group Variable Deletedestructive

   Delete a group CI/CD variable by key, selecting an environment-scoped instance via the filter. Returns: a success confirmation message. See also: ci_variable.group_list, ci_variable.group_get.

   Required parameters: group_id (string|integer), key (string)

   Fine-grained token: Variable: Delete at group

6. ci_variable.group_get

   Group Variable Getread-only

   Get a single group CI/CD variable by key, optionally selecting an environment-scoped instance via the filter. Returns: the variable's key, value, type, protected/masked/hidden/raw flags, environment scope, and description. See also: ci_variable.group_list, ci_variable.group_update, ci_variable.group_delete.

   Required parameters: group_id (string|integer), key (string)

   Fine-grained token: Variable: Read at group

7. ci_variable.group_list

   Group Variable Listread-only

   List a group's CI/CD variables with order_by, sort, and offset or keyset pagination. Returns: each variable's key, value, type, protected/masked/hidden/raw flags, environment scope, description, and pagination metadata. See also: ci_variable.group_get, ci_variable.group_create, ci_variable.group_update.

   Required parameters: group_id (string|integer)

   Fine-grained token: Variable: Read at group

8. ci_variable.group_update

   Group Variable Update

   Update a group CI/CD variable, selecting an environment-scoped instance via the filter. Returns: the updated variable's key, value, type, protected/masked/hidden/raw flags, environment scope, and description. See also: ci_variable.group_get, ci_variable.group_list, ci_variable.group_delete.

   Required parameters: group_id (string|integer), key (string)

   Fine-grained token: Variable: Update at group

9. ci_variable.instance_create

   Instance Variable Create

   Create an instance-level CI/CD variable with type and protected/masked/raw flags (admin-only). Returns: the created variable's key, value (raw even when masked, because masking redacts CI job logs, not this API), type, flags, and description. See also: ci_variable.instance_list, ci_variable.instance_get, ci_variable.instance_update.

   Required parameters: key (string)

   Fine-grained token: Variable: Create at instance

10. ci_variable.instance_delete

    Instance Variable Deletedestructive

    Delete an instance-level CI/CD variable by key (admin-only). Returns: a success confirmation message. See also: ci_variable.instance_list, ci_variable.instance_get.

    Required parameters: key (string)

    Fine-grained token: Variable: Delete at instance

11. ci_variable.instance_get

    Instance Variable Getread-only

    Get a single instance-level CI/CD variable by key (admin-only). Returns: the variable's key, value (raw even when masked, because masking redacts CI job logs, not this API), type, protected/masked/raw flags, and description. See also: ci_variable.instance_list, ci_variable.instance_update, ci_variable.instance_delete.

    Required parameters: key (string)

    Fine-grained token: Variable: Read at instance

12. ci_variable.instance_list

    Instance Variable Listread-only

    List instance-level CI/CD variables with order_by, sort, and offset or keyset pagination (admin-only). Returns: each variable's key, value (raw even when masked, because masking redacts CI job logs, not this API), type, protected/masked/raw flags, description, and pagination metadata. See also: ci_variable.instance_get, ci_variable.instance_create, ci_variable.instance_update, ci_variable.instance_delete.

    Required parameters: No required parameters

    Fine-grained token: Variable: Read at instance

13. ci_variable.instance_update

    Instance Variable Update

    Update an instance-level CI/CD variable by key, with type and protected/masked/raw flags (admin-only). Returns: the updated variable's key, value (raw even when masked, because masking redacts CI job logs, not this API), type, protected/masked/raw flags, and description. See also: ci_variable.instance_get, ci_variable.instance_list, ci_variable.instance_delete.

    Required parameters: key (string)

    Fine-grained token: Variable: Update at instance

14. ci_variable.list

    CI Variable Listread-only

    List a project's CI/CD variables with order_by, sort, and offset or keyset pagination. Returns: each variable's key, type, protected/masked/hidden/raw flags, environment scope, description, and pagination metadata. See also: ci_variable.get, ci_variable.create, ci_variable.update.

    Required parameters: project_id (string|integer)

    Fine-grained token: Variable: Read at project

15. ci_variable.update

    CI Variable Update

    Update a CI/CD variable, selecting an environment-scoped instance via the filter. Returns: the updated variable's key, value (redacted when masked or hidden), type, protected/masked/hidden/raw flags, environment scope, and description. See also: ci_variable.get, ci_variable.list, ci_variable.delete.

    Required parameters: key (string), project_id (string|integer)

    Fine-grained token: Variable: Update at project