Action domain

tag

Every action this domain exposes through gitlab_execute_action, from the gitlab://tools manifest. Each entry folds out to its full upstream description and required parameters.

9 · actions2 · destructive5 · read-only

Counted with a Free-tier token against gitlab.com, which is the only host this endpoint talks to: to use it against a self-managed instance, run the server yourself — its documentation covers that. The catalog is scoped to the token that asks, so the count moves with both its tier and its permissions: higher tiers expose more actions, and administration domains only appear to tokens allowed to use them. That is why the figures differ elsewhere: the upstream project counts 868 operations on Community Edition and up to 1,094 on GitLab.com's top tier, while this deployment publishes 768 because it is OAuth-only and acts with your token, so the administration domains a non-admin account cannot call never appear. All three describe the same catalog, counted from three vantage points.

Each entry also says what a GitLab fine-grained personal access token needs to run it, as GitLab 19.4.1 declares it: every permission of one line, at one of the boundaries named. Where there are alternatives, any one is enough.

Back to the server card

1. tag.create

   Tag Create

   Create a new tag in a project pointing at a ref. Returns: the created tag with target, message, protection flag, and the associated commit object. See also: tag.get, tag.delete, release.create.

   Required parameters: project_id (string|integer), ref (string), tag_name (string)

   Fine-grained token: Repository Tag: Create at project

2. tag.delete

   Tag Deletedestructive

   Delete a tag from a project permanently. Returns: a success confirmation naming the tag and project. See also: tag.get, tag.list, tag.unprotect.

   Required parameters: project_id (string|integer), tag_name (string)

   Fine-grained token: Repository Tag: Delete at project

3. tag.get

   Tag Getread-only

   Get a single tag from a project by name. Returns: the tag with target, message, protection flag, the full associated commit object, release note, and creation time. See also: tag.list, tag.get_signature, release.get.

   Required parameters: project_id (string|integer), tag_name (string)

   Fine-grained token: Repository Tag: Read at project

4. tag.get_protected

   Tag Get Protectedread-only

   Get a single protected tag or wildcard rule by name. Returns: the protected tag with its create access levels (access level, user, group, and deploy key descriptions). See also: tag.list_protected, tag.protect, tag.unprotect.

   Required parameters: project_id (string|integer), tag_name (string)

   Fine-grained token: Protected Tag: Read at project

5. tag.get_signature

   Tag Get Signatureread-only

   Get the X.509 signature of a tag. Returns: the signature type, verification status, and the X.509 certificate with issuer detail. See also: tag.get, tag.list.

   Required parameters: project_id (string|integer), tag_name (string)

   Fine-grained token: Repository Tag: Read at project

6. tag.list

   Tag Listread-only

   List tags in one project with optional search and offset or keyset pagination. Returns: matching tags with target, message, protection flag, the associated commit object, release note, and pagination metadata. See also: tag.get, tag.create, release.list.

   Required parameters: project_id (string|integer)

   Fine-grained token: Repository Tag: Read at project

7. tag.list_protected

   Tag List Protectedread-only

   List protected tags in one project with offset or keyset pagination. Returns: protected tag patterns with their create access levels and pagination metadata. See also: tag.get_protected, tag.protect, tag.list.

   Required parameters: project_id (string|integer)

   Fine-grained token: Protected Tag: Read at project

8. tag.protect

   Tag Protect

   Protect a tag or wildcard pattern with create access levels. Returns: the protected tag with its resolved create access levels. See also: tag.unprotect, tag.list_protected, tag.get_protected.

   Required parameters: project_id (string|integer), tag_name (string)

   Fine-grained token: Tag: Protect at project

9. tag.unprotect

   Tag Unprotectdestructive

   Remove protection from a tag or wildcard pattern. Returns: a success confirmation naming the tag and project. See also: tag.protect, tag.list_protected, tag.get_protected.

   Required parameters: project_id (string|integer), tag_name (string)

   Fine-grained token: Tag: Protect at project