GitLab 19.5 Integrates External AI Agents and Introduces AI Governance Features

Agentic Development and Governance

GitLab 19.5, released on October 15, integrates agentic software development and governance into the platform. The release makes the GitLab MCP server generally available and expands how external AI agents can interact with GitLab's ecosystem.

Expanded External Agent Interaction

The update allows MCP-compatible tools, such as Claude Code and Cursor, to access GitLab's tool catalog and invoke GitLab Duo Agent Platform agents and flows. This broadens the capabilities of external AI agents within the GitLab environment.

The generally available GitLab MCP server provides agents with access to GitLab capabilities through the Model Context Protocol. New tools enable agents to discover groups, inspect CI/CD artifact files, and manage GitLab Duo agents and flows. Administrators can also select which MCP toolsets are exposed to agents, reducing context consumption and potential actions.

New AI Governance Capabilities

GitLab 19.5 introduces controls for governing external agents, providing security teams with visibility into which agents are used, by whom, and on which projects. This extends the AI Governance Dashboard, which previously focused only on GitLab Duo Agent Platform agents.

Tools like Claude Code, Cursor, and Codex can now be connected via the GitLab CLI. Once configured, organizations can record agent sessions, including user, agent, project, and timing details, with activity appearing alongside GitLab's own agents. Audit events can also be streamed to a SIEM for further analysis.

GitLab Duo CLI Enhancements

The GitLab Duo CLI gains an auto mode, allowing agents to execute tools without requiring approval for every shell command, Git operation, or MCP call. This feature is disabled by default and can be controlled at instance, group, and project levels. Tools explicitly marked 'Always Deny' remain blocked regardless of the auto mode setting.

Additionally, GitLab.com introduces MCP rate limits: 60 requests per minute for Free users and 600 for Premium and Ultimate users. Reconnects and retries count towards these limits.