Skip to main content
Connect GitLab so your agents can work in your GitLab account. You choose an access level for each account, and Squad refuses any agent action outside that level.

​
Access levels

Each GitLab account has an access level: Read-only, Read + write, and Full access. Squad refuses any agent action outside that level. You can also narrow or block single agents under Per-agent access. Read + write is the recommended level. The connect window selects it for you, and you can choose another level. The GitLab sign-in page asks you to approve full access to your account. This is expected. Squad does not narrow the sign-in. It checks every agent action against the level you chose, and it refuses actions outside that level.

​
What agents can do at each level

Each level opens with a short summary in plain tasks, then lists every action it adds, grouped by what the action works on. You do not need to name actions. Ask in plain words, and the agent searches for the matching action.
Find an action. Open a level and use your browser’s find (Ctrl+F, or Cmd+F on a Mac) with a word from the task or part of a slug. Or ask your agent in plain words, for example “What can you do in my GitLab account?” The agent can search the GitLab actions for you.
Each action shows its name, a one-line description where the GitLab action catalog has one, and its slug. The slug is the ID that agents use when they call the action.
Agents can use 62 of the 113 GitLab actions at this level:
  • View members
  • View users
  • View groups
  • View projects
  • View code
  • View commits
  • View notes
  • View branches
  • View files
  • View issues
  • View jobs
  • View labels
All 62 actions at this level:
Agents can use 113 of the 113 GitLab actions at this level: everything in Read + write, plus:
  • Delete and cancel jobs
  • Update branches
  • Delete groups
  • Delete pipelines
  • Delete projects
  • Delete webhooks
The 7 actions that this level adds to Read + write:

​
Connect GitLab

Before you start:
  • You need a GitLab account that you can sign in to.
  • Your Squad subscription must be active. Squad does not connect apps while the subscription is not active.
1

Open Integrations

Open Settings > Integrations.
2

Add an integration

On the Connected apps tab, click + Add integration.
3

Find GitLab

Find GitLab in the catalog and click it. You can type the name in Search the catalog….
4

Choose an access level

Under Default scope, choose an access level. This level applies to every agent.
5

Click Connect GitLab

Click Connect GitLab. The GitLab sign-in page opens in a new tab.
6

Sign in to GitLab

Sign in to GitLab and approve the request.
Check that it works: GitLab shows under YOUR CONNECTIONS, with a row for the account and its access level.

​
Change the access level

  1. Under YOUR CONNECTIONS, find the GitLab account.
  2. Open the account menu (⋯) and click Manage scope.
  3. Under Default scope, choose the new level.
  4. Click Save access.
The change does not need a new sign-in. Agents get the new level from their next call.

​
Set access for one agent

Every agent uses the account’s level unless you set something else for it. You can narrow one agent to a lower level, or block it.
  1. Under YOUR CONNECTIONS, open the account menu (⋯) on the GitLab account.
  2. Click Manage scope.
  3. Under Per-agent access, find the agent.
  4. Choose the Default option to follow the account’s level, choose a lower level, or choose No access.
  5. Click Save access.
An agent never gets more than the account’s level, even if you choose a higher level for it. Changes apply from the agent’s next call. An agent with No access does not see the account.

​
Use more than one GitLab account

Click + Account on the GitLab card to connect another account. Agents use the primary account unless they are asked to use a specific one.
  • After you click + Account, follow the connect steps above.
  • Each account has its own access level.
  • The first account you connect becomes the primary account. It shows ★ PRIMARY.
  • To change the primary account, open the account menu (⋯) and click Make primary.
  • To tell accounts apart, open the account menu (⋯) and click Rename.

​
Reconnect or disconnect

Reconnect when the connection has expired, or when you need to change what the account can reach on the GitLab side:
  1. Open the account menu (⋯) and click Reconnect.
  2. Click Reauthorize on GitLab.
  3. Sign in to GitLab and approve the request.
Reconnect signs in to the same account again. It does not add a second connection. Open the account menu (⋯) on the GitLab account and click Disconnect. Agents lose access to that account at once.
Disconnect acts at once, with no confirmation step. If it was the primary account, another connected GitLab account becomes primary.

​
Costs

GitLab actions do not use Squad credits. Connected apps never use credits. For what does use credits, see What Squad costs.

​
Troubleshooting

An agent reports that an action is not allowed on this account.
  • Cause: the action is outside the account’s access level, or outside the level you set for that agent.
  • Fix: choose a higher level in Manage scope, or change the agent’s row under Per-agent access.
An agent says it has no access to GitLab, or it does not see the account.
  • Cause: the agent is set to No access under Per-agent access, or the account is not connected.
  • Fix: open Manage scope and change the agent’s row. If the account is missing, connect it again.
Connecting or saving fails with “Your subscription isn’t active.” An agent says the GitLab connection has expired.
  • Cause: the sign-in for that account is no longer valid.
  • Fix: use Reconnect on the account.

​
Common questions

Each GitLab account has an access level: Read-only, Read + write, and Full access. Squad refuses any agent action outside that level. You can also narrow or block single agents under Per-agent access.
Click + Account on the GitLab card to connect another account. Agents use the primary account unless they are asked to use a specific one.
Open the account menu (⋯) on the GitLab account and click Disconnect. Agents lose access to that account at once.

Connect apps

Add an MCP server or an API key

Use this when an action you need is not in this app.