feat: enable write access in MCPB bundle (1.17.0)

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "gitlab-mcp",
   "description": "GitLab MCP server with GraphQL discovery and team activity tools",
-  "version": "1.16.0",
+  "version": "1.17.0",
   "icon": "assets/logo.svg",
   "author": {
     "name": "Tim Pearson"

.github/workflows/release.yml

@@ -41,7 +41,7 @@ jobs:
           VERSION="${GITHUB_REF_NAME#v}"
           gh release create "${GITHUB_REF_NAME}" \
             --generate-notes \
-            "gitlab-mcp-community-${VERSION}.mcpb#GitLab (community, read-only) — Claude Desktop / MCPB bundle"
+            "gitlab-mcp-community-${VERSION}.mcpb#GitLab (community) — Claude Desktop / MCPB bundle"
 
   docker:
     name: Build and push container image

CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.17.0] - 2026-05-21
+
+### Changed
+- MCPB (Claude Desktop) bundle now allows write access. The single PAT
+  field is mapped to `GITLAB_TOKEN`, so users can supply a `read_api`-scoped
+  token for read-only access or an `api`-scoped token to enable writes
+  (`create_issue`, `create_merge_request`, etc.). Bundle display name
+  changed from "GitLab (community, read-only)" to "GitLab (community)" and
+  the manifest `user_config` field was renamed `gitlab_read_token` →
+  `gitlab_token`. Existing installs will prompt to re-enter the PAT on
+  upgrade because of the renamed config key.
+
 ## [1.16.0] - 2026-05-21
 
 ### Added

README.md

@@ -74,15 +74,15 @@ npm install -g @ttpears/gitlab-mcp-server
 
 ### Claude Desktop
 
-**Option A — MCPB one-click install (read-only):** download
+**Option A — MCPB one-click install:** download
 `gitlab-mcp-community-${VERSION}.mcpb` from the
 [latest GitHub Release](https://github.com/ttpears/gitlab-mcp/releases/latest)
 and drag it onto the Claude Desktop window. Fill in your GitLab URL and a
-read-only PAT (`read_api` scope) when prompted; the token is stored in your
-OS keychain. This bundle is intentionally read-only — use Option B if you need
-to create/update issues or MRs.
+Personal Access Token when prompted; the token is stored in your OS keychain.
+Use a `read_api`-scoped PAT for read-only access, or an `api`-scoped PAT to
+also allow writes (create_issue, create_merge_request, etc.).
 
-**Option B — manual config (read or write):** add to `claude_desktop_config.json`:
+**Option B — manual config:** add to `claude_desktop_config.json`:
 
 ```json
 {

mcpb/manifest.template.json

@@ -1,9 +1,9 @@
 {
   "manifest_version": "0.3",
   "name": "gitlab-mcp-community",
-  "display_name": "GitLab (community, read-only)",
+  "display_name": "GitLab (community)",
   "version": "__VERSION__",
-  "description": "Community GitLab MCP server with GraphQL discovery and team-activity analytics. Read-only build. Not affiliated with GitLab Inc.'s first-party MCP server.",
+  "description": "Community GitLab MCP server with GraphQL discovery and team-activity analytics. Not affiliated with GitLab Inc.'s first-party MCP server.",
   "author": {
     "name": "Tim Pearson",
     "url": "https://github.com/ttpears/gitlab-mcp"
@@ -25,7 +25,7 @@
       ],
       "env": {
         "GITLAB_URL": "${user_config.gitlab_url}",
-        "GITLAB_READ_TOKEN": "${user_config.gitlab_read_token}"
+        "GITLAB_TOKEN": "${user_config.gitlab_token}"
       }
     }
   },
@@ -37,10 +37,10 @@
       "default": "https://gitlab.com",
       "required": true
     },
-    "gitlab_read_token": {
+    "gitlab_token": {
       "type": "string",
-      "title": "GitLab Read-Only PAT",
-      "description": "Personal access token with read_api scope. Stored in your OS keychain. Writes (create_issue, create_merge_request, etc.) will be rejected by this bundle — install via npm/GHCR if you need write access.",
+      "title": "GitLab Personal Access Token",
+      "description": "Personal access token. Use a read_api-scoped PAT for read-only access, or an api-scoped PAT to also allow writes (create_issue, create_merge_request, etc.). Stored in your OS keychain.",
       "sensitive": true,
       "required": true
     }

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttpears/gitlab-mcp-server",
-  "version": "1.16.0",
+  "version": "1.17.0",
   "description": "GitLab MCP Server with GraphQL discovery",
   "main": "dist/index.js",
   "module": "./src/index.ts",