AI Code Review for GitLab Cloud & Self-Managed
Full support for GitLab Cloud (gitlab.com) and Self-Managed instances. Human-in-the-loop approval. Multi-model AI (Claude, Gemini, GPT). Threaded MR discussions. Setup in 5 minutes.
Supported Platforms
GitLab Cloud
gitlab.com hosted service
Setup Steps
- 1Go to GitLab Settings → Access Tokens
- 2Click 'Add new token'
- 3Name it 'Git AutoReview'
- 4Select 'api' scope
- 5Copy the generated token
- 6Paste in Git AutoReview settings
Repository Configuration
{
"type": "gitlab",
"owner": "your-group-or-username",
"repo": "your-project"
}Required Permissions
- api (full API access)
GitLab Self-Managed
Self-hosted GitLab instance
Setup Steps
- 1Go to your GitLab instance profile
- 2Navigate to Access Tokens
- 3Click 'Add new token'
- 4Select 'api' scope
- 5Copy the token and paste in settings
- 6Set instance URL in Git AutoReview settings
Repository Configuration
{
"type": "gitlab",
"instanceUrl": "https://gitlab.company.com",
"owner": "your-group",
"repo": "your-project"
}Required Permissions
- api (full API access)
Auto-Detection
Git AutoReview automatically detects GitLab remotes from your repository. No manual platform configuration needed.
- gitlab.com is detected immediately from git remote URLs
- Self-managed instances are detected by probing
/api/v4/versionon unknown hosts
gitAutoreview.gitlab.instanceUrl
Default: https://gitlab.com
Set to your self-managed instance URL
gitAutoreview.gitlab.enabled
Default: true
Enable/disable GitLab integration
GitLab Integration Features
Threaded Discussions
Uses GitLab's /discussions API for threaded, resolvable comments on MR diffs. Team members can resolve each discussion independently.
Modern Diffs API
Uses the /diffs endpoint for fetching MR changes instead of deprecated alternatives. Reliable and future-proof.
Project-Scoped IDs
Uses project-scoped iid (not global id) for all MR API paths. Consistent with GitLab's recommended practices.
Unified Client
A single unified client handles both GitLab Cloud and Self-Managed. No separate client factories needed — same code, same behavior.
SSL/TLS for Self-Managed
For self-managed GitLab instances with self-signed certificates, Git AutoReview provides SSL/TLS configuration options.
Skip TLS Verification
Disable certificate verification for development or internal instances with self-signed certificates. Not recommended for production.
Custom CA Certificate
Specify a custom CA certificate path for instances using internal certificate authorities. This is the recommended approach for enterprise self-managed instances.
These settings are for development and internal instances with self-signed or custom certificates.
Security & Privacy
- • PAT stored in VS Code SecretStorage (encrypted)
- • Code sent only to your chosen AI provider
- • No data stored on Git AutoReview servers
- • Works behind corporate firewalls (Self-Managed)
Frequently Asked Questions
How does Git AutoReview work with GitLab?
Git AutoReview is a VS Code extension that connects to GitLab using a Personal Access Token (PAT). It fetches merge request diffs, sends them to your chosen AI provider (Claude, Gemini, or GPT), and presents suggestions as drafts. You review and approve each suggestion before publishing as threaded discussions on the MR.
Does Git AutoReview support GitLab Self-Managed?
Yes, full support including auto-detection. Git AutoReview probes unknown hosts via /api/v4/version to detect self-managed GitLab instances. Just set your instance URL in settings and provide a PAT with api scope.
What permissions does the GitLab PAT need?
The PAT needs the 'api' scope, which provides full API access for reading merge requests and posting threaded discussions. Tokens are stored encrypted in VS Code SecretStorage.
How long does setup take?
About 5 minutes. Install the Git AutoReview extension from VS Code Marketplace, create a Personal Access Token in GitLab with api scope, add your repository configuration, and start reviewing merge requests.
Is this secure for enterprise self-managed instances?
Yes. Your PAT is stored in VS Code SecretStorage (encrypted). Code is sent only to your chosen AI provider (Anthropic, Google, or OpenAI). No data is stored on Git AutoReview servers. It works behind corporate firewalls for self-managed instances.
Can I use Git AutoReview with both GitLab and GitHub?
Yes. Configure multiple repositories in Git AutoReview settings. The extension auto-detects the platform from your git remote URLs and uses the correct API for each repository.
Does Git AutoReview auto-publish comments to GitLab?
No. Git AutoReview uses a human-in-the-loop approach. AI generates review suggestions as drafts. You review each one, approve or reject it, and only then publish approved comments as threaded discussions on your merge request.
Start Reviewing GitLab MRs with AI
Setup takes 5 minutes. Free tier: 3 reviews/day (10/day after email registration). No credit card required.