Planissue-code-links
GET/repositories/{repo_id}/merge-requests/{mr_id}/issues
List the work items a merge request's body names
list_mr_issues
issue:read
A token needs theissue:readscope: Read work items and their settingsGranted bymcp_agent,mcp_agent_write,read_api,read_repository,write_api,write_repository.Every operation this scope unlocksFiltered across resources
x-gitmoap-isolation: {"kind":"cross_resource_filtered"}
Paginated
Pass thenext_tokena page returns to get the next one.
Returns the work items the merge request's title or description references as it reads now, a
page at a time; they may live in other repositories or in groups. Work items you cannot see are
left out, so a page can hold fewer than limit entries while next_token still leads to more.
Parameters
Path
- repo_idRepositoryId (string · uuid)Repository ID
- mr_idMergeRequestId (integer · int64)Merge-request iid
Query
- limitinteger · int32optionalPage size (default 20, max 100)
- next_tokenstringoptionalPagination cursor
Responses
200The work items this merge request names, in scopes the caller may seeapplication/json
itemsarray of object
- created_atstring
created_byActorSummaryWho created the work item, as they were when they created it.
- The ActorSummary schema
- emailstring
- idstring
- usernamestring
- avatar_urlstring or nulloptional
- iidIssueId (integer · int64)
- root_scope_idGroupId (string · uuid)The top-level group the item's group or repository belongs to.
- scope_idstring
- scope_typeScopeTypegrouprepositoryWhether the item lives in a group or a repository. With
scope_idandiidit forms the item's current address — the#412a person types — which changes when the item moves. - status_categoryStatusCategorytriagetodoin_progressin_reviewblockeddonecancelledThe fixed category of the item's current status, which boards, filters and progress rollups work from.
- status_idStatusId (string)
- titleIssueTitle (string)
- uidIssueUid (string · uuid)The work item's permanent identifier. Unlike its number, it never changes, even when the item moves to another group or repository.
- updated_atstringWhen the work item last changed, ISO 8601. Listings order by it, newest first.
- work_item_typeWorkItemTypeepicstorybugtaskspikechoreincidentsub_taskThe kind of work item. The type decides where an item may live (a group or a repository), which types it may have as children, and which fields it accepts.
- ancestor_group_idsarray of GroupId (string · uuid)optionalThe groups the item sits beneath, nearest first.
- ancestor_issue_uidsarray of IssueUid (string · uuid)optionalThe item's ancestors' permanent identifiers, nearest first, for display. It can briefly lag behind a change of parent higher up the chain.
- assignee_idsarray of PrincipalId (string · uuid)optionalThe people assigned to the work item. Absent when nobody is.
- author_can_pushboolean or nulloptionalWhether the author can push to where this work item lives — its repository, or a group work item's group. False for a drive-by contributor's text. Absent where it was not computed.
- closed_atstring or nulloptional
- closed_byPrincipalId (string · uuid) or nulloptional
- descriptionMarkdownDoc (string) or nulloptional
- labelsarray of LabelKey (string)optionalThe keys of the labels applied to the work item. Absent when it has none.
- milestone_idMilestoneId (string · uuid) or nulloptional
- milestone_scope_idstring or nulloptional
- milestone_scope_typeScopeTypegrouprepositoryor nulloptionalWhether the item's milestone belongs to a group or a repository — not necessarily the item's own, since a group milestone can hold work items from several repositories.
parent_refIssueRef or nulloptionalThe parent's current address, for display. Absent when the item has no parent.
- The IssueRef schema
- iidIssueId (integer · int64)
- scopeScopeRef
- parent_uidIssueUid (string · uuid) or nulloptionalThe parent work item's permanent identifier, if the item has a parent.
- pointsinteger · int32 or nulloptional0–∞
- regressed_atstring or nulloptional
- regressed_at_shaCommitHash (string) or nulloptionalThe commit whose evidence proved the regression — the first known bad commit, and the upper end of the range of suspect commits.
- regressed_from_shaCommitHash (string) or nulloptionalThe commit at which the item was last verified, kept when it regresses — the last known good commit.
- regressed_run_idPipelineRunId (string · uuid) or nulloptional
- severitySeveritycriticalhighmediumlowor nulloptional
type_profileBlueprintRef or nulloptionalThe custom type this item was filed as, pointing at the group or repository where the blueprint is defined.
work_item_typestill decides where the item may live, its children and its fields; the blueprint adds a display label and facets. Absent for an item filed as a plain built-in type.- The BlueprintRef schema
- blueprint_idBlueprintId (string)
- scopeScopeRef
- verificationVerificationStateunverifiedverifiedregressedoptionalWhether CI has proved the work item's acceptance criteria.
unverifieduntil a pipeline run proves them,verifiedonce one has, andregressedwhen a later run shows that evidence no longer holds. - verified_atstring or nulloptional
- verified_at_shaCommitHash (string) or nulloptionalThe commit at which CI proved the acceptance criteria. Absent until a pipeline run has.
- verified_run_idPipelineRunId (string · uuid) or nulloptional
- versioninteger · int64optional0–∞The work item's revision, incremented on every change. Send it back with an update; if the item has changed since you read it, the update is refused with a
409.
- next_tokenstring or nulloptional
200 exampleSynthesized example
{
"items": [
{
"created_at": "2026-10-10T01:25:45Z",
"created_by": {
"email": "lin@acme.example",
"id": "id-6652",
"username": "tomas"
},
"iid": 19,
"root_scope_id": "4c1d8e2f-6a3b-4f90-b7c5-1e2d3c4b5a69",
"scope_id": "8ac5cfa9-121e-4320-9cae-666e8e37d514",
"scope_type": "group",
"status_category": "triage",
"status_id": "4e3a4dbd-44d5-49a2-8b4e-5d916997d94b",
"title": "Label every synthesized example",
"uid": "f7146b72-3996-428c-9b0f-58689c5e7e00",
"updated_at": "2026-10-12T06:49:54Z",
"work_item_type": "epic"
}
],
"next_token": "next-token-bbbd"
}
400Bad request — a path parameter is not a well-formed value of its typeapplication/json
Error codes
- BAD_REQUESTThe request is malformed: a parameter or a body field is not a well-formed value of its type
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
400 exampleSynthesized example
{
"error": {
"code": "code-c3c9",
"message": "Pin a page's payload to the build that rendered it"
}
}
401Unauthenticated — no credential, or an invalid oneapplication/json
Error codes
- UNAUTHORIZEDNo credential was sent, or the one sent is invalid, expired or revoked
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
401 exampleSynthesized example
{
"error": {
"code": "code-046a",
"message": "Stream pipeline status into the run header"
}
}
403Forbidden — the caller's access level or token scope is insufficientapplication/json
Error codes
- FORBIDDENYou are signed in but may not do this here;
reasonnames the permission or the rule that refused it - INSUFFICIENT_SCOPEThe access token lacks the scope this operation needs;
required_scopenames it - PERMISSION_REQUIREDYou need a permission you do not hold here; the message names it
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
403 exampleSynthesized example
{
"error": {
"code": "code-0de3",
"message": "Stream pipeline status into the run header"
}
}
404Repository or merge request not foundapplication/json
Error codes
- NOT_FOUNDThe resource does not exist — or exists and you cannot see it: a private resource you have no access to answers exactly as an absent one does
errorErrorBody
- The ErrorBody schema
- codestringThe coarse category, tied to the status:
NOT_FOUND,CONFLICT,INSUFFICIENT_SCOPE. Every error has one; the API reference's error catalogue lists them all. - messagestringWhat went wrong, for a person. Written to be read, not parsed: match on
reasonorcode. - fieldstring or nulloptionalOn a
400that refused one field's value, the field, as its JSON path:email,items[0].name. Put the message under that input. Absent on every other error. - reasonstring or nulloptionalThe specific code, when the error has one:
LAST_ORGANIZATION_OWNER,BRANCH_PROTECTED. The message starts with it too. Match on this when it is present, and oncodeotherwise. - required_scopestring or nulloptionalThe scope the access token was missing, on
INSUFFICIENT_SCOPE. - violationsanyoptionalPresent on the structured-validation errors (
PROVIDER_VALIDATION_FAILEDper-node,PIPELINE_VALIDATION_FAILEDDAG): a JSON array of the offending elements, so a caller can fix every one in a single round-trip. Absent (omitted) on every other error.
404 exampleSynthesized example
{
"error": {
"code": "code-a1a1",
"message": "Draw the region map from operation density"
}
}
CLI
gitmoap issue-code-links list-mr-issues
- --repo-ididRepository ID (id or owner/repo path)
- --mr-ididMerge-request iid
- --limitnumberoptionalPage size (default 20, max 100)
- --next-tokenstringoptionalPagination cursor