gitlab.merge_requests
stable Advanced
Recent merge requests of a GitLab.com project.
GET /v1/gitlab/merge_requests
What you get#
A list of GitLab results in Onekey's unified shape, in data (an array). An empty array is a normal, successful answer and is charged like any other; a source that reports "nothing found" as an error returns a free 404 not_found instead.
What it costs#
- Advanced · 5 credits for a fresh fetch, charged only when it succeeds.
- Free when served from cache (0.2 credit for a cached response over 100 KB).
- Free if the request is invalid (never charged) or the source fails or reports not found (refunded).
Parameters#
| Name | Type | Required | Default | What it is | Constraints |
|---|---|---|---|---|---|
project | string | yes | (required) | Project path (group/project) or numeric id | max 200 chars; must match [A-Za-z0-9_][A-Za-z0-9_.-]*(?:/[A-Za-z0-9_][A-Za-z0-9_.-]*)*; trimmed, lowercased |
Request#
curl "https://api.onekey.dev/v1/gitlab/merge_requests?project=gitlab-org%2Fgitlab" \
-H "x-api-key: YOUR_API_KEY"Try it
Add your key to run this call right here. No key? Get one free. The key stays in this tab.
Recorded response#
A real GitLab response, recorded and returned in Onekey's shape. Fields the platform does not provide are null.
{
"success": true,
"data": [
{
"content": {
"id": "258282",
"title": "Draft: [skip ci] Add painted door request eligibility and callouts",
"text": "## What does this MR do and why?\n\nThis adds the shared backend pieces for a painted door test that measures whether Free-group members who aren't Owners would ask for a Premium or Duo upgrade, before we build a real request flow. Nothing here is user-visible; everything is behind a flag that's off by default.\n\nTwo new user group callout IDs are added, `duo_panel_request_painted_door` (43) and `explore_premium_request_painted_door` (44), along with the regenerated GraphQL docs and introspection files.\n\nEverything is behind one `gitlab_com_derisk` feature flag, `painted_door_request_ctas`, with the root group as the actor.\n\nEligibility is centralized in one shared class, `GitlabSubscriptions::PaintedDoorRequestEligibility`: GitLab.com only, root namespace is a group on the Free plan (so active trials, OSS, and EDU are excluded, but expired-trial groups are included), the user is a member of the group or one of its subgroups (project-only members are excluded) but can't edit billing (i.e. not an Owner), and the user isn't a GitLab team member. The eligibility class also supports a chat-panel-only rule (no active GitLab Credits add-on on the group); that rule is used by the companion Duo chat panel MR, not by this surface.\n\n`EE::SidebarsHelper` gains an `explore_premium` super sidebar context (`group_id` and `requested`). Nothing reads it yet — the profile menu MR is what consumes it.\n\nThe shared frontend helper `ee/app/assets/javascripts/painted_door_request/utils.js` is also in",
"url": "https://gitlab.com/gitlab-org/gitlab/-/merge_requests/258282",
"createdAt": "2026-09-28T19:57:20Z",
"updatedAt": "2026-09-28T19:58:33Z",
"state": "opened"
},
"author": {
"username": "rliu-gl",
"displayName": "Roy Liu"
},
"engagement": {
"comments": 0,
"likes": 0
},
"ext": {
"labels": [
"Growth: Driving First Orders",
"backend",
"devops::growth"
],
"mergedAt": null,
"sourceBranch": "617948-painted-door-request-eligibility"
}
},
{
"content": {
"id": "258281",
"title": "Draft: Test - code review of release note 252363 [ci skip]",
"text": "Testing the new custom review instructions for release notes.",
"url": "https://gitlab.com/gitlab-org/gitlab/-/merge_requests/258281",
"createdAt": "2026-09-28T19:50:08Z",
"updatedAt": "2026-09-28T19:51:23Z",
"state": "opened"
},
"author": {
"username": "uchandran",
"displayName": "Uma Chandran"
},
"engagement": {
"comments": 0,
"likes": 0
},
"ext": {
"labels": [
"docs-only",
"documentation",
"maintenance::refactor"
],
"mergedAt": null,
"sourceBranch": "uc/test-rn-review-instructions-252363"
}
}
],
"metadata": {
"platform": "gitlab",
"endpoint": "merge_requests",
"cached": false,
"stale": false,
"age_s": 0,
"fetched_at": "2026-01-01T12:00:00+00:00",
"credits_charged": 5,
"request_id": "7f3a9c2e5b1d4c8fa2e6d0b9c4f18e37"
},
"error": null
}Field mapping#
How this endpoint's source fields become Onekey's unified schema. Fields the source lacks come back as null.
| Source path | Onekey field | Transform |
|---|---|---|
iid | content.id | toString |
title | content.title | - |
description | content.text | - |
web_url | content.url | safeUrl |
created_at | content.createdAt | toIsoDate |
updated_at | content.updatedAt | toIsoDate |
state | content.state | - |
author.username | author.username | - |
author.name | author.displayName | - |
user_notes_count | engagement.comments | toNumber |
upvotes | engagement.likes | toNumber |
labels | ext.labels | - |
merged_at | ext.mergedAt | toIsoDate |
source_branch | ext.sourceBranch | - |
Caching and freshness#
- Fresh for about 2 minutes. Repeat calls in that window are served from cache and are free.
- Between 2 minutes and 15 minutes the cached copy is still served instantly and marked
stale: truewhile Onekey refreshes it in the background. - If the source is down when a refresh is needed, the last copy can be served for up to 1 hour more (marked stale).
- A "not found" is remembered for 1 minute and is free.
- The cache is shared across all customers, which is what keeps repeat calls cheap.
What can go wrong#
| Status | Code | What to do |
|---|---|---|
| 401 | unauthorized | Check the x-api-key header. |
| 402 | insufficient_credits | Add credits; your balance must cover the price. |
| 404 | not_found | Unknown endpoint path. |
| 422 | invalid_params | Fix the parameters using the table above. Free. |
| 429 | rate_limited | Wait Retry-After seconds, then retry. |
| 502 | upstream_error | The source failed. Refunded; retry with backoff. |
See Errors for the full list and retry guidance.
Status: stable (verified against the live source).