# gitlab.merge_requests

**stable** **Advanced**

Recent merge requests of a GitLab.com project.

`GET /v1/gitlab/merge_requests`

## What you get

A list of GitLab results in Onekey's unified shape, in `data` (an array). An empty array is a normal, successful answer and is charged like any other; a source that reports "nothing found" as an error returns a free `404 not_found` instead.

## What it costs

- **Advanced · 5 credits** for a fresh fetch, charged only when it succeeds.
- **Free when served from cache (0.2 credit for a cached response over 100 KB).**
- **Free** if the request is invalid (never charged) or the source fails or reports not found (refunded).

## Parameters

| Name | Type | Required | Default | What it is | Constraints |
| --- | --- | --- | --- | --- | --- |
| `project` | string | yes | (required) | Project path (group/project) or numeric id | max 200 chars; must match `[A-Za-z0-9_][A-Za-z0-9_.-]*(?:/[A-Za-z0-9_][A-Za-z0-9_.-]*)*`; trimmed, lowercased |

## Request

```bash
curl "https://api.onekey.dev/v1/gitlab/merge_requests?project=gitlab-org%2Fgitlab" \
  -H "x-api-key: YOUR_API_KEY"
```

```python
import requests

res = requests.get(
    "https://api.onekey.dev/v1/gitlab/merge_requests",
    params={"project": "gitlab-org/gitlab"},
    headers={"x-api-key": "YOUR_API_KEY"},
)
body = res.json()

if body["success"]:
    print(body["data"])
else:
    print(body["error"]["code"], body["error"]["message"])
```

```javascript
const params = new URLSearchParams({ project: "gitlab-org/gitlab" });
const res = await fetch(`https://api.onekey.dev/v1/gitlab/merge_requests?${params}`, {
  headers: { "x-api-key": "YOUR_API_KEY" },
});
const body = await res.json();

if (body.success) console.log(body.data);
else console.error(body.error.code, body.error.message);
```

## Recorded response

A real GitLab response, recorded and returned in Onekey's shape. Fields the platform does not provide are `null`.

```json
{
  "success": true,
  "data": [
    {
      "content": {
        "id": "258282",
        "title": "Draft: [skip ci] Add painted door request eligibility and callouts",
        "text": "## What does this MR do and why?\n\nThis adds the shared backend pieces for a painted door test that measures whether Free-group members who aren't Owners would ask for a Premium or Duo upgrade, before we build a real request flow. Nothing here is user-visible; everything is behind a flag that's off by default.\n\nTwo new user group callout IDs are added, `duo_panel_request_painted_door` (43) and `explore_premium_request_painted_door` (44), along with the regenerated GraphQL docs and introspection files.\n\nEverything is behind one `gitlab_com_derisk` feature flag, `painted_door_request_ctas`, with the root group as the actor.\n\nEligibility is centralized in one shared class, `GitlabSubscriptions::PaintedDoorRequestEligibility`: GitLab.com only, root namespace is a group on the Free plan (so active trials, OSS, and EDU are excluded, but expired-trial groups are included), the user is a member of the group or one of its subgroups (project-only members are excluded) but can't edit billing (i.e. not an Owner), and the user isn't a GitLab team member. The eligibility class also supports a chat-panel-only rule (no active GitLab Credits add-on on the group); that rule is used by the companion Duo chat panel MR, not by this surface.\n\n`EE::SidebarsHelper` gains an `explore_premium` super sidebar context (`group_id` and `requested`). Nothing reads it yet — the profile menu MR is what consumes it.\n\nThe shared frontend helper `ee/app/assets/javascripts/painted_door_request/utils.js` is also in",
        "url": "https://gitlab.com/gitlab-org/gitlab/-/merge_requests/258282",
        "createdAt": "2026-09-28T19:57:20Z",
        "updatedAt": "2026-09-28T19:58:33Z",
        "state": "opened"
      },
      "author": {
        "username": "rliu-gl",
        "displayName": "Roy Liu"
      },
      "engagement": {
        "comments": 0,
        "likes": 0
      },
      "ext": {
        "labels": [
          "Growth: Driving First Orders",
          "backend",
          "devops::growth"
        ],
        "mergedAt": null,
        "sourceBranch": "617948-painted-door-request-eligibility"
      }
    },
    {
      "content": {
        "id": "258281",
        "title": "Draft: Test - code review of release note 252363 [ci skip]",
        "text": "Testing the new custom review instructions for release notes.",
        "url": "https://gitlab.com/gitlab-org/gitlab/-/merge_requests/258281",
        "createdAt": "2026-09-28T19:50:08Z",
        "updatedAt": "2026-09-28T19:51:23Z",
        "state": "opened"
      },
      "author": {
        "username": "uchandran",
        "displayName": "Uma Chandran"
      },
      "engagement": {
        "comments": 0,
        "likes": 0
      },
      "ext": {
        "labels": [
          "docs-only",
          "documentation",
          "maintenance::refactor"
        ],
        "mergedAt": null,
        "sourceBranch": "uc/test-rn-review-instructions-252363"
      }
    }
  ],
  "metadata": {
    "platform": "gitlab",
    "endpoint": "merge_requests",
    "cached": false,
    "stale": false,
    "age_s": 0,
    "fetched_at": "2026-01-01T12:00:00+00:00",
    "credits_charged": 5,
    "request_id": "7f3a9c2e5b1d4c8fa2e6d0b9c4f18e37"
  },
  "error": null
}
```

## Field mapping

How this endpoint's source fields become Onekey's [unified schema](https://onekey.dev/docs/schema.md). Fields the source lacks come back as `null`.

| Source path | Onekey field | Transform |
| --- | --- | --- |
| `iid` | `content.id` | `toString` |
| `title` | `content.title` | - |
| `description` | `content.text` | - |
| `web_url` | `content.url` | `safeUrl` |
| `created_at` | `content.createdAt` | `toIsoDate` |
| `updated_at` | `content.updatedAt` | `toIsoDate` |
| `state` | `content.state` | - |
| `author.username` | `author.username` | - |
| `author.name` | `author.displayName` | - |
| `user_notes_count` | `engagement.comments` | `toNumber` |
| `upvotes` | `engagement.likes` | `toNumber` |
| `labels` | `ext.labels` | - |
| `merged_at` | `ext.mergedAt` | `toIsoDate` |
| `source_branch` | `ext.sourceBranch` | - |

## Caching and freshness

- Fresh for about 2 minutes. Repeat calls in that window are served from cache and are free.
- Between 2 minutes and 15 minutes the cached copy is still served instantly and marked `stale: true` while Onekey refreshes it in the background.
- If the source is down when a refresh is needed, the last copy can be served for up to 1 hour more (marked stale).
- A "not found" is remembered for 1 minute and is free.
- The cache is shared across all customers, which is what keeps repeat calls cheap.

## What can go wrong

| Status | Code | What to do |
| --- | --- | --- |
| 401 | `unauthorized` | Check the `x-api-key` header. |
| 402 | `insufficient_credits` | [Add credits](https://onekey.dev/pricing); your balance must cover the price. |
| 404 | `not_found` | Unknown endpoint path. |
| 422 | `invalid_params` | Fix the parameters using the table above. Free. |
| 429 | `rate_limited` | Wait `Retry-After` seconds, then retry. |
| 502 | `upstream_error` | The source failed. Refunded; retry with backoff. |

See [Errors](https://onekey.dev/docs/errors.md) for the full list and retry guidance.

Status: stable (verified against the live source).