# gitlab.project

**stable** **Standard**

GitLab.com project metadata.

`GET /v1/gitlab/project`

## What you get

One GitLab record in Onekey's unified shape, in `data`. If the record does not exist you get a `404 not_found` and are not charged.

**Also works with:** [URL lookup](https://onekey.dev/docs/lookup.md) (`gitlab.com/{project+}`). Any [batch](https://onekey.dev/docs/batch.md) can include it.

## What it costs

- **Standard · 1 credit** for a fresh fetch, charged only when it succeeds.
- **Free when served from cache (0.2 credit for a cached response over 100 KB).**
- **Free** if the request is invalid (never charged) or the source fails or reports not found (refunded).

## Parameters

| Name | Type | Required | Default | What it is | Constraints |
| --- | --- | --- | --- | --- | --- |
| `project` | string | yes | (required) | Project path (group/project) or numeric id | max 200 chars; must match `[A-Za-z0-9_][A-Za-z0-9_.-]*(?:/[A-Za-z0-9_][A-Za-z0-9_.-]*)*`; trimmed, lowercased |

## Request

```bash
curl "https://api.onekey.dev/v1/gitlab/project?project=gitlab-org%2Fgitlab" \
  -H "x-api-key: YOUR_API_KEY"
```

```python
import requests

res = requests.get(
    "https://api.onekey.dev/v1/gitlab/project",
    params={"project": "gitlab-org/gitlab"},
    headers={"x-api-key": "YOUR_API_KEY"},
)
body = res.json()

if body["success"]:
    print(body["data"])
else:
    print(body["error"]["code"], body["error"]["message"])
```

```javascript
const params = new URLSearchParams({ project: "gitlab-org/gitlab" });
const res = await fetch(`https://api.onekey.dev/v1/gitlab/project?${params}`, {
  headers: { "x-api-key": "YOUR_API_KEY" },
});
const body = await res.json();

if (body.success) console.log(body.data);
else console.error(body.error.code, body.error.message);
```

## Recorded response

A real GitLab response, recorded and returned in Onekey's shape. Fields the platform does not provide are `null`.

```json
{
  "success": true,
  "data": {
    "entity": {
      "id": "278964",
      "name": "gitlab-org/gitlab",
      "description": "GitLab is the open-source DevSecOps platform that provides a complete software development lifecycle toolchain including source control, CI/CD, security scanning, and project management in a single application.",
      "url": "https://gitlab.com/gitlab-org/gitlab",
      "stats": {
        "stars": 6147,
        "forks": 12459,
        "openIssues": null
      },
      "createdAt": "2015-05-20T10:47:11Z",
      "updatedAt": "2026-09-28T19:17:44Z",
      "tags": [
        "hacktoberfest",
        "javascript",
        "ruby"
      ]
    },
    "package": {
      "defaultBranch": "master"
    },
    "author": {
      "username": "gitlab-org",
      "url": "https://gitlab.com/groups/gitlab-org"
    },
    "ext": {
      "visibility": "public"
    }
  },
  "metadata": {
    "platform": "gitlab",
    "endpoint": "project",
    "cached": false,
    "stale": false,
    "age_s": 0,
    "fetched_at": "2026-01-01T12:00:00+00:00",
    "credits_charged": 1,
    "request_id": "7f3a9c2e5b1d4c8fa2e6d0b9c4f18e37"
  },
  "error": null
}
```

## Field mapping

How this endpoint's source fields become Onekey's [unified schema](https://onekey.dev/docs/schema.md). Fields the source lacks come back as `null`.

| Source path | Onekey field | Transform |
| --- | --- | --- |
| `id` | `entity.id` | `toString` |
| `path_with_namespace` | `entity.name` | - |
| `description` | `entity.description` | - |
| `web_url` | `entity.url` | `safeUrl` |
| `star_count` | `entity.stats.stars` | `toNumber` |
| `forks_count` | `entity.stats.forks` | `toNumber` |
| `open_issues_count` | `entity.stats.openIssues` | `toNumber` |
| `created_at` | `entity.createdAt` | `toIsoDate` |
| `last_activity_at` | `entity.updatedAt` | `toIsoDate` |
| `default_branch` | `package.defaultBranch` | - |
| `namespace.path` | `author.username` | - |
| `namespace.web_url` | `author.url` | `safeUrl` |
| `topics` | `entity.tags` | - |
| `visibility` | `ext.visibility` | - |

## Caching and freshness

- Fresh for about 30 minutes. Repeat calls in that window are served from cache and are free.
- Between 30 minutes and 6 hours the cached copy is still served instantly and marked `stale: true` while Onekey refreshes it in the background.
- If the source is down when a refresh is needed, the last copy can be served for up to 1 day more (marked stale).
- A "not found" is remembered for 5 minutes and is free.
- The cache is shared across all customers, which is what keeps repeat calls cheap.

## What can go wrong

| Status | Code | What to do |
| --- | --- | --- |
| 401 | `unauthorized` | Check the `x-api-key` header. |
| 402 | `insufficient_credits` | [Add credits](https://onekey.dev/pricing); your balance must cover the price. |
| 404 | `not_found` | That record does not exist. Free; do not retry. |
| 422 | `invalid_params` | Fix the parameters using the table above. Free. |
| 429 | `rate_limited` | Wait `Retry-After` seconds, then retry. |
| 502 | `upstream_error` | The source failed. Refunded; retry with backoff. |

See [Errors](https://onekey.dev/docs/errors.md) for the full list and retry guidance.

Status: stable (verified against the live source).