One unified search tool; request goes through service.execute, checks current_user, and authorize! is always allowed.

+1. MCP client calls service.execute(request:, params:)

392

+1. CustomService.execute validates current_user presence

This merge request introduces an “aggregated search MCP tool” that unifies the separate global, group and project search endpoints into a single dispatcher service: by inspecting parameters like group_id or project_id, the tool routes requests to the appropriate underlying API, reducing tool count and simplifying the interface. It updates documentation and tests accordingly, and ensures that the scopes available reflect feature flags and instance settings for search (e.g., advanced search, code search) so that different levels can be correctly enabled or disabled per configuration

gitlab.com/gitlab-org/gitlab/-/merge_requests/208526