Remove the REST Orbit tools endpoint

Michael Angelo Riverarequested to merge
orbit/remove-rest-tools into master

What does this MR do and why?

This MR removes the REST endpoint GET /api/v4/orbit/tools. It is an Experiment endpoint, and no GitLab client calls it now:

  • The GitLab frontend does not call it.
  • The Orbit CLI removed its orbit tools command.
  • MCP clients list tools with tools/list on /api/v4/orbit/mcp.

The MCP tools/list handler still uses the ListTools gRPC call, so the gRPC client method stays. The MR also regenerates the OpenAPI definition, the HTTP router snapshot, and the fine-grained token permission docs.

References

Relates to gitlab-org/orbit/knowledge-graph#263

!265619 (merged) stacks on this MR.

Screenshots or screen recordings

Not applicable. This MR has no UI change.

How to set up and validate locally

  1. Run bin/rspec ee/spec/requests/api/orbit/data_spec.rb ee/spec/requests/api/orbit/mcp_spec.rb.
  2. With a personal access token that has the read_api scope, call GET /api/v4/orbit/tools. The response is 404 Not Found.

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports