- CI/CD with no pipeline file. Turbo CI, on-merge runs, and Lineage Diff run on your merge requests without a
.gitlab-ci.ymljob or a Paradime API key. - Repository clones over HTTPS. The Code IDE, Bolt, DinoAI agents, and
dbt depsreach the project with short-lived tokens. There is no deploy key to manage. - DinoAI agents that work as your people. An agent pushes only to its own branch, and the merge requests it opens show the person who started the session as the author.
- DinoAI Code Review and
@paradime. DinoAI reviews merge requests and answers mentions in merge request comments.

What you can do
Turbo CI on merge requests
Build and test changed models on every merge request, with a commit status for each Turbo CI schedule.
On-merge runs
Run your on-merge schedules on the merge commit, with a summary note on the merge request.
Lineage Diff
See the downstream impact of column changes in one note on the merge request.
Clone over HTTPS
Connect a workspace to a GitLab project with no deploy key. Each person commits and pushes as themselves.
DinoAI Code Review
A DinoAI reviewer reviews each merge request and posts its findings as one GitLab review.
@paradime in merge requests
Mention
@paradime in a merge request comment to ask DinoAI a question, request a review, or retry a failed step.gitlab.com or GitLab Self-Managed
Paradime has two GitLab integrations. Pick the one that matches where your projects live.Both integrations are in the Workspace tab of Settings > Integrations. You need permission to edit the workspace’s Git repository settings to install or manage them. Other people see the state of the connection, but they cannot change it.
What the Paradime bot does in GitLab
Paradime works in GitLab through one bot user per connection:- Install for me creates a GitLab service account named
paradime, with a token namedparadime. The token has theapiandwrite_repositoryscopes. On GitLab 17.9 or later, it also has theself_rotatescope, so Paradime can rotate it. - Use my own bot uses a bot user, a group access token, or a project access token that you manage.
- Receives Merge request events and Comments from a project webhook on each project.
- Posts commit statuses, such as
Paradime Turbo CI,Paradime Lineage Diff, andParadime Code Review. - Posts and updates merge request notes, such as the merge run summary and the DinoAI failure summary.
- Gives Bolt runs and DinoAI agents short-lived tokens to clone the project. An agent’s token can push only to the agent’s own branch.
Network requirements
- GitLab to Paradime. GitLab sends webhooks to
https://api.<your Paradime region>.paradime.io/api/v1/<company token>/webhook/gitlab. For example, the US region uses the hostapi.us.paradime.io. If your network limits outbound traffic from GitLab, allow this host. - Paradime to GitLab. On GitLab Self-Managed, Paradime calls your GitLab API and clones over
https. If your instance is behind a firewall, allow the Paradime IP addresses.
DinoAI on merge requests
A DinoAI Code Review reviewer works on GitLab merge requests the same way it works on GitHub pull requests. On GitLab:- DinoAI posts all its findings at once as one GitLab review, with comments on the changed lines.
- The
Paradime Code Reviewcommit status shows on the merge request. - On GitLab 19.3 or later, a blocking reviewer sets its reviewer state to Requested changes when findings are open, or Reviewed when none are.
@paradime, @dinoai, or the Paradime bot’s username in a comment. DinoAI reacts with 👀, then answers in the same thread.
To use a mention, you need the Developer role or higher on the GitLab project, and your GitLab account linked to a Paradime account that can run DinoAI agents in the workspace. If your account is not linked, DinoAI replies with the steps to link it. DinoAI does not answer mentions on merge requests from forks. See Mentions.
Set up GitLab
Connect gitlab.com
Install with Sign in with GitLab, an Owner token, or your own bot.
Connect GitLab Self-Managed
Install on your own instance, with an optional CA certificate and sign-in URL.
Connect a repository
Clone a workspace’s project over HTTPS, link your GitLab account, or use a deploy key.
Connection health
Check the connection, repair webhooks, rotate the token, or disconnect.
You can still connect a GitLab project with only an SSH deploy key, with no GitLab connection. Turbo CI, on-merge runs, and Lineage Diff then need a GitLab pipeline. See Connect with a deploy key.