From fee043bed3b6b2921f07ec569693fd23f83956d8 Mon Sep 17 00:00:00 2001
From: Michele Cereda <cereda.michele@gmail.com>
Date: Sat, 28 Feb 2026 12:50:38 +0100
Subject: [PATCH] chore(kb/gitlab): add note about most api requiring
 authentication

---
 knowledge base/gitlab/README.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/knowledge base/gitlab/README.md b/knowledge base/gitlab/README.md
index 8e0e1fc..ca245cd 100644
--- a/knowledge base/gitlab/README.md	
+++ b/knowledge base/gitlab/README.md	
@@ -1041,6 +1041,15 @@ exit
 
 Refer [Extend with GitLab].
 
+Most API calls require authentication.
+
+> [!tip]
+> Specifying a personal access token (PAT) in the `PRIVATE-TOKEN` header (`PRIVATE-TOKEN: glpat-…`) is the same as using
+> the `Authorization` header with bearer (`Authorization: bearer glpat-…`).
+
+_Deploy tokens_ do **not** expire.\
+Consider using them instead of PATs when accessing repositories from inside pipelines.
+
 The [Python SDK] also provides a CLI tool to operate with the API.
 
 <details>