Code review MCP servers

A server here reviews code changes or pull requests for quality or bugs before merging.

Not here: security scanning of dependencies.

563servers
105 remote458 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: Front-End Checklist@thedaviddias/front-end-checklistReview frontend code and live pages against 386 quality-gated web development rules.Not assessed yet.A remote server; no sign-in.74,361 GitHub stars.
  2. Number 2: Repowise@repowise/repowiseCodebase intelligence for AI coding agents — graph, git history, docs, decisions, code health.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7,547 GitHub stars.
  3. Number 3: Sem@ataraxy-labs/semEntity-level code intelligence: semantic diff, impact analysis, blame, and context for AI agents3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3,389 GitHub stars.

Best fit

339 made for this, ranked by starsRemoteLocal
  1. pyscn @ludo-technologies/pyscnPython code analysis for AI agents: complexity, dead code, clones, coupling, and a health score.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1,091 GitHub stars.
  2. Skylos @duriantaco/skylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.846 GitHub stars.
  3. SonarQube MCP Server @sonarsource/sonarqube-mcp-serverAnalyze code quality and security with SonarQube Server or Cloud directly in AI assistants.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.659 GitHub stars.
  4. SqlServer Rules @erikej/sqlserver-rulesAnalyze T-SQL scripts for design, naming, and performance issues and prevent bad practices.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.242 GitHub stars.
  5. gograph @ozgurcd/gographLocal Go repository call graphs and structural analysis for coding agents over stdio.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.229 GitHub stars.
  6. melta UI @tsubotax/melta-uiAI-Ready design system MCP: melta UI tokens, component contracts, 107 rules, check_html self-verify4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.201 GitHub stars.
  7. Trace @nikolai-vysotskyi/trace-mcpCode graph MCP: 81 languages, 88 frameworks, 72.7% fewer PR-review tokens, comprehension at parity5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.190 GitHub stars.
  8. SvGrid @svgrid/svgridChecks AI-written SvGrid code against the real API, plus version-pinned Svelte 5 grid docs.2% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.179 GitHub stars.
  9. Arbor @anandb71/arborThe Graph-Native Intelligence Layer for Code.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.160 GitHub stars.
  10. HIG Doctor @raintree-technology/hig-doctorApple Human Interface Guidelines search, lookup, and project audits for AI coding agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.144 GitHub stars.
  11. Code Pathfinder @codepathfinder/pathfinderCode intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.142 GitHub stars.
  12. Perforce P4 MCP Server @perforce/p4mcp-serverPerforce P4 MCP server for version control and P4 DAM digital asset management.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.122 GitHub stars.
  13. P4mcp @hjain-perforce/p4mcp-serverPerforce P4 MCP Server is a MCP server that integrates with the Perforce P4 version control system.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.122 GitHub stars.
  14. Lm @houtini-ai/lmConnect Claude to any OpenAI-compatible LLM endpoint and offload routine work to a local model.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.121 GitHub stars.
  15. Ckb @simplyliz/ckbCode intelligence MCP server — 80+ tools for navigation, impact analysis, and architecture4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.110 GitHub stars.
  16. CodeGraph @codegraph-ai/codegraphSemantic code graph: 42 tools, 38 languages. Callers, impact, AI context, memory, PR review.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.109 GitHub stars.
  17. Sqlsure @sqlsure/sqlsureSemantic SQL inspector: catches double-counting, wrong joins, PII exposure before execution.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.99 GitHub stars.
  18. Sub Agents @shinpr/sub-agents-mcpMCP server for delegating tasks to specialized AI sub-agents across coding tools5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.98 GitHub stars.
  19. Cynicalsally @w1ckedxt/cynicalsallyBrutally honest code reviews: scores, real issues, and usable fixes. CLI + MCP server.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.97 GitHub stars.
  20. Django ORM Lens @frowningdev/django-orm-lensDjango ORM static analysis MCP. Models, relations, migrations, indexes, signals, N+1.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.85 GitHub stars.
  21. Sverklo @sverklo/sverkloLocal-first MCP code intelligence: 37 tools — hybrid search, blast-radius, diff review, memory.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.82 GitHub stars.

Also touches on Code review

210 where it is one part of a bigger job