Code review MCP servers

A server here reviews code changes or pull requests for quality or bugs before merging.

Not here: security scanning of dependencies.

563servers
105 remote458 localTagged by Odel's AI, which can make mistakes

Best fit

339 made for this, ranked by starsRemoteLocal
  1. Architect @hirosecure/architectSecurity reviews for coding agents: diffs checked against your org policy and live infrastructure.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  2. RepoPilot @repopilot/repopilotRepository evidence for agents before they adopt dependencies, enter codebases, compare, or merge.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. Rams @rams/ramsDesign review for UI code: 291 rules, scored 0-100 with fixes and git-applyable patches.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. Gluecron @gluecron/gluecronAI-native git hosting — repos, PRs, issues, CI gates, and AI code review over MCP (60 tools).6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. Dev Changes @openhelm/dev-changesTurn described changes into reviewed pull requests: propose, triage, review, dependency audits.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  6. Verify @kenoodl/verifyRuns your code against a contract; HELD or BROKE at the exact input. Deterministic. 0.10 USDC/call.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. Review @hectorguerilla/review-mcpMulti-model code review: a panel of models + detectors return a pass/fail verdict. Paid via x402.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. CleanCode AI @evozim/cleancode-aiAutomated codebase refactoring and type safety validator.19% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.