Code review MCP servers

A server here reviews code changes or pull requests for quality or bugs before merging.

Not here: security scanning of dependencies.

563servers
105 remote458 localTagged by Odel's AI, which can make mistakes

Best fit

339 made for this, ranked by starsRemoteLocal
  1. Bug Detector @madhavi-opsera/bug-detectorAnalyzes code for bugs, security vulnerabilities, and code smells5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  2. VibeLens @klewicki7/vibelens-mcpVibeLens MCP tool for AI to visualize code changes with inline annotations in VS Code/Cursor5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  3. Code Lens @j0hanz/code-lensGemini-powered MCP server for code analysis.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  4. AI Workbench MCP @hrishikesh-thakre/ai-workbench-mcpGoose-first MCP server for Workbench-owned acceptance evidence, validation gates, and analytics.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  5. Universal Brute Workpack @haoyun18881-beep/universal-brute-workpackStdio-first Agent MCP workpack for local tools, audit chains, search, memory, and pipelines.34% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  6. Leakguard @doazvjettu/leakguard-mcpStatic analyzer flagging lookahead bias & data leakage in ML/trading code before backtest.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  7. Codereviewbuddy @detailobsessed/codereviewbuddyMCP server that helps AI coding agents interact with AI code reviewers on GitHub PRs4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  8. Locksmith @cxk280/locksmithLints PostgreSQL migrations for dangerous locking operations and suggests safe rewrites.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  9. Boltwork @squidboy30/boltwork-mcpAI services via Bitcoin Lightning — PDF summarisation, code review, translation and more.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  10. QA Radar @muratkus/qaradarTells AI agents which files to test first — churn, coverage, and test mapping as risk scores.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  11. Atlas Pipeline @iamnishant51/atlas-pipeline7-stage AI pipeline MCP server: Intent→Context→Git→Decompose→Variants→Critique→Optimize11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  12. github-twin @christopherdavenport/github-twinPersonal RAG over your GitHub history (commits, code, reviews), served to Claude Code over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  13. Code Reviewer Ai @csoai-org/code-reviewer-ai-mcpCode Reviewer Ai MCP Server by MEOK AI Labs12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  14. PySpark @annasmazhar/pyspark-mcpSQL to PySpark conversion, AWS Glue job generation, and Spark code optimization.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  15. GateTest @gatetest/gatetest120-module QA gate. Give Claude eyes (screenshots), ears (Sentry errors), and hands (verify fixes).6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  16. Code Pattern Risk Scanner @lazymac2x/code-pattern-risk-scannerCloudflare Workers MCP server: code-pattern-risk-scanner4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. GitLumen MCP @gitlumen-team/gitlumen-mcpScreens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  18. Invinoveritas @babyblueviper/invinoveritasSecond opinion before an irreversible agent action; signed proofs, free verify, public ledger.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Taste @humantaste/taste-mcpExpert review for AI agents. On-chain proof of human review.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Codemind @codemindhq/codemindHand routine JS/TS tasks to Codemind from your agent. $0.10 per verified build; failures are free.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. GitMir Vibe @gitmir/vibeYour coding agent asks the business logic of your repository and checks commits before they land8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  22. TokenOS Smart Contract Audit @tokenos/contract-auditScan Solidity & Anchor code6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. Plainsight MCP @plainsight/mcpSearch the Plainsight playbook and review code against proven best practices.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  24. Roundtable @roundtable/roundtableMulti-model AI debates: GPT-4o, Claude, Gemini & 200+ models discuss, then synthesize insight.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.