Veridu
Server Details
Verify AI-generated code before you commit: independent reviewers check it. PR review too.
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- michaelw-pr/veridu-plugin
- GitHub Stars
- 0
- ChatGPT
- –
- Claude
- Veridu
TDQS
Scored across 4 tools
The two review entry points are distinct: veridu_review targets GitHub pull requests while verify_change targets a local diff before commit. The two polling tools could be momentarily confused because both wait for and return review state, but each description clearly binds it to a specific review type and warns against restarting a review.
All names are snake_case and readable, but conventions are mixed: veridu_review and veridu_review_status use a product prefix, while verify_change and get_change use generic verbs. The polling tools are especially asymmetric because get_change does not indicate that it belongs to verify_change.
Four tools is well-scoped for a focused code-review server: two review creation paths and one polling/result tool for each. Each tool has a clear role and there is no obvious redundancy.
Core workflows are covered: GitHub PR review, pre-commit diff verification, follow-up handling, and polling for running reviews. Minor gaps remain, such as no review listing/history, cancellation, or account/repo-link management within the tool surface, but these appear workable outside the server.
Publisher details
- Operator
- T3 Interactive LLC · Publisher source
- Operator website
- https://veridu.io · Publisher source
- Vendor relationship
- First-party
- Documentation
- https://veridu.io/docs
- Trust center
- Not applicable
- Restrictions
- Not applicable
Available Tools
4 toolsget_changeGet a verify resultARead-onlyIdempotentInspect
Fetch the result of a verify_change that was still running. Never starts a new review. Waits up to ~45 seconds for the review to finish or move to its next step, then returns the result or stage_label (what Veridu is doing now) — tell the user that line and call again.
Inputs: change_id (required).
veridu_reviewReview a pull requestAIdempotentInspect
Review a GitHub pull request with Veridu: code review that knows what depends on the change. Veridu finds the callers, implementations and references the PR affects, independent reviewers check it in that context, ungrounded findings are dropped, and only problems both reviewers confirm can block. Returns the outcome, agreements, disputes and per-reviewer findings.
Requires a Veridu account. Each new review counts as one review on that account; asking again for the same pull request head returns the existing review.
Notes:
Private repos: link the repo at https://veridu.io/repos first (GitHub App or fine-grained PAT). No credentials are passed through this tool.
The
modelsarray selects the reviewer panel for this call. Panel must include at least two distinct vendors; tier-gated models require a paid account. If more than one model per vendor is passed the first per vendor wins. Omitmodelsto use the account default panel.
Inputs: pr_url (required), models.
veridu_review_statusGet a pull request reviewARead-onlyIdempotentInspect
Check a Veridu review that was still running when veridu_review returned, and fetch the result once it finishes.
This never starts a review and never counts as one. While the review runs, this waits up to ~45 seconds for it to finish or move to its next step, then returns what Veridu is doing (stage_label). Tell the user that line: it says whether the reviewers are still on the change or Veridu is checking code outside it. Then call again with the same review_id.
If a review is still running, DO NOT call veridu_review again for the same pull request. That starts a second review and consumes another attempt. Use this tool with the review_id you were given.
Inputs: review_id (required).
verify_changeVerify a code changeAIdempotentInspect
Have Veridu review a code change you just made, before you commit or open a pull request. Independent reviewers check the change against the files you send (for PHP, Veridu also traces callers and overrides within them), findings that cannot be grounded in the code are dropped, and only problems both reviewers confirm can block. You get an outcome (pass / review / block) and concrete findings with file, line, severity and evidence.
Send: diff = git diff --no-renames <base> of your change (include new files: git add -N first),
and files = the FULL current content of every file the diff adds or modifies, keyed by repo-relative path.
You may add up to a few closely related unchanged files (callers, interfaces) to files for context.
Text files only; no renames, mode changes, symlinks, submodules or binaries. Limits: diff 256 KB / 60 files,
files 512 KB total.
After fixing findings, call again with the new diff. Veridu links it to the previous check of the same files
(last 24 hours) automatically; pass parent_change = an earlier change_id only to link a different one.
Up to two follow-ups per change do not count as a new review. Sending exactly the same change again returns the earlier result.
Every finding has a finding_id that stays the same across follow-ups while the problem persists. A follow-up also
returns followup: which ids persist, which came back (reported earlier in the chain, skipped last time), which are new
(possibly introduced by your fix), and which are no longer reported,
with code_changed saying whether the flagged line changed. "No longer reported" is not proof of a fix.
Low-severity findings can be left out of the list but are still counted in followup. An identical resend returns the earlier result as it was.
Each other new change counts as one review on the signed-in Veridu account.
Results are advisory: Veridu sees only what you send, not the rest of the repository. If the review is still running after ~45 seconds you get a change_id and stage_label (what Veridu is doing now): tell the user that line, then call get_change with the change_id (do not call verify_change again for the same change).
Inputs: diff (required), files (required), intent, repo_name, +1 more.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Merge gate for AI-written code: deterministic vetoes plus a Claude Haiku 5.5 review. No signup.
HefestoAI checks AI-generated code before you ship it.
Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceVerifies AI-generated code to catch hallucinated packages, API drift, and silent logic bugs before git push. Supports Rust, Python, TypeScript, and JavaScript.MIT
- AlicenseNot gradedqualityNot gradedmaintenanceEnables AI-assisted code review with bias mitigation strategies through cross-model evaluation and bias-aware prompting. Detects AI-generated code from commit authors and provides structured reviews with security, performance, and maintainability analysis.-
- AlicenseNot gradedqualityDmaintenanceEnables AI-powered, zero-trust code review with multiple models, supporting single files, git diffs, and multiple files, with security, performance, and architecture checks across 10+ languages.15MIT
- AlicenseAqualityDmaintenanceValidates AI-generated code against actual codebases to catch hallucinations, dead code, and API mismatches before runtime.1220 npm1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.