Skip to main content
Glama

๐Ÿ›ก๏ธ CodeSentry MCP

AI-Powered Code Review Assistant using Model Context Protocol

License: MIT TypeScript Node.js

CodeSentry is an intelligent code review assistant that integrates with AI systems through the Model Context Protocol (MCP). It provides comprehensive analysis of your codebase, identifying security vulnerabilities, performance bottlenecks, code quality issues, and documentation gaps.

โœจ Features

  • ๐Ÿ”’ Security Analysis - Detect OWASP Top 10 vulnerabilities and security anti-patterns

  • โšก Performance Analysis - Identify bottlenecks and optimization opportunities

  • ๐ŸŽฏ Code Quality - Find code smells, complexity issues, and maintainability problems

  • ๐Ÿ“š Documentation Review - Check for missing or outdated documentation

  • ๐Ÿค– AI Integration - Natural language explanations and suggestions

  • ๐Ÿ”— GitHub Integration - Automated PR reviews and status checks

  • ๐Ÿงช Live Testing - Built-in MCP client for immediate feedback

Related MCP server: Argus MCP

๐Ÿš€ Quick Start

Prerequisites

  • Node.js 18+

  • Git

  • An AI assistant that supports MCP (Claude, etc.)

Installation

# Clone the repository
git clone https://github.com/ayushgundecha/codesentry-mcp.git
cd codesentry-mcp

# Install dependencies
npm install

# Build the project
npm run build

# Test the server
npm run dev

Usage with MCP

  1. Add to Claude Desktop (macOS):

{
  "mcpServers": {
    "codesentry": {
      "command": "node",
      "args": ["/path/to/codesentry-mcp/dist/index.js"],
      "env": {}
    }
  }
}
  1. Test the connection:

Ask Claude: "Use the ping tool to test CodeSentry"
  1. Analyze a repository:

Ask Claude: "Use CodeSentry to analyze the repository at /path/to/your/project"

๐Ÿ› ๏ธ Development

Project Structure

codesentry-mcp/
โ”œโ”€โ”€ src/
โ”‚   โ”œโ”€โ”€ analyzers/          # Analysis engines (security, performance, quality)
โ”‚   โ”œโ”€โ”€ integrations/       # External service integrations (Git, GitHub, AI)
โ”‚   โ”œโ”€โ”€ mcp/               # MCP protocol implementation
โ”‚   โ”œโ”€โ”€ utils/             # Utility functions and helpers
โ”‚   โ””โ”€โ”€ types/             # TypeScript type definitions
โ”œโ”€โ”€ tests/                 # Test suites
โ”œโ”€โ”€ docs/                  # Documentation
โ””โ”€โ”€ examples/              # Usage examples

Available Scripts

npm run dev          # Start development server
npm run build        # Build for production
npm run test         # Run test suite
npm run lint         # Lint code
npm run format       # Format code with Prettier

๐Ÿ“‹ Available Tools

Analysis Tools

  • analyze_repository - Comprehensive repository analysis

  • analyze_file - Single file analysis

  • scan_security - Security vulnerability scan

  • check_dependencies - Dependency audit

AI Tools

  • explain_code - Natural language code explanations

  • suggest_improvements - AI-powered refactoring suggestions

  • generate_tests - Test case recommendations

GitHub Tools

  • analyze_pr - Pull request analysis

  • comment_suggestion - Add review comments

  • update_status - Update PR status checks

๐Ÿ“Š Example Output

{
  "security": [
    {
      "type": "SQL_INJECTION",
      "severity": "HIGH", 
      "file": "src/user.ts",
      "line": 42,
      "description": "Potential SQL injection vulnerability",
      "suggestion": "Use parameterized queries",
      "fix": "await prisma.user.findMany({ where: { id: userId } })"
    }
  ],
  "performance": [
    {
      "type": "ALGORITHM_COMPLEXITY",
      "severity": "MEDIUM",
      "file": "src/sort.ts", 
      "line": 15,
      "complexity": "O(nยฒ)",
      "suggestion": "Use Array.sort() for better performance",
      "estimatedImpact": "90% improvement"
    }
  ]
}

๐Ÿค Contributing

We welcome contributions! Please see our Contributing Guide for details.

  1. Fork the repository

  2. Create a feature branch (git checkout -b feature/amazing-feature)

  3. Commit your changes (git commit -m 'Add amazing feature')

  4. Push to the branch (git push origin feature/amazing-feature)

  5. Open a Pull Request

๐Ÿ“„ License

This project is licensed under the MIT License - see the LICENSE file for details.

๐Ÿ™ Acknowledgments

๐Ÿ“ž Support


Available Tools

2 tools
analyze_repositoryB

Analyze a git repository for security, performance, and quality issues

Inputs: path (required), config.

pingA

Test connectivity to the CodeSentry server

Inputs: message.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelogโ€ฆ

    TDQS

    A3.6/5.0

    Scored across 2 tools

    Disambiguation5/5

    The two tools serve entirely different purposes: one checks connectivity and the other performs repository analysis. There is no overlap or ambiguity in their intended use.

    Naming Consistency4/5

    Both tool names are imperative verbs, but 'ping' is a bare verb while 'analyze_repository' follows a verb_noun pattern. This is a minor deviation from a fully uniform naming convention.

    Tool Count3/5

    With only two tools, the server feels minimal. For a repository analysis service, one might expect additional tools for managing or retrieving results, but the count is not unreasonable for a simple utility.

    Completeness3/5

    The core analysis functionality is present, but there are no supporting operations such as listing previous analyses, fetching detailed reports, or configuring analysis parameters. The surface is functional but incomplete for a comprehensive analysis workflow.

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      Not graded
      maintenance
      Enables AI-assisted code review with bias mitigation strategies through cross-model evaluation and bias-aware prompting. Detects AI-generated code from commit authors and provides structured reviews with security, performance, and maintainability analysis.
      -
    • A
      license
      Not graded
      quality
      D
      maintenance
      Enables AI-powered, zero-trust code review with multiple models, supporting single files, git diffs, and multiple files, with security, performance, and architecture checks across 10+ languages.
      15
      MIT
    • A
      license
      Not graded
      quality
      D
      maintenance
      Enables AI-powered code review and improvement, including analysis, refactoring suggestions, and automatic test generation, with an optional agentic loop for iterative refinement.
      MIT
    • A
      license
      Not graded
      quality
      D
      maintenance
      Enables AI-powered security scanning of codebases through conversational analysis, allowing users to assess, threat model, code review, DAST test, and generate security reports using natural language with Claude.
      MIT