codesentry-mcp
Automated PR reviews and status checks, providing tools to analyze pull requests, add review comments, and update status checks.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@codesentry-mcp analyze the repo at ./src for security vulnerabilities and code quality"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
๐ก๏ธ CodeSentry MCP
AI-Powered Code Review Assistant using Model Context Protocol
CodeSentry is an intelligent code review assistant that integrates with AI systems through the Model Context Protocol (MCP). It provides comprehensive analysis of your codebase, identifying security vulnerabilities, performance bottlenecks, code quality issues, and documentation gaps.
โจ Features
๐ Security Analysis - Detect OWASP Top 10 vulnerabilities and security anti-patterns
โก Performance Analysis - Identify bottlenecks and optimization opportunities
๐ฏ Code Quality - Find code smells, complexity issues, and maintainability problems
๐ Documentation Review - Check for missing or outdated documentation
๐ค AI Integration - Natural language explanations and suggestions
๐ GitHub Integration - Automated PR reviews and status checks
๐งช Live Testing - Built-in MCP client for immediate feedback
Related MCP server: Argus MCP
๐ Quick Start
Prerequisites
Node.js 18+
Git
An AI assistant that supports MCP (Claude, etc.)
Installation
# Clone the repository
git clone https://github.com/ayushgundecha/codesentry-mcp.git
cd codesentry-mcp
# Install dependencies
npm install
# Build the project
npm run build
# Test the server
npm run devUsage with MCP
Add to Claude Desktop (macOS):
{
"mcpServers": {
"codesentry": {
"command": "node",
"args": ["/path/to/codesentry-mcp/dist/index.js"],
"env": {}
}
}
}Test the connection:
Ask Claude: "Use the ping tool to test CodeSentry"Analyze a repository:
Ask Claude: "Use CodeSentry to analyze the repository at /path/to/your/project"๐ ๏ธ Development
Project Structure
codesentry-mcp/
โโโ src/
โ โโโ analyzers/ # Analysis engines (security, performance, quality)
โ โโโ integrations/ # External service integrations (Git, GitHub, AI)
โ โโโ mcp/ # MCP protocol implementation
โ โโโ utils/ # Utility functions and helpers
โ โโโ types/ # TypeScript type definitions
โโโ tests/ # Test suites
โโโ docs/ # Documentation
โโโ examples/ # Usage examplesAvailable Scripts
npm run dev # Start development server
npm run build # Build for production
npm run test # Run test suite
npm run lint # Lint code
npm run format # Format code with Prettier๐ Available Tools
Analysis Tools
analyze_repository- Comprehensive repository analysisanalyze_file- Single file analysisscan_security- Security vulnerability scancheck_dependencies- Dependency audit
AI Tools
explain_code- Natural language code explanationssuggest_improvements- AI-powered refactoring suggestionsgenerate_tests- Test case recommendations
GitHub Tools
analyze_pr- Pull request analysiscomment_suggestion- Add review commentsupdate_status- Update PR status checks
๐ Example Output
{
"security": [
{
"type": "SQL_INJECTION",
"severity": "HIGH",
"file": "src/user.ts",
"line": 42,
"description": "Potential SQL injection vulnerability",
"suggestion": "Use parameterized queries",
"fix": "await prisma.user.findMany({ where: { id: userId } })"
}
],
"performance": [
{
"type": "ALGORITHM_COMPLEXITY",
"severity": "MEDIUM",
"file": "src/sort.ts",
"line": 15,
"complexity": "O(nยฒ)",
"suggestion": "Use Array.sort() for better performance",
"estimatedImpact": "90% improvement"
}
]
}๐ค Contributing
We welcome contributions! Please see our Contributing Guide for details.
Fork the repository
Create a feature branch (
git checkout -b feature/amazing-feature)Commit your changes (
git commit -m 'Add amazing feature')Push to the branch (
git push origin feature/amazing-feature)Open a Pull Request
๐ License
This project is licensed under the MIT License - see the LICENSE file for details.
๐ Acknowledgments
Model Context Protocol by Anthropic
TypeScript ESLint for code analysis patterns
Simple Git for Git integration
๐ Support
๐ Report Issues
๐ฌ Discussions
๐ง Email: your-email@example.com
Available Tools
2 toolsanalyze_repositoryB
Analyze a git repository for security, performance, and quality issues
Inputs: path (required), config.
pingA
Test connectivity to the CodeSentry server
Inputs: message.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelogโฆ
TDQS
Scored across 2 tools
The two tools serve entirely different purposes: one checks connectivity and the other performs repository analysis. There is no overlap or ambiguity in their intended use.
Both tool names are imperative verbs, but 'ping' is a bare verb while 'analyze_repository' follows a verb_noun pattern. This is a minor deviation from a fully uniform naming convention.
With only two tools, the server feels minimal. For a repository analysis service, one might expect additional tools for managing or retrieving results, but the count is not unreasonable for a simple utility.
The core analysis functionality is present, but there are no supporting operations such as listing previous analyses, fetching detailed reports, or configuring analysis parameters. The surface is functional but incomplete for a comprehensive analysis workflow.
Maintenance
Related MCP Connectors
Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
Screens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.
Scan websites and code for security, performance and SEO issues from your AI assistant.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
Related MCP Servers
- AlicenseNot gradedqualityNot gradedmaintenanceEnables AI-assisted code review with bias mitigation strategies through cross-model evaluation and bias-aware prompting. Detects AI-generated code from commit authors and provides structured reviews with security, performance, and maintainability analysis.-
- AlicenseNot gradedqualityDmaintenanceEnables AI-powered, zero-trust code review with multiple models, supporting single files, git diffs, and multiple files, with security, performance, and architecture checks across 10+ languages.15MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI-powered code review and improvement, including analysis, refactoring suggestions, and automatic test generation, with an optional agentic loop for iterative refinement.MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI-powered security scanning of codebases through conversational analysis, allowing users to assess, threat model, code review, DAST test, and generate security reports using natural language with Claude.MIT