ai-pr-reviewer
Automates AI-powered pull request reviews and security audits on GitHub, posting inline review comments with one-click suggested fixes and generating PR summaries and changelogs.
🤖 PR-Agent Pro — Automated AI Pull Request Reviewer & Security Auditor
An enterprise-grade GitHub Action, Model Context Protocol (MCP) Server, and CLI tool that automatically audits pull request code diffs, detects security flaws & secret leaks, posts inline 1-click suggested fixes, and generates semantic changelogs.
⚡ Key Capabilities
🛡️ Zero-Day Security & Secret Leak Scanner: Scans modified lines for leaked Stripe/AWS/GitHub API keys, plaintext passwords, SQL injection vulnerabilities, and command injection risks.
📝 Actionable 1-Click Code Review: Posts inline GitHub review comments containing
suggestioncode blocks that developers can apply directly from the GitHub UI with one click.🤖 Semantic PR Summary & Changelog: Automatically synthesizes human-readable pull request overviews, risk scores, and release note bullets.
🔌 Model Context Protocol (MCP) Server: Equips Claude Desktop, Cursor IDE, and Antigravity agents to review local git diffs before pushing!
Related MCP server: aigently
🚀 GitHub Action Quickstart (2 Minutes)
Add this workflow to your repository at .github/workflows/ai-pr-reviewer.yml:
name: AI Pull Request Reviewer
on:
pull_request:
types: [opened, synchronize, reopened]
jobs:
ai-review:
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Run PR-Agent Pro Reviewer
uses: meanusarcanus/ai-pr-reviewer-action@master
with:
github_token: ${{ secrets.GITHUB_TOKEN }}
severity_threshold: "Medium"🛠️ Model Context Protocol (MCP) Tools
Tool Name | Parameters | Description |
|
| Reviews a git diff, analyzes code quality, and generates actionable comments with 1-click suggested diffs. |
|
| Scans code changes for leaked secrets, SQL injection, and OWASP security flaws with a grade score (A+ to F). |
|
| Synthesizes a structured PR description and release notes from code changes. |
Connect to Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"ai-pr-reviewer": {
"command": "python3",
"args": ["/path/to/ai_pr_reviewer_action/mcp_server.py"]
}
}
}📦 Python SDK & CLI Usage
pip install ai-pr-reviewerfrom ai_pr_reviewer import review_diff, audit_security, generate_changelog
diff = """
--- a/db.py
+++ b/db.py
@@ -10,3 +10,4 @@
+ query = f"SELECT * FROM users WHERE email = '{user_email}'"
+ cursor.execute(query)
"""
# Audit security
security = audit_security(diff)
print(f"Score: {security['security_score']}/100 | Grade: {security['security_grade']}")
# Run code review
review = review_code_diff(diff)
print(f"Verdict: {review['verdict']}")📄 License
MIT License. Created by Meanus Arcanus.
This server cannot be installed
Maintenance
Related MCP Connectors
Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.
AI code review for GitHub PRs with an MCP autofix loop for Claude Code and Cursor
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
Related MCP Servers
- AlicenseCqualityCmaintenanceEnables AI-powered automated testing, security scanning, code review, and maintenance tasks directly within Claude Code or desktop.124MIT
- FlicenseNot gradedqualityDmaintenanceSecurely feeds summarized expert security rules into your coding assistance Claude Code, Cursor, etc — zero config, no API key.
- AlicenseAqualityDmaintenanceSecurity scanning for AI coding tools (Claude Code, Cursor, Windsurf) including secrets detection, MCP config vulnerabilities, agent instruction checks, threat modeling, prompt injection testing, pre-commit security checks, and dependency vulnerability scanning.7501MIT
- AlicenseAqualityCmaintenanceAI-powered security code review for Claude Code that runs multiple scanners (CodeQL, Semgrep, etc.) to detect vulnerabilities, secrets, and dependency CVEs, producing prioritized reports.23MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/meanusarcanus/ai-pr-reviewer-action'
If you have feedback or need assistance with the MCP directory API, please join our Discord server