Skip to main content
Glama
mennansevim

MCP Code Review Server

by mennansevim
OverviewSchemaRelated ServersScoreDiscussions
Python
Remote

🤖 MCP Code Review Server

Platform-agnostic AI-powered code review server with webhook support and MCP integration.

✨ Features

  • 🔌 Platform Agnostic: Single webhook endpoint for GitHub, GitLab, Bitbucket, Azure DevOps

  • 🤖 AI-Powered: Uses Groq (Llama 3.3), Claude, or GPT-4 for intelligent code review

  • 💬 Multiple Comment Styles: Summary comments, inline comments, or both

  • 🎯 Focused Analysis: Security, performance, bugs, code quality

  • 🔧 MCP Tools: Manual code review via Claude Desktop or other MCP clients

  • 🚀 Easy Integration: Simple pipeline configuration

Related MCP server: DevReview MCP Server

🏗️ Architecture

Pipeline Webhook → MCP Server → Platform Detection → AI Review → Post Comments

📦 Installation

1. Clone and Setup

cd python
python -m venv venv
source venv/bin/activate  # Windows: venv\Scripts\activate
pip install -r requirements.txt

2. Configuration

Copy .env.example to .env and configure:

# AI Provider (choose one)
GROQ_API_KEY=your_key
# or
ANTHROPIC_API_KEY=your_key
# or
OPENAI_API_KEY=your_key

# Platform Tokens
GITHUB_TOKEN=your_github_token
GITLAB_TOKEN=your_gitlab_token
BITBUCKET_USERNAME=your_username
BITBUCKET_APP_PASSWORD=your_password
AZURE_DEVOPS_PAT=your_azure_pat
AZURE_DEVOPS_ORG=https://dev.azure.com/your-org

Edit config.yaml for review preferences:

ai:
  provider: "groq"  # or "anthropic" or "openai"
  model: "llama-3.3-70b-versatile"  # Groq models
  # model: "claude-3-5-sonnet-20241022"  # Anthropic
  # model: "gpt-4-turbo-preview"  # OpenAI

review:
  comment_strategy: "both"  # summary, inline, both
  report_levels:
    - critical
    - high
    - medium
  block_on_critical: true

3. Run Server

python server.py

Server runs on http://localhost:8000

🔧 Pipeline Integration

Bitbucket Pipelines

See examples/bitbucket-pipelines.yml

pipelines:
  pull-requests:
    '**':
      - step:
          script:
            - curl -X POST $REVIEW_SERVER_URL/webhook ...

GitHub Actions

See examples/github-actions.yml

- name: Trigger AI Review
  run: |
    curl -X POST ${{ secrets.REVIEW_SERVER_URL }}/webhook ...

GitLab CI/CD

See examples/gitlab-ci.yml

ai-code-review:
  script:
    - curl -X POST $REVIEW_SERVER_URL/webhook ...

Azure Pipelines

See examples/azure-pipelines.yml

- script: |
    curl -X POST $(REVIEW_SERVER_URL)/webhook ...

🎯 MCP Tools (Manual Review)

Use from Claude Desktop or any MCP client:

1. Review Code

{
  "tool": "review_code",
  "arguments": {
    "code": "def login(username, password):\n    query = f\"SELECT * FROM users WHERE username='{username}'\"",
    "focus": ["security", "bugs"]
  }
}

2. Analyze Diff

{
  "tool": "analyze_diff",
  "arguments": {
    "diff": "--- a/file.py\n+++ b/file.py\n..."
  }
}

3. Security Scan

{
  "tool": "security_scan",
  "arguments": {
    "code": "your_code_here",
    "language": "python"
  }
}

📊 Review Output

Summary Comment Example

## 🤖 AI Code Review

**Score:** 7/10 ⚠️

### 📝 Summary
Good code structure but found some security concerns...

### 📊 Issues Found
- Total: **5**
- 🔴 Critical: **1**
- 🟠 High: **2**
- 🟡 Medium: **2**

### ⚠️ Important Issues

#### 🔴 SQL Injection Vulnerability
**Severity:** CRITICAL
**Location:** `auth.py` (Line 42)

Using string concatenation for SQL queries...

**Suggestion:**
> Use parameterized queries...

Inline Comments

Comments posted directly on the problematic code lines.

🔒 Security

  • Webhook signature verification

  • API token authentication

  • Environment-based secrets

  • No sensitive data logging

🚀 Deployment

Docker

docker build -t mcp-code-review .
docker run -p 8000:8000 --env-file .env mcp-code-review

Production

  • Use reverse proxy (nginx, traefik)

  • Enable HTTPS

  • Set up logging and monitoring

  • Configure rate limiting

🛠️ Development

# Install dev dependencies
pip install -r requirements.txt

# Run tests
pytest

# Format code
black .

📝 API Endpoints

  • GET / - Health check

  • POST /webhook - Universal webhook endpoint

  • GET /mcp/sse - MCP Server-Sent Events endpoint

🤝 Contributing

Contributions welcome! Please:

  1. Fork the repository

  2. Create a feature branch

  3. Submit a pull request

📄 License

MIT License

🆘 Support

For issues and questions:

  • Open an issue on GitHub

  • Check documentation

  • Review examples

Made with ❤️ for better code reviews

This server cannot be installed

F
license - not found
-
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/mennansevim/mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server