Octopus MCP Server
Octopus Code Review — editor plugin
Bring Octopus AI code review into your editor. This repo is both:
an MCP server (
@octp/mcp) that exposes Octopus as tools, anda plugin for the Cursor and Claude marketplaces that wires the server in.
Tools
Tool | What it does |
| Verify the connection and show which Octopus org your token belongs to. |
| Review your working changes. Pass a |
| Trigger a full server-side review of an open pull/merge request; Octopus posts findings as comments on the PR. Pass a PR number or URL. |
| Ask Octopus about your code or a past review (answers use your indexed repos + review history). |
Skills & commands
/octopus-review— review your working changes, or pass a PR number/URL to review a pull request.autofix skill — say "octopus autofix" to scan your open PRs for Octopus review-bot comments, apply the fixes, push, and re-trigger review.
Get a token
The tools authenticate with an Octopus org API token (oct_...):
npx @octp/cli loginor create one in your octopus-review.ai settings. Put it in the plugin's config (never in a repo).
Install
Cursor — install "Octopus Code Review" from the marketplace, then set your OCTOPUS_TOKEN in the plugin config.
Claude — add this marketplace and install the plugin:
claude plugin marketplace add octopusreview/octopus-plugin
claude plugin install octopus-reviewthen set your token when prompted (stored as a sensitive user config value).
Any MCP client — run the server directly:
OCTOPUS_TOKEN=oct_... npx -y github:octopusreview/octopus-pluginConfig
Variable | Required | Default |
| yes | — |
| no |
|
Develop
npm install
npm run build
OCTOPUS_TOKEN=oct_... node build/index.js # a stdio MCP serverMIT licensed. Octopus itself is a separate product; this plugin only calls its public API on your behalf.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/octopusreview/octopus-plugin'
If you have feedback or need assistance with the MCP directory API, please join our Discord server