LGTMCP
LGTMCP is an AI-powered code review MCP server that uses Google Gemini to analyze git repository changes and optionally commit approved code.
Review only (
review_only): Analyzes staged and unstaged changes in a git repository and returns detailed AI-generated feedback with an approval status, without committing anything.Review and auto-commit (
review_and_commit): If Gemini approves the changes (LGTM), automatically commits them with a provided message and returns the commit hash — otherwise, returns detailed review feedback.Security scanning: Automatically scans code changes for exposed secrets using Gitleaks before sending to the AI reviewer.
Context-aware review: Gemini can request additional file contents for better context, while gitignored files are automatically blocked from access.
Project-specific guidelines: Discovers and incorporates
AGENTS.mdandREVIEW.mdfiles from the repository to apply custom review rules.Fallback model support: Falls back to a secondary Gemini model if the primary hits quota limits.
MCP integration: Works with MCP clients like Claude Desktop.
Enables AI-powered code review and automatic commits for Git repositories, including diff analysis and security scanning of staged and unstaged changes.
Leverages Google Gemini models to perform intelligent code analysis and provide detailed feedback or approval for code changes.
LGTMCP
A Model Context Protocol (MCP) server that provides AI-powered code review using Google Gemini 3.1 Pro. LGTMCP reviews your code changes and either commits them automatically (if approved) or provides detailed feedback for improvements.
In my usage, the median review takes 1.9 minutes and costs $0.20, with an acceptance rate around 45%. You should decide whether that is slow and expensive or fast and cheap.
Features
AI Code Review: Leverages Google Gemini 3.1 Pro for intelligent code analysis
Automatic Commit: Commits changes when code passes review (optional)
Security Scanning: Built-in secret detection using Gitleaks
Gitignore Protection: Prevents access to gitignored files during review
Project Guidelines: Discovers
AGENTS.mdandREVIEW.mdfor project-specific review rulesMCP Integration: Works seamlessly with Claude Desktop and other MCP clients
Review-Only Mode: Option to get feedback without automatic commits
Related MCP server: Ndlovu Code Reviewer
Installation
Build from source
git clone https://msrl.dev/lgtmcp.git
cd lgtmcp
make buildInstall to ~/bin
make installThis installs the binary to ~/bin by default. You can customize the installation directory:
make install INSTALL_PATH=/usr/local/binNote: Ensure ~/bin is in your shell's PATH. Add this to your shell configuration file if needed:
# For bash/zsh
export PATH="$HOME/bin:$PATH"Configuration
Get a Google API key from Google AI Studio.
Create configuration directory:
mkdir -p ~/.config/lgtmcpCreate configuration file from example:
cp config.example.yaml ~/.config/lgtmcp/config.yamlEdit the configuration file with your settings:
google: api_key: "your-gemini-api-key-here" gemini: model: "gemini-3.1-pro-preview" fallback_model: "gemini-2.5-pro" # Default; set to "none" to disable logging: level: "info"
The fallback_model is used when we run into quota exhaustion on the primary
model. While Gemini 3.1 Pro is in preview, it has very low daily rate limits.
Claude Code configuration
Set up configuration file as described above
Configure LGTMCP with Claude Code:
claude mcp add lgtmcp -- lgtmcpUsage
Basic Usage
The MCP server exposes two tools:
review_only
Reviews code changes and returns feedback without committing.
Parameters:
directory: Path to the git repository
review_and_commit
Reviews code changes and commits if approved. This is a separate tool so that
you can set tool permissions on it differently from review.
Parameters:
directory: Path to the git repositorycommit_message: Message for the commit if approved
Example Workflows
Review only (no commit):
review_only("/path/to/repo")Review and commit if approved:
review_and_commit("/path/to/repo", "Add new feature")What Happens
Security check: Scans files for secrets using Gitleaks
Diff generation: Creates diff of all staged and unstaged changes
AI review: Sends diff to Gemini 3.1 Pro for analysis
Gemini can request file contents for context
Gitignored files are automatically blocked from access
Decision:
If approved (LGTM): Returns approval message (
review_only) or commits changes (review_and_commit)If not approved: Returns detailed feedback
Project-Specific Review Guidelines
Repositories can include AGENTS.md and/or REVIEW.md files with project-specific
review guidelines. LGTMCP automatically discovers these files by walking from each
changed file's directory up to the repo root, and injects their contents into the
review prompt. Files are deduplicated and sorted root-first (shallowest depth first).
Configuration
All configuration is managed through the YAML configuration file located at:
$XDG_CONFIG_HOME/lgtmcp/config.yaml(if XDG_CONFIG_HOME is set)~/.config/lgtmcp/config.yaml(default)
See config.example.yaml for all available configuration options.
Logging
LGTMCP logs are written to platform-specific default locations:
macOS:
~/Library/Logs/lgtmcp/lgtmcp.logLinux:
~/.local/share/lgtmcp/logs/lgtmcp.log(or$XDG_DATA_HOME/lgtmcp/logs/lgtmcp.log)Windows:
%LOCALAPPDATA%\lgtmcp\logs\lgtmcp.log
You can configure logging in your config.yaml:
logging:
output: "directory" # Options: none, stderr, directory
level: "info" # Options: debug, info, warn, error
# directory: "/custom/log/path" # Optional custom directoryTo view logs on macOS:
# View the log file
tail -f ~/Library/Logs/lgtmcp/lgtmcp.log
# Or open in Console.app
open ~/Library/Logs/lgtmcp/lgtmcp.logDevelopment
Building
make buildTesting
make testLinting
make lintCoverage
make coverageTroubleshooting
"Not a git repository" error
Ensure you're in a git repository with a
.gitdirectory
"Secrets detected" error
Review and remove any exposed secrets from your changes
"Gemini API error"
Verify your API key is valid and has quota remaining
Check network connectivity
"No changes to review"
Make sure you have staged or unstaged changes in your repository
Maintenance
Tools
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/shields/lgtmcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server