Checkride
Runs Biome lint checks on the codebase and reports lint issues or pass status.
Detects Bun-managed projects and runs their configured test, typecheck, and lint commands using Bun.
Runs validation checks inside Docker containers for sandboxed, isolated execution.
Runs ESLint on the codebase to detect lint errors and enforce code quality rules.
Supports Git safety scanning for conflict markers, secrets, and debug statements, as well as staged-file checks and pre-commit hooks.
Supports JavaScript projects through language auto-detection and running tests, linting, and security checks.
Detects npm projects, runs npm-based validation commands, and performs dependency security auditing with npm audit.
Detects pnpm projects and runs the validation pipeline using pnpm commands such as pnpm test.
Runs Prettier format checks through custom validation steps to catch formatting issues.
Supports Python projects by running mypy type checks, Ruff linting, pip-audit security scans, and tests.
Runs Ruff lint checks on Python code to find and report lint issues.
Supports Rust projects via cargo check, cargo audit, and Clippy linting.
Runs TypeScript type checking with tsc --noEmit, along with linting and test checks.
Detects Yarn-managed projects and runs the configured validation commands using Yarn.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Checkride Run the full pre-flight validation (tests, typecheck, lint) on this repo before I commit."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Checkride MCP Server
Checkride is a Model Context Protocol (MCP) server that serves as a fast, local "CI pre-flight" validation sidecar for AI coding agents.
Once Checkride is connected in Cursor, Claude Desktop, or Antigravity, it runs as an invisible local validation sidecar — the AI agent calls its tools to test code changes locally instead of guessing whether code is ready to commit.
Features
Fast Pre-Flight Pipeline: Runs test suite, type checker, and linter concurrently.
Smart SHA-256 Caching: Instant sub-10ms responses (
[CACHED < 10ms]) on unchanged codebases.Git & Staged-Files Intelligence: Run targeted validations and safety checks on modified or staged Git files only.
Pre-Commit Git Hooks: Easily install local
.git/hooks/pre-committo validate code automatically before manual commits.Docker Sandboxing: Optional containerized execution (
"sandbox": "docker") to isolate process execution.Dependency Security Auditing: Runs package security audits (
npm audit,cargo audit,pip-audit) to detect vulnerabilities introduced by AI agents.AI Fix Generator: Analyzes errors and type mismatches to return prompt-ready remediation hints and code snippets.
Visual Report Exporter: Exports Markdown (
.checkride/summary.md) and HTML (.checkride/report.html) validation summaries.Git Safety Guard Scanner: Detects leftover conflict markers (
<<<<<<<), leaked API secrets/keys, and debug statements (console.log,debugger,breakpoint()).Auto-Detection & Monorepo Support: Auto-detects package managers (
pnpm,yarn,bun,npm), monorepos (Turbo, pnpm workspaces, Lerna), and languages (TypeScript, JavaScript, Python, Rust, Go).Configurable Sidecar: Customize commands, timeouts per check, excludes, git safety severity, and custom build steps via
.checkriderc.json.
Related MCP server: FlowCheck MCP Server
What "Connected" Means
Cursor / AI Assistants start Checkride in the background via:
{
"mcpServers": {
"checkride": {
"command": "npx",
"args": ["-y", "checkride-mcp"]
}
}
}When you chat in your IDE, the agent can invoke 10 MCP tools. Those tools read your .checkriderc.json and run the exact same commands as your CI (pytest, ruff, tsc, test suite, web build).
You don't open Checkride as a desktop app — it operates as invisible infrastructure that the AI agent uses autonomously.
Typical Agent Workflow
flowchart LR
A[You ask agent to change code] --> B[Agent edits files]
B --> C[Agent calls Checkride MCP]
C --> D{Passed?}
D -->|Yes| E[Agent says ready / offers commit]
D -->|No| F[Agent reads errors and fixes]
F --> C1. You ask for a change
Example: "Add a field to the incident API and update the web page."
2. Agent implements the change
Edits files across your codebase.
3. Agent validates with Checkride (automatic or on request)
Common tool calls:
Tool | When it's used | What it runs |
| Before commit — only changed files | Git safety scan + linter on staged files |
| Full pre-flight check |
|
| After backend/API edits | Executed test suite |
| After code edits | Configured linter ( |
| After TS/React edits |
|
| Before commit | Conflict markers, secrets, debug logs |
| When something fails | Parses errors → prompt fix hints for agent |
| Quick recap | Last run result without re-running |
4. Agent fixes or confirms
Failed: Agent reads Checkride error output, fixes the code, and re-runs checks.
Passed: Agent informs you that the codebase is clean and ready to commit.
What You Can Say in Chat
You don't need exact tool names — plain language prompts trigger the tools automatically:
"Run checkride on my staged changes"
"Run full pre-flight checks before I commit"
"Did my API changes pass tests and lint?"
"Check for secrets or debug logs in what I changed"MCP vs CLI vs Git Hook
Method | Who runs it | Best for |
MCP (Connected) | AI Agent during chat | Continuous validation while pair-programming |
| You in terminal | Quick check before manual |
| You in terminal | Full CI mirror locally |
| Git automatically | Block bad commits even outside Cursor/IDE |
Exposed MCP Tools
Tool Name | Description | Parameters | Output Schema |
| Run full validation pipeline with smart SHA-256 caching (<10ms on unchanged code) |
|
|
| Run targeted checks on modified/staged Git files |
|
|
| Scan files for conflict markers, leaked secrets, and debug logs |
|
|
| Run dependency vulnerability security audits |
|
|
| Generate AI prompt hints for fixing test failures & TS errors |
|
|
| Export visual Markdown/HTML reports to |
|
|
| Run only the test suite |
|
|
| Run type checking ( |
|
|
| Run code linter ( |
|
|
| Retrieve status of the last check run | None |
|
Example Session
You: Add an unlock button to the admin users page.
Agent: [edits src/components/admin.tsx...]
[calls run_staged_checks]
→ lint/typecheck on changed files
→ git safety on staged files
Agent: Staged checks passed. Ready to commit.
You: Run full checks to be sure.
Agent: [calls run_checks]
→ test suite + ruff + tsc + build
→ all passed!If tests fail:
Agent: [calls run_tests] → 2 failures
[calls suggest_fixes] → hints for each failure
[fixes code]
[calls run_tests again] → passedImportant Details
Checkride validates, you commit: Checkride executes local checks — it never commits or pushes code without your explicit action.
Uses your local environment: Command execution runs using local node_modules, Python virtualenv, or Docker container.
MCP integration: MCP runs inside Cursor/AGY/Claude. Terminal commits without the editor utilize the CLI or Git hooks (
init-hooks).Reload Cursor: After adding Checkride to
.cursor/mcp.jsonor settings, reload the window so the server connects under Settings → MCP.
Configuration (.checkriderc.json)
Checkride automatically looks for .checkriderc.json, .checkriderc, or checkride.config.json in the root of your project directory:
{
"sandbox": "docker",
"docker_image": "node:20-alpine",
"git_safety": {
"severity": "warn",
"ignore_patterns": ["test/"]
},
"timeouts": {
"test": 60000,
"typecheck": 60000,
"lint": 30000,
"security": 60000,
"default": 60000
},
"commands": {
"test": "pnpm test",
"typecheck": "tsc --noEmit",
"lint": "eslint .",
"security": "npm audit --json",
"custom": [
{
"name": "Format Check",
"command": "prettier --check .",
"timeout": 15000
}
]
},
"exclude": ["node_modules", "dist", "build", ".git"],
"env": {
"CI": "true"
}
}Installing Git Pre-Commit Hook
Install local .git/hooks/pre-commit to automatically run Checkride checks before any manual git commit:
npx checkride-mcp init-hooksOr run staged checks manually from your terminal:
npx checkride-mcp check --stagedConnecting to AI Agents
1. Claude Desktop Config (claude_desktop_config.json)
{
"mcpServers": {
"checkride": {
"command": "npx",
"args": ["-y", "checkride-mcp"]
}
}
}2. Cursor / Antigravity / Claude Code Config
{
"mcpServers": {
"checkride": {
"command": "npx",
"args": ["-y", "checkride-mcp"]
}
}
}License
MIT © Siqah
Available Tools
10 toolscheck_git_safetyA
Scan target or staged files for conflict markers (<<<<<<<), hardcoded secrets/API keys, and leftover debug statements. Use before git commit.
Inputs: files, project_path.
export_reportA
Generate visual Markdown or HTML validation reports saved to .checkride/ directory.
Inputs: format, project_path.
get_check_statusB
Retrieve the status and full structured results of the last validation check run.
Inputs: no named parameters.
run_checksA
Run the full pre-flight validation pipeline (tests, type-checking, lints, custom steps) with smart SHA-256 caching (<10ms on unchanged code). Use this before committing code.
Inputs: bypass_cache, project_path.
run_lintA
Run only code linting (e.g. ESLint, Biome, Ruff, Clippy) with optional auto-fix.
Inputs: fix, project_path.
run_security_auditB
Run dependency security vulnerability audits (npm audit, cargo audit, pip-audit) and return structured vulnerability report.
Inputs: project_path.
run_staged_checksA
Run fast targeted validations and Git safety checks only on modified or staged Git files (git diff). Recommended for quick pre-commit validation.
Inputs: project_path.
run_testsB
Run only the test suite with optional pattern matching.
Inputs: project_path, test_pattern.
run_typecheckA
Run only type checking (e.g. tsc, mypy, cargo check, go vet).
Inputs: project_path.
suggest_fixesA
Analyze recent validation failures and return structured remediation hints and prompt snippets for AI agents.
Inputs: project_path.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 10 tools
Each tool has a clearly distinct purpose: full pipeline, staged checks, git safety, security audit, fixes, reports, and individual test/typecheck/lint runners. Even overlapping tools like run_checks and run_staged_checks are explicitly scoped to different file sets. No two tools are likely to be confused by an agent.
All tools follow a consistent verb-first snake_case pattern (run_*, check_*, suggest_*, export_*, get_*). Verbs clearly indicate the action and nouns indicate the target, making the API predictable and intuitive. There is no mixing of conventions or vague generic names.
Ten tools provide a comprehensive but not bloated surface for a pre-flight validation pipeline. Each tool serves a distinct need—running checks, scoped checks, security, safety, fixes, reporting, and targeted individual checks—so the count is well-calibrated to the domain.
The tool set covers the full validation workflow: run checks (full or staged), inspect status, get security audits, scan for git safety issues, receive fix suggestions, and export reports. Minor gaps exist, such as no explicit tool to list or configure available checks, but these are non-essential and unlikely to cause agent failures.
Maintenance
Related MCP Connectors
Your coding agent asks the business logic of your repository and checks commits before they land
Change-aware CI validation and affected-test guidance for coding agents.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
Pre-execution governance for AI agents. Deterministic PASS/FAIL/REVIEW verdicts, replayable proof.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to scan GitHub repositories for security vulnerabilities, deployment blockers, and code quality issues. It provides detailed findings and auto-generated code patches to help developers ensure their code is production-ready.40 npmMIT
- AlicenseAqualityDmaintenanceActs as a production-grade safety layer for AI-assisted coding, monitoring Git hygiene, scanning for security issues (PII, secrets, injection), and enabling semantic history search.9MIT
- AlicenseAqualityBmaintenanceEnables AI coding agents to safely execute commands, run tests, and modify project files inside disposable, policy-enforced Docker sandboxes that are isolated from the host machine and its credentials.15MIT
- AlicenseAqualityBmaintenanceEnables AI coding agents to safely run commands, install dependencies, test, and modify code inside disposable, policy-enforced Docker sandboxes isolated from the host, returning results and diffs.15MIT