Back to Home
alexcpn icon

codereview_mcp_server

by alexcpn

Overview

Provides an MCP server for LLMs to perform code review tasks on GitHub repositories, leveraging Tree-Sitter for AST parsing and code analysis.

Installation

Run Command
docker run -it --rm -p 7860:7860 codereview-mcp-server

Security Notes

The `tools/code_indexer.py` uses `requests.get(..., verify=False)` when fetching pull request diffs. Disabling SSL/TLS certificate verification (verify=False) is a critical security vulnerability that makes the application susceptible to Man-in-the-Middle (MITM) attacks, allowing an attacker to intercept and tamper with network traffic. Additionally, cloning arbitrary GitHub repositories using `Repo.clone_from` could theoretically pose risks if a malicious URL exploited a vulnerability in Git or GitPython, or if very large repositories led to resource exhaustion, although GitPython is generally robust.

Similar Servers

Stats

Interest Score0
Security Score4
Cost ClassHigh
Avg Tokens1500
Stars0
Forks1
Last Update2025-12-06

Tags

Code ReviewLLM ToolsAST ParsingGitHub IntegrationPythonGoC++