codereview_mcp_server
by alexcpn
Overview
Provides an MCP server for LLMs to perform code review tasks on GitHub repositories, leveraging Tree-Sitter for AST parsing and code analysis.
Installation
docker run -it --rm -p 7860:7860 codereview-mcp-serverSecurity Notes
The `tools/code_indexer.py` uses `requests.get(..., verify=False)` when fetching pull request diffs. Disabling SSL/TLS certificate verification (verify=False) is a critical security vulnerability that makes the application susceptible to Man-in-the-Middle (MITM) attacks, allowing an attacker to intercept and tamper with network traffic. Additionally, cloning arbitrary GitHub repositories using `Repo.clone_from` could theoretically pose risks if a malicious URL exploited a vulnerability in Git or GitPython, or if very large repositories led to resource exhaustion, although GitPython is generally robust.
Similar Servers
claude-power-pack
Provides AI-powered code review and analysis using Google Gemini, offering detailed feedback, root cause analysis, and security considerations across multi-turn sessions.
athena-protocol
This server acts as an AI tech lead, providing expert validation, impact analysis, and strategic guidance to AI coding agents before code changes are made.
code-sage
A backend service for a code-related application, likely a development tool or an AI-powered code assistant.
mcp-server
An AI-powered code review server that integrates with various Git platforms via webhooks to provide automated feedback on pull requests.