MCP Code Review Server
io.github.GoodJobwilliamPublished by GitHub account GoodJobwilliamv0.1.2Updated Oct 24, 2026
Code review as an MCP server — structured reviews with OWASP security scanning.
The publisher's own server: Review Expert
Overview
A local MCP server that gives an AI assistant structured code review with OWASP-style security pattern checks, N+1 detection and severity ratings.
- What you can do
- Run structured code reviews with severity ratings and local security-pattern checks, including OWASP-style scanning and N+1 query detection, as described in the description and README; the manifest lists no individual tools. Apply team rules and per-repo thresholds from a configuration file committed to the repository, including shared regex rules, disabled checks and severity overrides. Produce structured local reports, as shown by the trial workflow that runs against an intentionally unsafe sample rather than your repository.
- When to use it
- Useful when you want an assistant in your editor to review code for security and performance issues before a pull request, or when a team wants a shared, versioned review baseline with CI merge gates.
- Requirements
- Runs as a local process over stdio, installed from PyPI as aicraft-code-review and started with uvx, so a Python/uv runtime is needed. No authentication, environment variables or headers are declared. The README says no API key or paid service is required.
Installation
In SourceWeft
- Open MCP Code Review Server in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
AICraft — AI-Powered Developer Tools
Production-ready developer tools, code templates, and AI prompt packs. Built by engineers, for engineers.
Products
Prompt Packs
Code Templates
MCP Tools
Custom rules & team profiles: commit a .mcp-code-review.yaml to your repo for shared regex rules, disabled checks, severity overrides, and per-repo thresholds.
Start with the free 10-minute trial or download the versioned trial bundle. It uses an intentionally unsafe sample, not your repository, and produces a structured local report.
If that workflow proves useful for a shared team baseline, the optional Team Rules Pack is a one-time $49 purchase. It includes 63 ready-made rules for Python, JavaScript/TypeScript, Go, and Java; GitHub Actions and GitLab CI merge-gate templates; and 20 review prompts. For a real pull-request check, copy the secretless GitHub Actions starter. It uses the pinned PyPI 0.1.2 release; no API key or paid service is required.
Share structured trial feedback or request a free team trial. Do not include source code or credentials.
Marketplaces: Official MCP Registry · Smithery · mcpservers.org · cursor.directory · PyPI
For a repeatable, read-only distribution audit, run python3 scripts/distribution_report.py. It reports PyPI and GitHub Release downloads separately; downloads are distribution signals, not contacts, customers, or revenue.
AgentPowers Skills (Free)
Pricing Philosophy
All products are priced based on market research and the value they deliver:
- Prompt packs at $19-$29 solve specific, high-value problems for developers
- Code templates at $49-$59 save 10-40 hours of setup time — priced at a fraction of the time they save
- MCP Code Review Server is free and MIT-licensed; the optional Team Rules Pack is $49 for shared rules, CI gates, and prompts
Most products are one-time purchases with lifetime updates. MCP Code Review has a free, MIT-licensed local workflow and an optional one-time Team Rules Pack for teams that want a versioned shared baseline.
Roadmap
- Initial product lineup (9 products)
- GitHub Pages storefront with custom domain
- Creem merchant setup (stable Team Rules Pack payment link active)
- Official MCP Registry listing (0.1.2 active)
- Next.js SaaS Starter Kit
Tech Stack
- Storefront: GitHub Pages (
aicraft.vip) - Payment processing: Creem (Merchant of Record)
- Distribution: Digital download
License
Each product is licensed individually. See product READMEs for details.
Built by GoodJobWilliam
Source: README.md at commit a973e41
Tools
0Version history
1- v0.1.2LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Other Review integrations
Review Expert
expert.reviewOfficial publisher
Lets an assistant read, search, analyze and draft replies to App Store and Google Play reviews, with OAuth sign-in.
DECIDE: Migration Discovery Risk Review
Published by GitHub account stratus-consulting
A remote risk-review service that takes a migration's discovery findings and returns open risks, highest severity first, each with who to ask next.
Arch theological review
Published by GitHub account tnvolman
Cursor/Grok plugin giving an assistant a paid Arch theological review of faith text and a free offline King James verse lookup.
ReviewBot App Reviews
Published by GitHub account fahimk
Read collected App Store and Google Play reviews and bounded feedback statistics.
Khavion Architecture Review
com.khavion
Local MCP server that gives an assistant cited cloud best-practice quotes and a deterministic rules-based review of Terraform, CloudFormation and Kubernetes…