commit-check MCP

io.github.commit-checkPublished by GitHub account commit-checkv0.1.12Updated Oct 24, 2026

Commit policy as code for AI agents: check commit messages, branch names and authors before a push

The publisher's own server: check.tattoo: tattoo size and placement guide

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Local MCP server that gives a coding agent Commit Check's commit policy rules to validate commit messages, branch names, authors and push safety before…

What you can do
  • Validate commit messages against Conventional Commits, subject length, body, sign-off, WIP/fixup and AI attribution rules
  • Validate branch names and their rebase target, and author name and email from git config
  • Check message, branch and author together, or inspect the repository's latest commit, branch and optional push
  • Check push safety, flagging force pushes
  • Describe the merged configuration and enabled rules, and report server and commit-check versions
When to use it
Use it when a coding agent commits or pushes in repositories that enforce commit policy in CI, so the agent can check its message, branch and author first and apply an unambiguous fix before the push is rejected.
Requirements
Runs as a local stdio process launched by the MCP client, typically via uvx commit-check-mcp or a pip-installed commit-check-mcp binary. Needs a git repository and its cchk.toml or commit-check.toml config for repository-based checks; no authentication or environment variables are declared.
Before you install
No tool changes the working tree or commits, but validate_push_safety and validate_repository_state may run git fetch, so they are not read-only. A skip result means nothing was validated and must not be read as approval. Repository paths and config are passed to the local server.

Installation

In SourceWeft

  1. Open commit-check MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[Commit Check]

Catch bad commits before they merge — inside your AI agent.

[PyPI] [CI] [Coverage] [MCP Registry] [Glama]

Docs · Rules · CLI · GitHub Action · GitHub App

The Model Context Protocol server for Commit Check, commit policy as code for teams and AI agents. It gives your coding agent the rules your CI enforces: the agent validates its commit message, branch name and author before it commits or pushes, and when a correction is unambiguous it gets the fix to apply.

Quick start

bash
claude mcp add commit-check -- uvx commit-check-mcp

Every other client launches the same command. This is the object to register:

json
{  "mcpServers": {    "commit-check": {      "command": "uvx",      "args": ["commit-check-mcp"]    }  }}

No uv yet? curl -LsSf https://astral.sh/uv/install.sh | sh — or use pip install commit-check-mcp, as in the last row below.

Where each client keeps it

ClientWhere it goesNotes
Claude Codeclaude mcp add commit-check -- uvx commit-check-mcpAdd --scope project to write a shareable .mcp.json at the repo root (--scope user makes it available in all your projects). You can also commit a .mcp.json containing the block above; "type": "stdio" may be added inside the server object. MCP servers are not configured in ~/.claude/settings.json.
Claude DesktopmacOS ~/Library/Application Support/Claude/claude_desktop_config.json; Windows %APPDATA%\Claude\claude_desktop_config.jsonBlock above as-is; restart Claude Desktop.
Cursorproject .cursor/mcp.json or global ~/.cursor/mcp.jsonBlock above as-is (or Settings → Cursor Settings → MCP → Add new MCP server with command uvx commit-check-mcp).
VS Code (Copilot agent mode).vscode/mcp.jsonDifferent key: {"servers": {"commit-check": {"type": "stdio", "command": "uvx", "args": ["commit-check-mcp"]}}}
ClineMCP Servers panel → Configure → cline_mcp_settings.json (check your client's docs)Block above as-is.
Roo Codeproject .roo/mcp.json or global mcp_settings.json (Edit Global MCP)Block above as-is; optional "alwaysAllow": [...].
Windsurf~/.codeium/windsurf/mcp_config.json (check your client's docs)Block above as-is.
Continueconfig.yaml (or a file in .continue/mcpServers/)YAML list under mcpServers:, see below. Continue also picks up the JSON block above when dropped into .continue/mcpServers/.
Zed~/.config/zed/settings.jsonDifferent key: {"context_servers": {"commit-check": {"command": "uvx", "args": ["commit-check-mcp"]}}}
Anything elseyour client's MCP configIf the client cannot run uvx: pip install commit-check-mcp, then set "command" to the absolute path of the installed binary and drop args. Find it with which commit-check-mcp (macOS/Linux), where commit-check-mcp (Windows cmd) or Get-Command commit-check-mcp | Select-Object -ExpandProperty Source (PowerShell).

Continue's config.yaml entry in full (name, version and schema are required by Continue; drop them if you are adding only the mcpServers fragment to an existing file, or save this as a standalone file in .continue/mcpServers/):

yaml
name: commit-checkversion: 0.0.1schema: v1mcpServers:  - name: commit-check    command: uvx    args: ["commit-check-mcp"]

Tools

ToolWhat it checksArguments
validate_commit_messageA commit message: Conventional Commits, subject length and case, body, sign-off, WIP and fixup markers, AI attributionmessage
validate_branch_nameA branch name, or the checked-out one, and its rebase target when configuredbranch?
validate_author_infoAuthor name and email; read from the repository's git config when omittedauthor_name? author_email?
validate_commit_contextMessage, branch and author in one call, for whichever you passmessage? branch? author_name? author_email?
validate_push_safetyThat a push is not a force push (CC301)push_refs? — pre-push lines; omit to compare the branch with its upstream
validate_repository_stateThe latest commit's message and author, the checked-out branch and, optionally, the pushinclude_message include_branch include_author (default true), include_push (default false)
describe_validation_rulesNothing: returns the merged config and the rules it enables—
server_healthNothing: returns the server, commit-check and MCP SDK versions—

Every tool but server_health also takes:

  • repo_path — the repository whose cchk.toml / commit-check.toml applies. It must be a git repository when the tool reads git state; a plain directory holding a config file is enough when you pass every value yourself.
  • config_path — a config file to use instead of the repository's own; relative paths resolve from repo_path.
  • config — inline overrides merged on top, e.g. {"commit": {"require_body": true}}.

No tool changes the working tree or the commits. validate_push_safety and validate_repository_state may run git fetch to resolve a SHA, so only they are annotated as not read-only; a client that gates on MCP tool hints can auto-approve the other six.

Example arguments

Validate a message with the repository's rules:

json
{  "message": "feat(api): add MCP validation tool",  "repo_path": "/path/to/repo"}

Check the repository as it stands, including the push:

json
{  "repo_path": "/path/to/repo",  "include_push": true}

Validate push safety from git pre-push ref metadata (<local_ref> <local_sha> <remote_ref> <remote_sha>):

json
{  "repo_path": "/path/to/repo",  "push_refs": "refs/heads/main abc123 refs/heads/main def456"}

See which rules apply once an override is merged in:

json
{  "repo_path": "/path/to/repo",  "config": {    "commit": {      "require_body": true    }  }}

Results

Every validate_* tool returns the shape commit-check --format json prints:

json
{  "status": "pass|fail|skip",  "warnings": 0,  "checks": [    {      "rule_id": "CC001",      "check": "message",      "status": "pass|fail|warn|skip",      "value": "...",      "error": "...",      "suggest": "...",      "fix": "...",      "docs_url": "https://commit-check.com/rules/#cc001",      "reason": ""    }  ]}
  • Only fail is a rejection. skip means nothing was validated — never read it as approval — and warn is reported without failing the run. With commit-check 2.19.0 or later, a skipped check names why in reason, e.g. "author dependabot[bot] is in [commit].ignore_authors"; older releases leave the field out.
  • On fail, apply a non-empty fix verbatim, otherwise follow suggest, then validate again. The server's instructions teach the agent this loop.
  • A call that cannot run at all — an empty message, a repo_path that does not exist or is not a git repository where one is needed, an invalid config, a push_refs SHA that cannot be resolved — comes back as an MCP tool error that names the problem, never as a pass.

Development

bash
pip install -e .[dev]python -m pytest

The server speaks stdio, so an MCP client launches it; run uvx commit-check-mcp by hand only to see that it starts.

Community

Questions and ideas go to Discussions, bugs to Issues. Releases follow Semantic Versioning. Released under the MIT License.


mcp-name: io.github.commit-check/commit-check-mcp

Source: README.md at commit 3f391a8

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

2
  1. v0.1.12LatestOct 8, 2026
  2. v0.1.11Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Check integrations