
Rami Code Review
reviews.rami由 rami.reviews 发布官方发布者v1.0.0更新于 Oct 25, 2026
AI code review for GitHub PRs with an MCP autofix loop for Claude Code and Cursor
概览
Rami Code Review 是一个远程 MCP 服务器,用于审查 GitHub 拉取请求的安全、缺陷与性能问题,并让 Claude Code 或 Codex 修复发现的问题。
- 可以做什么
- 获取当前 PR 分支的审查结果,按优先级(阻断、高、中、低)逐条处理,修复问题或提交带证据的异议,直到 PR 干净(最多五轮)。在不触发新审查的情况下查看审查状态,并查询剩余配额与额度余额。运行引导式设置,安装 GitHub App、注册服务器并完成 OAuth,另提供只读健康检查,报告认证、App 覆盖范围、配额和插件版本。将插件更新到最新发布版本并显示变更内容。
- 适用场景
- 适合希望对 GitHub 拉取请求进行自动化安全、缺陷和性能审查,并让助手在同一会话中处理审查发现的团队,包括对误报或有意的设计选择提出异议。
- 运行要求
- 通过 streamable HTTP 访问的远程端点,需 OAuth 登录。仓库上必须安装 Rami GitHub App,且分支需存在对应的拉取请求。客户端插件需通过 Rami 市场在 Claude Code 或 Codex 中安装。
安装
在 SourceWeft 中
- 打开 控制台中的 Rami Code Review,将其添加到工作区。
- 连接 所需的 凭据。它们会被私密存储,绝不会在公开页面上展示。
- 为需要使用其工具的对话启用该服务。
Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
交给智能体安装
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/reviews.rami%2Frami/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。其他 MCP 客户端
把它添加到你客户端的 mcpServers 配置中。 客户端会在首次连接时完成 OAuth 登录。
{
"mcpServers": {
"rami-code-review": {
"type": "http",
"url": "https://rami.reviews/mcp"
}
}
}README
Rami Code Review
Works with Claude Code AND Codex. Rami reviews every PR for security, bugs, and performance — then fixes the findings through MCP. You stay in control of what merges.
Both clients are first-class: Claude Code loads the root plugin package, while Codex installs its isolated package from plugins/rami through the same marketplace repository.
Disputing Findings
Not every finding needs a fix. Push back when you have evidence — Rami evaluates the dispute and either accepts it or asks you to fix:
- False positive — the code is actually correct
- Framework guarantee — the framework handles this case
- Intentional design — this is by design, not a mistake
- Duplicate — the same issue is reported elsewhere
The dispute loop runs in the same session as the review, so accepted disputes drop out and only real issues land in your commits.
Getting Started
1. Install the GitHub App
Install Rami on your repository.
2. Add the marketplace
Claude Code:
Codex:
3. Install the plugin
Claude Code:
Codex:
Start a new Codex task after installation so the Rami skills and MCP tools are loaded.
4. Run a review
On a PR branch, run:
Rami fetches the review, walks each finding by priority, and applies fixes (or accepts disputes) until the PR is clean.
Commands
/rami:review
Full review-fix-dispute loop on the current PR branch:
- Fetches review results
- Walks findings by priority (blocking → high → medium → low)
- Fixes each one — or lets you dispute with evidence
- Commits and pushes
- Repeats until clean (up to 5 iterations)
/rami:review-status
Check review status without triggering a new review.
/rami:usage
Check remaining quota and credit balance.
/rami:setup
Guided setup — installs the GitHub App, registers the MCP server, completes OAuth, and verifies the connection. Run this first if Rami isn't connected yet. It can also offer, only if you agree, to add a short removable Rami section to your CLAUDE.md / AGENTS.md.
/rami:doctor
Read-only health check. Reports auth, GitHub App coverage, quota, and whether the plugin is up to date — with the fix for anything that's off.
/rami:upgrade
Updates the plugin to the latest published version and shows what changed.
Troubleshooting
"No PR found for branch" — push the branch and open a pull request.
"Authentication required" — install the Rami GitHub App on the repo.
Review taking too long? — /rami:review-status checks progress without triggering a new review.
Keeping Rami up to date
Rami checks once a day — silently — whether a newer plugin version is published, and nudges you when one is. To update at any time:
Or manually:
Then run /reload-plugins (or start a new session) to activate it.
For Codex:
Then start a new task to activate the updated plugin.
Links
License
MIT
来源:README.md,提交 5749228
工具
0版本历史
1- v1.0.0最新Sep 16, 2026
评分
已满足适用检查项的 75%
该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。
- 近 30 天内可连通必需25 分
- 已声明认证方式必需10 分
- 已列出工具15 分
请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。
- 描述必需15 分
- 图标10 分
- 文档15 分
- 许可证10 分
请在仓库或注册中心条目中声明许可证。