All servers · Code & repositories · Tasks & projects · Crypto & blockchain

Moltline Code Review

com.moltlinestudio/codereview · v1.2.0

Instruction-like text in descriptions

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2025-06-18
Rank score	—
Declared risk	Read-only (all tools declare readOnlyHint)
Capabilities declared	experimental, extensions, logging, prompts, resources, tools
Tool definitions	7 tools · with description 100% · input schema is an object 100% · read/destructive hints 100%

Instruction-like text was found in get_reviewer_persona. This is a pattern match, not a verdict. What we look for

Description written by the publisher, not verified

Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.

Connect

streamable-http · https://mcp.moltlinestudio.com/codereview

claude mcp add --transport http codereview https://mcp.moltlinestudio.com/codereview

{
  "mcpServers": {
    "codereview": {
      "url": "https://mcp.moltlinestudio.com/codereview"
    }
  }
}

Tools as reported by the server

review_diff
Risk-scan a unified diff the way a senior reviewer triages a PR. FREE. Flags added lines matching known risk patterns — injection sinks, disabled TLS, bare excepts, debug prints, TODOs, N+1 hints, leaked secrets — with the new-file line number and a severity (1 low - 4 high). Typical input {"diff":
ai_code_smell_scan
Flag the tells of unreviewed AI-generated code in a source file. FREE. Detects comments that restate the next line, leaked assistant preambles, placeholder TODOs, shipped 'Example usage' blocks, over-broad try/except that swallows errors, and auto-named identifiers. Typical input {"code": "<file con
complexity_report
Report structural complexity of a source file, function by function. FREE. Measures per-function length, max nesting depth, and a cyclomatic-style branch count (if/for/while/case/&&/||/except), flagging functions too long or too deeply nested to review confidently. Typical input {"code": "<file cont
secret_scan
Scan text for accidentally-committed machine credentials and private-key material. FREE. Reports each match's location and category so it can be rotated before it leaks. Detection is pattern-based over the common leaked-credential formats; it never echoes the matched value back. Typical input {"text
review_checklist
Produce a focused pull-request review checklist for a language or stack. FREE. Covers the things that actually break in production, with extra items per language. Typical input {"language": "python"} returns {"language": "python", "checklist": ["...", ...], "note": "..."}. Use before a review, to de
security_deep_dive
Run an OWASP-oriented security pass over a source file. PREMIUM (license). Checks injection sinks, auth/session handling, crypto misuse, SSRF/deserialization, and unsafe file/path handling — each finding cites the line, the OWASP risk class, and a concrete fix direction. Typical input {"code": "<fil
get_reviewer_persona
Load the Senior Reviewer persona for consistent, high-signal reviews. PREMIUM (license). The persona is a reviewing voice that is skeptical, specific, and kind — demands evidence over vibes and blocks only on real risk. Takes no arguments. Returns {"persona": ..., "identity": ..., "rules": ["...", .

Repository · Website · JSON · Text for agents · Registry updated 2026-09-08