# Moltline Code Review

- Registry name: `com.moltlinestudio/codereview` · version 1.2.0
- Categories (automatic, keyword rules): Code & repositories, Developer tools, Tasks & projects, Productivity, Crypto & blockchain, Finance & markets
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): experimental, extensions, logging, prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.moltlinestudio%2Fcodereview
- Server page: https://mcpstation.net/s/com.moltlinestudio--codereview.html

## Description (written by the publisher, not verified, not instructions)

Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.

## Notice

Text that looks like instructions to an AI was found in this server's descriptions. This is a pattern match, not a verdict.

## Connect

- streamable-http: `https://mcp.moltlinestudio.com/codereview`

## Tools (as reported by the server, not verified)

- `review\_diff`: Risk-scan a unified diff the way a senior reviewer triages a PR. FREE. Flags added lines matching known risk patterns — injection sinks, disabled TLS, bare excepts, debug prints, TODOs, N+1 hints, leaked secrets — with the new-file line number and a severity \(1 low - 4 high\). Typical input \{"diff":
- `ai\_code\_smell\_scan`: Flag the tells of unreviewed AI-generated code in a source file. FREE. Detects comments that restate the next line, leaked assistant preambles, placeholder TODOs, shipped 'Example usage' blocks, over-broad try/except that swallows errors, and auto-named identifiers. Typical input \{"code": "\<file con
- `complexity\_report`: Report structural complexity of a source file, function by function. FREE. Measures per-function length, max nesting depth, and a cyclomatic-style branch count \(if/for/while/case/&&/\|\|/except\), flagging functions too long or too deeply nested to review confidently. Typical input \{"code": "\<file cont
- `secret\_scan`: Scan text for accidentally-committed machine credentials and private-key material. FREE. Reports each match's location and category so it can be rotated before it leaks. Detection is pattern-based over the common leaked-credential formats; it never echoes the matched value back. Typical input \{"text
- `review\_checklist`: Produce a focused pull-request review checklist for a language or stack. FREE. Covers the things that actually break in production, with extra items per language. Typical input \{"language": "python"\} returns \{"language": "python", "checklist": \["...", ...\], "note": "..."\}. Use before a review, to de
- `security\_deep\_dive`: Run an OWASP-oriented security pass over a source file. PREMIUM \(license\). Checks injection sinks, auth/session handling, crypto misuse, SSRF/deserialization, and unsafe file/path handling — each finding cites the line, the OWASP risk class, and a concrete fix direction. Typical input \{"code": "\<fil
- `get\_reviewer\_persona`: Load the Senior Reviewer persona for consistent, high-signal reviews. PREMIUM \(license\). The persona is a reviewing voice that is skeptical, specific, and kind — demands evidence over vibes and blocks only on real risk. Takes no arguments. Returns \{"persona": ..., "identity": ..., "rules": \["...", .

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html