← Back to search

pr-review-mcp

GitHub Actions Scanned 28d ago

MCP server for PR review processing with GraphQL-based GitHub integration

npm ↗
C
64.2 / 100

Versions

0.8.0latest
May 14, 2026
0.7.0
May 14, 2026
0.6.0
Apr 11, 2026
0.3.0
Mar 28, 2026
0.2.1
Mar 20, 2026
+ show 7 moreshow less
0.2.0
Mar 20, 2026
0.1.5
Feb 10, 2026
0.1.4
Feb 9, 2026
0.1.3
Feb 9, 2026
0.1.2
Feb 7, 2026
0.1.1
Feb 7, 2026
0.1.0
Jan 13, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 21

pr_create
annotations: verified low

Create a new pull request from an existing branch

readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
pr_summary
annotations: verified low

Get PR review statistics: total, resolved, unresolved counts by severity and file

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
pr_list_prs
annotations: verified low

List all pull requests in a repository with stats (review threads, comments, changes)

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
pr_list
annotations: verified low

List PR review comments with optional filtering by resolved/file/severity

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
pr_get
annotations: verified low

Get detailed comment information including full body and AI prompt

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
pr_changes
annotations: verified low

Get comments since cursor for incremental updates

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
pr_poll_updates
annotations: verified low

Poll for new review updates since a timestamp (comments, commits, status, agents). Use include=["agents"] for agent completion status.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
pr_await_reviews
annotations: verified low

Non-blocking: checks agent review completion status once and returns immediately. Use after pr_invoke — pass the `since` field. Returns retryAfterMs hint if agents are still pending (call again after that delay). Per-agent timeouts via maxWaitMs mark agents that likely won\'t respond.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
pr_resolve
annotations: verified low

Mark a review thread as resolved

readOnlyHint false openWorldHint true idempotentHint true destructiveHint false
pr_invoke
annotations: verified low

Invoke AI code review agents on a PR. When agent="all", agents are resolved from: (1) .github/pr-review.json in repo, (2) PR_REVIEW_AGENTS env var, (3) default (coderabbit only). Use pr:setup prompt to configure per-repo agents. Smart detection skips agents that already reviewed (use force to override).

readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
pr_labels
annotations: verified low

Get, add, remove, or set labels on a PR

readOnlyHint false openWorldHint true idempotentHint true destructiveHint false
pr_reviewers
annotations: verified low

Request or remove reviewers on a PR

readOnlyHint false openWorldHint true idempotentHint true destructiveHint false
pr_merge
annotations: verified low

Merge a pull request. Uses interactive elicitation for confirmation when supported, falls back to confirm=true parameter.

readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
pr_claim_work
annotations: verified low

Claim file partition for parallel PR review processing

readOnlyHint false openWorldHint false idempotentHint false destructiveHint true
pr_report_progress
annotations: verified low

Report completion status for a claimed file partition

readOnlyHint false openWorldHint false idempotentHint false destructiveHint false
pr_get_work_status
annotations: verified low

Get current coordination run status and progress

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
pr_reset_coordination
annotations: verified low

Reset/clear the current coordination run. Uses interactive elicitation for confirmation when supported, falls back to confirm=true parameter.

readOnlyHint false openWorldHint false idempotentHint true destructiveHint true
pr_progress_update
annotations: verified low

Report orchestrator phase transition (called by background subagent)

readOnlyHint false openWorldHint false idempotentHint false destructiveHint false
pr_progress_check
annotations: verified low

Check orchestrator progress and run status in a single call

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
pr_sessions
annotations: verified low

List active and recent review invocations across sessions. Shows which agents were invoked, their completion status, and elapsed time. Useful for recovery after crash/compaction.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
pr_cancel
annotations: verified low

Cancel an active review invocation, preventing further polling. Provide either invocationId (from pr_invoke or pr_sessions) or (owner, repo, pr) to cancel the most recent active invocation for that PR.

readOnlyHint false openWorldHint false idempotentHint true destructiveHint false

Permissions 4

network medium
Server uses network capabilities via: http
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
database medium
Server uses database capabilities via: better-sqlite3
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 61

info
Tool 'pr_summary' annotations are consistent annotation_checker · 80%
info
Tool 'pr_list_prs' annotations are consistent annotation_checker · 80%
info
Tool 'pr_list' annotations are consistent annotation_checker · 80%
info
Tool 'pr_get' annotations are consistent annotation_checker · 80%
info
Tool 'pr_changes' annotations are consistent annotation_checker · 80%
info
Tool 'pr_poll_updates' annotations are consistent annotation_checker · 80%
info
Tool 'pr_await_reviews' annotations are consistent annotation_checker · 80%
info
Tool 'pr_resolve' annotations are consistent annotation_checker · 80%
info
Tool 'pr_invoke' annotations are consistent annotation_checker · 80%
info
Tool 'pr_labels' annotations are consistent annotation_checker · 80%
info
Tool 'pr_reviewers' annotations are consistent annotation_checker · 80%
info
Tool 'pr_create' annotations are consistent annotation_checker · 80%
info
Tool 'pr_merge' annotations are consistent annotation_checker · 80%
info
Tool 'pr_claim_work' annotations are consistent annotation_checker · 80%
info
Tool 'pr_report_progress' annotations are consistent annotation_checker · 80%
info
Tool 'pr_get_work_status' annotations are consistent annotation_checker · 80%
info
Tool 'pr_reset_coordination' annotations are consistent annotation_checker · 80%
info
Tool 'pr_progress_update' annotations are consistent annotation_checker · 80%
info
Tool 'pr_progress_check' annotations are consistent annotation_checker · 80%
info
Tool 'pr_sessions' annotations are consistent annotation_checker · 80%
info
Tool 'pr_cancel' annotations are consistent annotation_checker · 80%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@3.22.0 (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.0 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Buffer.from base64 in thebtf-pr-review-mcp-6b43398/src/tools/invoke.ts:99 entropy_analyzer · 75%
medium
Buffer.from base64 in thebtf-pr-review-mcp-6b43398/src/prompts/setup.ts:60 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: pr_summary manifest_parser · 85%
info
Tool: pr_list_prs manifest_parser · 85%
info
Tool: pr_list manifest_parser · 85%
info
Tool: pr_get manifest_parser · 85%
info
Tool: pr_changes manifest_parser · 85%
info
Tool: pr_poll_updates manifest_parser · 85%
info
Tool: pr_await_reviews manifest_parser · 85%
info
Tool: pr_resolve manifest_parser · 85%
info
Tool: pr_invoke manifest_parser · 85%
info
Tool: pr_labels manifest_parser · 85%
info
Tool: pr_reviewers manifest_parser · 85%
info
Tool: pr_create manifest_parser · 85%
info
Tool: pr_merge manifest_parser · 85%
info
Tool: pr_claim_work manifest_parser · 85%
info
Tool: pr_report_progress manifest_parser · 85%
info
Tool: pr_get_work_status manifest_parser · 85%
info
Tool: pr_reset_coordination manifest_parser · 85%
info
Tool: pr_progress_update manifest_parser · 85%
info
Tool: pr_progress_check manifest_parser · 85%
info
Tool: pr_sessions manifest_parser · 85%
info
Tool: pr_cancel manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (7) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'pr_await_reviews': Cross-tool sequencing directive poisoning · 85%
info
SBOM generated: 272 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%