diffpilot — Claude Code MCP server: what it does, how to install
Reviews Git changes locally before pushing, detects leaked credentials, and crafts conventional commit messages. Operates entirely offline without external APIs.
Open on GitHubWhat diffpilot does
DiffPilot runs static checks and code reviews over your local Git workspace before you open a pull request. It resolves the base branch automatically, picking main, master, or develop. All scans happen on the local machine. This design keeps proprietary code safe inside air-gapped environments or private Azure DevOps repositories.
The server exposes 9 tools through MCP. These tools compose pull request summaries, suggest test cases, calculate line statistics, and draft Conventional Commits. A built-in scanner redacts passwords, JWTs, AWS credentials, and API keys before they reach the review output. It also caps traffic at 120 requests per minute to prevent overload.
Running DiffPilot requires Git and the .NET 9 SDK. Without .NET 9 present on your machine, the binary cannot start.
What it helps with
- review local branch changes before opening a pull request
- spot leaked credentials and tokens before creating a commit
- generate pull request descriptions with review checklists
- get pattern-based test recommendations for altered files
Example prompts for the agent
- Review my staged changes with focus on security and error handling
- Scan changed files for API keys and tokens before committing
- Generate a conventional commit message for the staged changes
How to install diffpilot
Install
The MCP registry has no launch command for it: see the repository README
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about diffpilot
How to install diffpilot?
Install the global tool using dotnet tool install -g DiffPilot. In VS Code, install it via ext install BurakKalafat.diffpilot.
What does diffpilot do?
It conducts automated code reviews of Git branches on your local machine. The server flags security gaps, redacts credentials, and writes pull request summaries.
What dependencies does diffpilot require?
You need Git and the .NET 9 SDK installed locally. Running inside VS Code requires version 1.101 or later.