Moltline Code Review

Official7 tools

by GarphenGate · Python

Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.

com.moltlinestudio/codereview MCP Server

Risk-scan a diff to flag AI-generated-code tells and find secrets. The server is identified as com.moltlinestudio/codereview and exposes 7 tools, with 5 of them requiring no account. It is part of a broader Moltline Studio setup.

🛠️ Key Features

Riskscan a diff
Flag AI-generated-code tells
Find secrets
7 total tools; 5 require no account

🚀 Use Cases

Reviewing code diffs for security-relevant content
Detecting potential AI-generated code indicators
Secret discovery during review workflows

⚡ Developer Benefits

Works as part of a Moltline Studio fleet of hosted MCP servers (19 total)
Provides a thin stdio bridge for clients that only support stdio
Proxies newline-delimited JSON-RPC between client and hosted server “verbatim”

⚠️ Limitations

Some tools may require an account (2 of 7)

Topics

agent-skillsai-agentsclaudemcpmcp-servermodel-context-protocol

Captured live from the server via tools/list.

review_diff

Risk-scan a unified diff the way a senior reviewer triages a PR. FREE. Flags added lines matching known risk patterns — injection sinks, disabled TLS, bare excepts, debug prints, TODOs, N+1 hints, leaked secrets — with the new-file line number and a severity (1 low - 4 high). Typical input {"diff": "<git diff output>"} returns {"added_lines": N, "risk_score": 0-100, "verdict": "...", "secrets": [...], "findings": [{"line": N, "severity": 1-4, "issue": "...", "code": "..."}], "note": "..."}. Use on a unified diff, when only the change matters. Not for whole-file analysis (complexity_report, ai_code_smell_scan). Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {"error": "<what is wrong and how to fix it>"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.

Parameters1

diff

string

required

A unified diff exactly as produced by `git diff` — text with @@ hunk headers and +/- line prefixes. Only added (+) lines are scanned.

Raw schema

{
  "type": "object",
  "properties": {
    "diff": {
      "type": "string",
      "description": "A unified diff exactly as produced by `git diff` — text with\n@@ hunk headers and +/- line prefixes. Only added (+) lines are\nscanned."
    }
  },
  "required": [
    "diff"
  ],
  "additionalProperties": false
}

ai_code_smell_scan

Flag the tells of unreviewed AI-generated code in a source file. FREE. Detects comments that restate the next line, leaked assistant preambles, placeholder TODOs, shipped 'Example usage' blocks, over-broad try/except that swallows errors, and auto-named identifiers. Typical input {"code": "<file contents>"} returns {"reviewed_confidence": 0-100, "hits": [{"smell": "...", "evidence": "<quoted snippet>"}], "reading": "...", "note": "..."}. Use on a full source file suspected of unreviewed machine authorship. Not on a diff (review_diff), and the result is a signal to check, not proof of authorship. Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {"error": "<what is wrong and how to fix it>"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.

Parameters1

code

string

required

Full source text to scan, any language; paste the file contents as a single string.

Raw schema

{
  "type": "object",
  "properties": {
    "code": {
      "type": "string",
      "description": "Full source text to scan, any language; paste the file\ncontents as a single string."
    }
  },
  "required": [
    "code"
  ],
  "additionalProperties": false
}

complexity_report

Report structural complexity of a source file, function by function. FREE. Measures per-function length, max nesting depth, and a cyclomatic-style branch count (if/for/while/case/&&/||/except), flagging functions too long or too deeply nested to review confidently. Typical input {"code": "<file contents>"} returns {"functions": N, "detail": [{"name": ..., "start": N, "lines": N, "branches": N, "max_depth": N}], "flags": ["..."], "note": "..."}. Use when structure rather than correctness is the question. Not for vulnerabilities (security_deep_dive). Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {"error": "<what is wrong and how to fix it>"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.

Parameters2

code	string	required	Full source text to analyze, pasted as a single string.
language	string	optional	Optional language hint, e.g. "python" or "javascript"; "auto" (default) detects from syntax.

Raw schema

{
  "type": "object",
  "properties": {
    "code": {
      "type": "string",
      "description": "Full source text to analyze, pasted as a single string."
    },
    "language": {
      "default": "auto",
      "type": "string",
      "description": "Optional language hint, e.g. \"python\" or \"javascript\";\n\"auto\" (default) detects from syntax."
    }
  },
  "required": [
    "code"
  ],
  "additionalProperties": false
}

secret_scan

Scan text for accidentally-committed machine credentials and private-key material. FREE. Reports each match's location and category so it can be rotated before it leaks. Detection is pattern-based over the common leaked-credential formats; it never echoes the matched value back. Typical input {"text": "<file, diff, or config contents>"} returns {"leaked": bool, "count": N, "findings": [{"line": N, "type": "<category>"}], "note": "..."}. Pattern matching only - a clean result is not proof, and every hit needs human confirmation before anyone acts on it. Not a general security review (security_deep_dive). Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {"error": "<what is wrong and how to fix it>"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.

Parameters1

text

string

required

The file, diff, or config contents to scan, pasted as a single string.

Raw schema

{
  "type": "object",
  "properties": {
    "text": {
      "type": "string",
      "description": "The file, diff, or config contents to scan, pasted as a\nsingle string."
    }
  },
  "required": [
    "text"
  ],
  "additionalProperties": false
}

review_checklist

Produce a focused pull-request review checklist for a language or stack. FREE. Covers the things that actually break in production, with extra items per language. Typical input {"language": "python"} returns {"language": "python", "checklist": ["...", ...], "note": "..."}. Use before a review, to decide what to look for. Not for reviewing actual code - pass code to review_diff or security_deep_dive. Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {"error": "<what is wrong and how to fix it>"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.

Parameters1

language

string

optional

Language or stack to tailor for: "python", "javascript", "typescript", "go", "sql", or "general" (default). Unknown values fall back to the general checklist.

Raw schema

{
  "type": "object",
  "properties": {
    "language": {
      "default": "general",
      "type": "string",
      "description": "Language or stack to tailor for: \"python\", \"javascript\",\n\"typescript\", \"go\", \"sql\", or \"general\" (default). Unknown values\nfall back to the general checklist."
    }
  },
  "additionalProperties": false
}

security_deep_dive

Run an OWASP-oriented security pass over a source file. PREMIUM (license). Checks injection sinks, auth/session handling, crypto misuse, SSRF/deserialization, and unsafe file/path handling — each finding cites the line, the OWASP risk class, and a concrete fix direction. Typical input {"code": "<file contents>"} returns {"issues": N, "findings": [{"line": N, "class": "A03 Injection", "fix": "...", "code": "..."}], "owasp_note": "..."}. Use on one source file when vulnerabilities are the question. Not for style or structure (complexity_report), and never a substitute for a security professional on high-risk code. Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {"error": "<what is wrong and how to fix it>"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.

Parameters1

code

string

required

Full source text to audit, pasted as a single string; any common language.

Raw schema

{
  "type": "object",
  "properties": {
    "code": {
      "type": "string",
      "description": "Full source text to audit, pasted as a single string; any\ncommon language."
    }
  },
  "required": [
    "code"
  ],
  "additionalProperties": false
}

get_reviewer_persona

Load the Senior Reviewer persona for consistent, high-signal reviews. PREMIUM (license). The persona is a reviewing voice that is skeptical, specific, and kind — demands evidence over vibes and blocks only on real risk. Takes no arguments. Returns {"persona": ..., "identity": ..., "rules": ["...", ...], "opening_move": "..."} ready to adopt as a system prompt. Use to keep repeated reviews consistent in voice and rigor. Not for running a review - the scan tools do that. Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {"error": "<what is wrong and how to fix it>"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

README.md9 KBView on GitHub

moltline-mcp

A thin, dependency-free stdio bridge to Moltline Studio's fleet of 22 hosted MCP servers.

Most modern MCP clients can connect to the fleet directly over Streamable HTTP — no install needed (see Direct connection below). This bridge exists for clients that only speak the stdio transport: it proxies newline-delimited JSON-RPC between your client and the hosted server, verbatim, with no telemetry and no dependencies beyond the Python 3.9+ standard library.

160 tools across 22 servers; 110 are free.
Free tier: no registration, no account, no credentials — connect and call tools immediately.
Premium tools are unlocked with a Moltline license. Set MOLTLINE_LICENSE in your MCP client's environment; the bridge sends it as the X-Moltline-License header and never writes it to argv, URLs or logs. See auth.md.
Independently checked by MCPize on the direct endpoints (scans of 5–6 September 2026: 6 A+, 15 A, 1 B+; scores 89–98). All 22 servers score 100 on clarity, 100 on reliability and 100 on trust, 95 on protocol and 87 on safety; the one finding raised on every server is that the free tier accepts anonymous access — which is the point of it — and the spread between servers sits in MCPize's "Market" dimension (a crowded category). Each server's MCPize listing links its own public result.

Find it on: Smithery · MCPize · Glama · Clawmart · MCP Registry

The fleet

Server	Tools	What it does
`catalog`	10	Search 138 agent skills and personas by plain-language job; preview any product.
`codereview`	7	Risk-scan a diff, flag AI-generated-code tells, find secrets, report complexity.
`govern`	8	Audit an MCP config or SKILL.md for over-broad scope and prompt-injection risk.
`timeops`	5	Business days, meeting overlap, recurrence expansion, deadline and SLA math.
`data`	7	Paste-your-data analytics: CSV profiling, A/B tests, correlation, growth, cohorts.
`humanizer`	5	Find AI-isms with evidence, fingerprint a writing voice, measure burstiness.
`business`	8	30 finance, bookkeeping, legal-ops and SMB operations persona-skill products.
`creator`	8	20 blogging, brand-voice, copywriting, video and social persona-skill products.
`educator`	7	8 curriculum, classroom, accommodations and exam-prep persona-skill products.
`outbound`	8	7 outreach, sequencing, deliverability, call-coaching and CRM-hygiene products.
`personal`	9	20 inbox, calendar, travel, meals and family-logistics persona-skill products.
`research`	8	7 research navigation, thesis, note-taking and citation persona-skill products.
`skillmd-lint`	6	Lint a SKILL.md for frontmatter, structure, secrets and size. All tools free.
`merchant`	6	Commerce arithmetic: processor fees, charge-to-net, invoice totals, proration.
`shipping`	6	Dimensional weight, parcel fit, landed cost, freight class, rate cards.
`shopify`	6	Check a product CSV, URL handles, variant matrices and metafield keys.
`dropship`	6	Dropshipping unit economics: margin, lead time, SKU mapping, price ladders.
`recall`	6	A portable knowledge-graph memory you pass in and get back. No database.
`vision`	6	Image header probing, bbox conversion, resize plans, color and detection math.
`regclock`	9	Incident-reporting deadlines from the legal text (EU CRA, NIS2, DORA, GDPR, UK GDPR, HIPAA, SEC 8-K), cited.
`taxlots`	8	Crypto cost basis: parse exchange CSVs, lint, match transfers, FIFO/LIFO/HIFO lots, Form 8949 rows, 1099-DA diff.
`optimize`	11	OR-Tools routing, 3-D packing, 1-D/2-D cutting, knapsack and shift rostering with stated limits.

Machine-readable discovery: api-catalog · per-server card at https://mcp.moltlinestudio.com/<server>/.well-known/mcp/server-card.json · fleet health.

Direct connection (preferred)

If your MCP client supports Streamable HTTP (Claude Desktop, Claude Code, Cursor, and most current clients do), point it straight at the hosted endpoint — nothing to install:

json

{
  "mcpServers": {
    "moltline-timeops": {
      "type": "http",
      "url": "https://mcp.moltlinestudio.com/timeops"
    }
  }
}

Swap timeops for any slug in the table above.

The stdio bridge (for stdio-only clients)

Install

Run directly (recommended) — the bridge is a single stdlib-only file, so a clone is all you need:

bash

git clone https://github.com/GarphenGate/moltline-mcp.git
python3 moltline-mcp/moltline_mcp.py timeops   # any of the 22 slugs; default: catalog

Docker — see Docker below if you prefer a container.

A PyPI package is planned; until then, use the methods above.

Client configuration

Point your MCP client at the script with an absolute path:

json

{
  "mcpServers": {
    "moltline-timeops": {
      "command": "python3",
      "args": ["/absolute/path/to/moltline-mcp/moltline_mcp.py", "timeops"]
    }
  }
}

Or run it through Docker (after docker build -t moltline-mcp .):

json

{
  "mcpServers": {
    "moltline-timeops": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "moltline-mcp", "timeops"]
    }
  }
}

CLI

text

python3 moltline_mcp.py [server] [--timeout SECONDS] [--list] [--version]

server — one of the 22 slugs (default catalog); anything else fails fast with the valid list.
--timeout — per-request timeout in seconds (default 300, or env MOLTLINE_TIMEOUT).
--list — print the server slugs and exit.
Env MOLTLINE_BASE_URL — override the fleet base URL (for testing).
Env MOLTLINE_LICENSE — your Moltline license, sent as the X-Moltline-License header to unlock premium tools. Omit it and the bridge runs free-tier only.
Env MOLTLINE_DEBUG=1 — diagnostic logging on stderr (stdout stays protocol-clean). The license is never logged; debug output reports only whether one is configured.

Docker

The bridge also runs containerized (stdio in, network egress to the fleet required):

bash

docker build -t moltline-mcp .
docker run -i --rm moltline-mcp timeops   # any of the 22 slugs; default: catalog

See Client configuration for the matching mcpServers entry.

How it works

One process per server connection. Each JSON-RPC message read from stdin is POSTed to https://mcp.moltlinestudio.com/<server>; JSON and SSE-framed responses are relayed back to stdout as newline-delimited JSON. The bridge tracks the server-assigned Mcp-Session-Id and echoes the negotiated MCP-Protocol-Version, per the Streamable HTTP transport spec. It never inspects, stores, or reports your traffic.

Tests

The bridge ships with an offline test suite - no network, no dependencies:

bash

python -m unittest -v

Twenty-two tests cover the parts that actually break in a transport bridge: newline-delimited framing, SSE event splitting (multiple events, multi-line data: payloads, a trailing event with no blank line, comments and named events), session-id capture and reuse, protocol-version negotiation on initialize only, and error relay - a JSON-RPC error document is passed through verbatim, anything else becomes a well-formed -32603. CI runs them on Python 3.9, 3.12 and 3.13, plus a Docker build and container smoke test.

Access and licensing

Free tier — anonymous. No registration or credentials; all free tools work immediately.
Premium — unlocked with a Moltline license purchased (human-in-the-loop) at moltlinestudio.com. Set MOLTLINE_LICENSE in the environment and the bridge forwards it as the X-Moltline-License request header. It is deliberately not a command-line flag: argv is world-readable through ps. It is never placed in a URL and never logged. Details: auth.md.

License

Install

Tools (7)

review_diffai_code_smell_scancomplexity_reportsecret_scanreview_checklistsecurity_deep_diveget_reviewer_persona

Remote endpoint

Streamable HTTP

Hosted server - connect over the network, no local install.

url

https://mcp.moltlinestudio.com/codereview

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "codereview": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mcp.moltlinestudio.com/codereview"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.

Moltline Code Review

com.moltlinestudio/codereview MCP Server

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

Topics

review_diff

ai_code_smell_scan

complexity_report

secret_scan

review_checklist

security_deep_dive

get_reviewer_persona

moltline-mcp

The fleet

Direct connection (preferred)

The stdio bridge (for stdio-only clients)

Install

Client configuration

CLI

Docker

How it works

Tests

Access and licensing

Links

License

Install

Remote endpoint

Related servers