Diffpilot MCP server

by bkalafat·io.github.bkalafat/diffpilot·v1.0.7·5 stars

MCP server for PR code review, commit messages, changelogs, and secret detection.

C60/100grade C

What users say

No reviews yet

Safety scan

C60/100

Adoption

New

5 stars

Reviews

Nobody has reviewed Diffpilot yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

no findings

–Code scanpackage could not be scannedn/a
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 256 days ago4/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 60/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

The registry entry has no remote endpoint or installable package.

Is Diffpilot MCP server safe?: With care: it is graded C, so read the findings first (60/100). Read the Diffpilot safety report
Does Diffpilot need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Diffpilot maintained?: The last commit was 290 days ago (2026-01-18). The latest release is v1.0.7.
What can I use instead of Diffpilot?: Servers from other publishers that do the same job: Skylos MCP server, Wireshark MCP server and chunk-invariance MCP server.
How does Diffpilot compare with other Security MCP servers?: safety score 60/100 (higher than 15% of 915 Security servers); github stars 5 (more than 86% of 587 Security servers). Full comparison.

Same job from other publishers: the closest match first, then the best rated.

Skylos
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
not reviewed
Established
C
Wireshark
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
not reviewed
Established
A
chunk-invariance
Checks whether your streaming redactor leaks a secret split across chunks; writes a pytest for it.
not reviewed
Growing
A
SafeWeave
Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
not reviewed
Growing
C
Zn Gate
The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
not reviewed
Growing
B