Dingdawg Code Review MCP server
AI code review — security, quality, performance. Learns your patterns. Receipted.
1 stars
Reviews
Write oneNobody has reviewed Dingdawg Code Review yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Dingdawg Code Review tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan6 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 53 days ago12/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/index.js: …", category: "security", title: "Use of eval()", description: "eval() executes arbitr…
How Dingdawg Code Review compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 69/100
- higher than 33% of 915 Security servers
- GitHub stars
- 1
- more than 60% of 587 Security servers
Install Dingdawg Code Review in Claude Code, Cursor or VS Code
Runs npx -y dingdawg-code-review on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add dingdawg-code-review -- npx -y dingdawg-code-review
What the publisher says
From the Dingdawg Code Review repository's README, as published. We do not edit it. Read it on GitHub
DingDawg Agent 1
Governance receipts for AI agents.
Every action a governed agent takes generates a cryptographically-signed receipt: what it decided, why, which model, which version, at what time. Built toward EU AI Act Art. 12, Colorado AI Act (SB 24-205), and NIST AI RMF requirements.
The receipt is what turns a policy document into evidence.
What's live today
Backed by 10 governed-agent npm packages (compliance, legal, healthcare, finance, devops, marketing, sales, support, code-review, planning).
Quickstart
curl -X POST https://api.dingdawg.com/v1/developers/signup \
-H "Content-Type: application/json" \
-d '{"email":"you@example.com","name":"Your Name","role":"consumer"}'
# -> {"api_key": "dd_...", ...} store it — shown onceexport DINGDAWG_API_KEY=dd_your_key
npx dingdawg-compliance quick-checkArchitecture
Client (npm package / your agent) --auth: DINGDAWG_API_KEY-->
api.dingdawg.com (FastAPI, Railway)
-> Tier isolation + rate limiting
-> Governance gate (score, log, decide)
-> Audit trail (signed receipt)
-> Stripe metering / billing
-> Response (governed, scored, receipted)Documentation
- Quickstart Guide
- Architecture Overview
- Security Model
- The 7 Innovations
- Constitution Guide
- Skill Development
- Deployment Guide
- API Reference
Contributing
See CONTRIBUTING.md for contribution guidelines.
Security
See SECURITY.md for our responsible disclosure policy.
License
MIT License. See LICENSE for details.
Innovative Systems Global. The name is not aspirational. It is a statement of fact.
Nothing above is checked by us. What we check is on the safety report.
Dingdawg Code Review: common questions
- Is Dingdawg Code Review MCP server safe?
- With care: it is graded C, so read the findings first (69/100). Read the Dingdawg Code Review safety report
- How do I install Dingdawg Code Review?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Dingdawg Code Review need an API key?
- Yes. The registry entry asks for
DINGDAWG_API_KEY. - Is Dingdawg Code Review maintained?
- The last commit was 91 days ago (2026-08-05). The latest release is v2.0.6.
- What can I use instead of Dingdawg Code Review?
- Servers from other publishers that do the same job: Skylos MCP server, SonarQube MCP Server and Prodcheck MCP server.
- How does Dingdawg Code Review compare with other Security MCP servers?
- safety score 69/100 (higher than 33% of 915 Security servers); github stars 1 (more than 60% of 587 Security servers). Full comparison.
Alternatives to Dingdawg Code Review
Same job from other publishers: the closest match first, then the best rated.
- SkylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.not reviewedEstablishedC
- SonarQube MCP ServerAnalyze code quality and security with SonarQube Server or Cloud directly in AI assistants.not reviewedGrowingB
- Prodcheck4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.not reviewedGrowingA
- prodlintProduction readiness for vibe-coded apps. 52 checks for security, reliability, and performance.not reviewedGrowingA
TrentSecurity reviews, threat models over a repo or website, and remediation tracking, in your editor.not reviewedGrowingA