MCP.Market

Dingdawg Code Review MCP server

by dingdawg·io.github.dingdawg/dingdawg-code-review·v2.0.6·1 stars

AI code review — security, quality, performance. Learns your patterns. Receipted.

C69/100grade C
What users say
No reviews yet
Be the first
Safety scan
C69/100

full report

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed Dingdawg Code Review yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Dingdawg Code Review tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 medium
  • Code scan6 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 53 days ago12/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    dist/index.js: …", category: "security", title: "Use of eval()", description: "eval() executes arbitr…
Overall 69/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Dingdawg Code Review compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
69/100
higher than 33% of 915 Security servers
GitHub stars
1
more than 60% of 587 Security servers

Install Dingdawg Code Review in Claude Code, Cursor or VS Code

Runs npx -y dingdawg-code-review on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add dingdawg-code-review -- npx -y dingdawg-code-review
Add to Cursor

What the publisher says

From the Dingdawg Code Review repository's README, as published. We do not edit it. Read it on GitHub

DingDawg Agent 1

Governance receipts for AI agents.

Every action a governed agent takes generates a cryptographically-signed receipt: what it decided, why, which model, which version, at what time. Built toward EU AI Act Art. 12, Colorado AI Act (SB 24-205), and NIST AI RMF requirements.

The receipt is what turns a policy document into evidence.

What's live today

Backed by 10 governed-agent npm packages (compliance, legal, healthcare, finance, devops, marketing, sales, support, code-review, planning).

Quickstart

curl -X POST https://api.dingdawg.com/v1/developers/signup \
  -H "Content-Type: application/json" \
  -d '{"email":"you@example.com","name":"Your Name","role":"consumer"}'
# -> {"api_key": "dd_...", ...}  store it — shown once
export DINGDAWG_API_KEY=dd_your_key
npx dingdawg-compliance quick-check

Architecture

Client (npm package / your agent) --auth: DINGDAWG_API_KEY-->
  api.dingdawg.com (FastAPI, Railway)
    -> Tier isolation + rate limiting
    -> Governance gate (score, log, decide)
    -> Audit trail (signed receipt)
    -> Stripe metering / billing
  -> Response (governed, scored, receipted)

Documentation

  • Quickstart Guide
  • Architecture Overview
  • Security Model
  • The 7 Innovations
  • Constitution Guide
  • Skill Development
  • Deployment Guide
  • API Reference

Contributing

See CONTRIBUTING.md for contribution guidelines.

Security

See SECURITY.md for our responsible disclosure policy.

License

MIT License. See LICENSE for details.

Innovative Systems Global. The name is not aspirational. It is a statement of fact.

Nothing above is checked by us. What we check is on the safety report.

Dingdawg Code Review: common questions

Is Dingdawg Code Review MCP server safe?
With care: it is graded C, so read the findings first (69/100). Read the Dingdawg Code Review safety report
How do I install Dingdawg Code Review?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Dingdawg Code Review need an API key?
Yes. The registry entry asks for DINGDAWG_API_KEY.
Is Dingdawg Code Review maintained?
The last commit was 91 days ago (2026-08-05). The latest release is v2.0.6.
What can I use instead of Dingdawg Code Review?
Servers from other publishers that do the same job: Skylos MCP server, SonarQube MCP Server and Prodcheck MCP server.
How does Dingdawg Code Review compare with other Security MCP servers?
safety score 69/100 (higher than 33% of 915 Security servers); github stars 1 (more than 60% of 587 Security servers). Full comparison.

Alternatives to Dingdawg Code Review

Same job from other publishers: the closest match first, then the best rated.

  • Skylos
    Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
    C
  • SonarQube MCP Server
    Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
    B
  • Prodcheck
    4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
    A
  • prodlint
    Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.
    A
  • Trent
    Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
    A

More from dingdawg →