TRUSS Code Review MCP Server

AI-powered code review tools for Claude Code. Automated complexity analysis, anti-pattern detection, security review, and optimization — directly in your editor.

Quick Start

Run with npx (no install needed):

npx -y truss-code-review-mcp

Claude Desktop / Claude Code

Add to your claude_desktop_config.json or .claude/settings.json:

{
  "mcpServers": {
    "code-review": {
      "command": "npx",
      "args": ["-y", "truss-code-review-mcp"]
    }
  }
}

Cursor

Add to your Cursor MCP settings:

{
  "mcpServers": {
    "code-review": {
      "command": "npx",
      "args": ["-y", "truss-code-review-mcp"]
    }
  }
}

Tools

Free Tier (no key needed)

| Tool | Description | |------|-------------| | review_diff | Analyze a git diff for common issues (debug statements, TODOs, secrets, commented-out code) | | check_complexity | Calculate cyclomatic complexity of functions (JS/TS, Python, Go) | | detect_antipatterns | Detect language-specific anti-patterns with fix suggestions |

Pro Tier ($25/mo)

Requires TRUSS_LICENSE_KEY + your own ANTHROPIC_API_KEY or OPENAI_API_KEY.

| Tool | Description | |------|-------------| | deep_review | AI-powered comprehensive code review with scored findings | | suggest_tests | Generate complete, runnable test files | | explain_code | Generate documentation, docstrings, and data flow analysis | | security_review | OWASP-based security analysis with CWE references | | optimize_code | Performance optimization with before/after code |

Configuration

# Free tier — just install, no config needed

# Pro tier
export TRUSS_LICENSE_KEY="truss_..."
export ANTHROPIC_API_KEY="sk-ant-..."  # or OPENAI_API_KEY

Anti-Pattern Coverage

JavaScript/TypeScript: var usage, loose equality (==), any type, eval(), innerHTML, sync I/O, @ts-ignore, console statements, callback hell, magic numbers

Python: bare except, mutable default args, wildcard imports, global statement, string concatenation in loops, hardcoded credentials, type() comparison, debug prints

Go: ignored errors, goroutine leaks, mutex without defer, string([]byte) in loops, panic() in library code, init() functions, naked returns, error wrapping with %s

License

MIT

A2A Discovery

This server publishes a Google A2A Protocol Agent Card, making it discoverable by any A2A-compatible agent framework (LangGraph, CrewAI, Google ADK, AutoGen, and others).

Agent Card: agent-card.json

The agent card describes this server's skills, capabilities, input/output modalities, and authentication requirements in a machine-readable format. A2A clients can use it to discover and invoke tools automatically without manual configuration.

# Fetch the agent card
curl https://raw.githubusercontent.com/claw-factory/truss-code-review-mcp/main/agent-card.json