
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
MCP Server for AI-Powered PR Code Review
Works with GitHub Copilot, Claude, Azure DevOps, TFS • 100% Local • Zero Dependencies
Features • Installation • Tools • Configuration
DiffPilot is an MCP (Model Context Protocol) server that provides AI-powered PR code review and developer productivity tools. It runs locally and works with any MCP-compatible AI client.
| Feature | Description |
|---|---|
| 🔄 PR Diff | Get diff between branches |
| 📊 Code Review | AI-structured diff output for review |
| 🏷️ PR Title | Conventional commit format titles |
| 📋 PR Description | Full description with checklist |
| 💬 Commit Message | Generate from staged/unstaged changes |
| 🔐 Secret Scan | Detect API keys, passwords, tokens |
| 📈 Diff Stats | Lines added/removed, file breakdown |
| 🧪 Test Suggestions | Pattern-based test case recommendations |
| 📝 Changelog | Keep a Changelog format from commits |
# Prerequisites: .NET 9 SDK, Git
# Clone and build
git clone https://github.com/bkalafat/DiffPilot.git
cd DiffPilot
dotnet build
# Run tests
dotnet test
# Run server
dotnet run
{
"mcpServers": {
"diffpilot": {
"command": "dotnet",
"args": ["run", "--project", "/path/to/DiffPilot"],
"cwd": "/your/git/repository"
}
}
}
| Tool | Purpose |
|---|---|
get_pr_diff | Raw diff between branches |
review_pr_changes | Diff with AI review instructions |
generate_pr_title | Conventional PR title (feat/fix/refactor) |
generate_pr_description | Full PR description with checklist |
| Tool | Purpose |
|---|---|
generate_commit_message | Commit message from staged/unstaged changes |
scan_secrets | Detect API keys, passwords, tokens |
diff_stats | Change statistics (lines, files, types) |
suggest_tests | Test case recommendations |
generate_changelog | Changelog from commits (Keep a Changelog) |
{
"diffpilot.dotnetPath": "dotnet",
"diffpilot.serverPath": "",
"diffpilot.defaultBaseBranch": "main",
"diffpilot.prTitleStyle": "conventional",
"diffpilot.commitMessageStyle": "conventional"
}
# Get PR diff
"Show me the changes compared to main branch"
# Code review
"Review this PR for security and performance issues"
# Generate PR title
"Suggest a PR title for these changes"
# Scan for secrets
"Check if there are any secrets in my changes"
# Generate commit message
"Create a commit message for my staged changes"
DiffPilot/
├── src/
│ ├── Program.cs # Entry point (JSON-RPC loop)
│ ├── Git/GitService.cs # Git command execution
│ ├── Protocol/ # JSON-RPC & MCP handlers
│ └── Tools/ # Tool implementations
├── tests/ # Unit tests
└── vscode-extension/ # VS Code extension wrapper
Tech Stack: C# 13 / .NET 9 | JSON-RPC 2.0 | MCP stdio | xUnit
MIT License - see LICENSE file.
GitHub • VS Code Marketplace • @bkalafat
⭐ Star this repo if you find it useful!
FAQs
MCP server for PR code review and developer productivity tools
We found that DiffPilot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.