
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
commit-check-mcp
Advanced tools
Model Context Protocol (MCP) server for commit-check.
commit-check-mcp exposes commit-check as local MCP tools so an MCP client can validate commit messages, branch names, author info, push safety, and repository state.
This MCP server exposes commit-check validations as MCP tools:
server_health — returns server/sdk versionsvalidate_commit_message — validates a commit messagevalidate_branch_name — validates a branch name or the current repo branchvalidate_push_safety — validates that a push is not a force pushvalidate_author_info — validates author name/email or the repo's git author configvalidate_commit_context — runs combined checks in one callvalidate_repository_state — validates latest commit, current branch, author state, and optional push safety for a repodescribe_validation_rules — returns the effective config and enabled rules after merging defaults and repo configAll validation tools return the same structured commit-check result shape:
{
"status": "pass|fail",
"checks": [
{
"check": "message",
"status": "pass|fail",
"value": "...",
"error": "...",
"suggest": "..."
}
]
}
pip install commit-check-mcp
This installs the commit-check-mcp CLI entrypoint.
For local development from this repository:
pip install -e .
This server runs over stdio, so it is meant to be launched by an MCP client rather than used as a long-running HTTP service.
With uvx (recommended — no install needed):
# Run once, no pip install required
uvx commit-check-mcp
Tip: If
uvis not installed, get it viacurl -LsSf https://astral.sh/uv/install.sh | sh.
{
"mcpServers": {
"commit-check": {
"command": "uvx",
"args": ["commit-check-mcp"]
}
}
}
{
"mcpServers": {
"commit-check": {
"command": "uvx",
"args": ["commit-check-mcp"]
}
}
}
Add to your ~/.claude/settings.json or project-level .claude/settings.local.json.
In Cursor, go to Settings → Cursor Settings → MCP → Add new MCP server and paste:
| Field | Value |
|---|---|
| Name | commit-check |
| Type | command |
| Command | uvx commit-check-mcp |
Or add to your project's .cursor/mcp.json:
{
"mcpServers": {
"commit-check": {
"command": "uvx",
"args": ["commit-check-mcp"]
}
}
}
Add to your ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"commit-check": {
"command": "uvx",
"args": ["commit-check-mcp"]
}
}
}
Add a new MCP server in the Cline extension settings:
{
"mcpServers": {
"commit-check": {
"command": "uvx",
"args": ["commit-check-mcp"]
}
}
}
Add to your ~/.continue/config.json:
{
"experimental": {
"mcpServers": {
"commit-check": {
"command": "uvx",
"args": ["commit-check-mcp"]
}
}
}
}
Add to your Roo Code MCP settings:
{
"mcpServers": {
"commit-check": {
"command": "uvx",
"args": ["commit-check-mcp"]
}
}
}
Add to your ~/.config/zed/settings.json:
{
"mcp_servers": {
"commit-check": {
"command": "uvx",
"args": ["commit-check-mcp"]
}
}
}
If your client does not support uvx, use pip and the direct path:
pip install commit-check-mcp
which commit-check-mcp
Then use the absolute path in your config:
{
"mcpServers": {
"commit-check": {
"command": "/path/to/commit-check-mcp"
}
}
}
# If installed via pip
commit-check-mcp
# Or via uvx (no install needed)
uvx commit-check-mcp
The server uses stdio transport, which is the recommended MCP default for local tool integrations.
After the client starts the server, it will expose these tools:
server_health: returns server, SDK, and dependency versionsvalidate_commit_message(message, config?, repo_path?, config_path?)validate_branch_name(branch?, config?, repo_path?, config_path?)validate_push_safety(push_refs?, config?, repo_path?, config_path?)validate_author_info(author_name?, author_email?, config?, repo_path?, config_path?)validate_commit_context(message?, branch?, author_name?, author_email?, config?, repo_path?, config_path?)validate_repository_state(repo_path?, config?, config_path?, include_message?, include_branch?, include_author?, include_push?)describe_validation_rules(config?, repo_path?, config_path?)The common optional arguments are:
repo_path: repository directory to validate againstconfig_path: explicit TOML config file; relative paths resolve from repo_pathconfig: ad-hoc config overrides merged on top of defaults and repo configValidate a commit message using repo-local rules:
{
"message": "feat(api): add MCP validation tool",
"repo_path": "/path/to/repo"
}
Validate the current repository branch using an explicit config file:
{
"repo_path": "/path/to/repo",
"config_path": ".github/commit-check.toml"
}
Validate the full repository state:
{
"repo_path": "/path/to/repo",
"include_message": true,
"include_branch": true,
"include_author": true
}
Validate push safety from git pre-push hook ref metadata:
{
"repo_path": "/path/to/repo",
"push_refs": "refs/heads/main abc123 refs/heads/main def456"
}
Inspect the final merged rules that will be applied:
{
"repo_path": "/path/to/repo",
"config": {
"commit": {
"require_body": true
}
}
}
commit-check is most useful when it runs against a real git repository and its cchk.toml or commit-check.toml file. This MCP server now supports that directly:
repo_path — run git-based validations against a specific repositoryconfig_path — point to an explicit TOML config file; relative paths are resolved from repo_pathconfig — apply ad-hoc overrides on top of defaults and repo configTypical patterns:
Example payload for a repository-wide validation:
{
"repo_path": "/path/to/repo",
"include_message": true,
"include_branch": true,
"include_author": true,
"include_push": true
}
Config precedence is:
commit-check built-in defaultsrepo_pathconfig_path when explicitly providedconfig overrides passed to the tool| Directory | Link |
|---|---|
| Official MCP Registry | io.github.commit-check/commit-check-mcp |
| Glama.ai | github/commit-check/commit-check-mcp |
| PyPI | commit-check-mcp |
mcp-name: io.github.commit-check/commit-check-mcp
FAQs
MCP server exposing commit-check validation tools
We found that commit-check-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.