Public MCP · read-only · no API key

Give your coding agent a second opinion before it installs.

RepoPilot gives agents repository-level evidence for dependency adoption, unfamiliar codebases, competing choices, and risky changes. Every result separates what is known from what still needs verification.

Codex: connect in one command

Then start a new Codex session so the tools appear.

Recommended

bash

terminal

codex mcp add repopilot --url https://repopilot.app/api/mcp

Here without an agent?Inspect a repository in the visual analyzer →

Other clients

Claude Code

bash

terminal

claude mcp add --transport http repopilot https://repopilot.app/api/mcp

Claude Desktop / Claude.ai

Open Settings → Connectors, choose Add custom connector, name it RepoPilot, and paste this remote MCP URL.

text

RepoPilot connector URL

https://repopilot.app/api/mcp

Cursor, Cline, and other config-based MCP clients

json

MCP configuration

{
  "mcpServers": {
    "repopilot": {
      "type": "http",
      "url": "https://repopilot.app/api/mcp"
    }
  }
}

VS Code configuration

json

.vscode/mcp.json

{
  "servers": {
    "repopilot": {
      "type": "http",
      "url": "https://repopilot.app/api/mcp"
    }
  }
}

Make sure it works

Restart the client after connecting, then ask this. A working setup will visibly call check_dependency and report both a recommendation and its remaining unknowns.

text

test prompt

Before adding npm:express, check it with RepoPilot. Tell me the recommendation, confidence, strongest evidence, and anything RepoPilot did not verify. Do not install it.

Five tools, chosen by intent

check_dependency

Before adding, upgrading, trusting, forking, or deploying a dependency.

Recommendation, receipts, confidence, and evidence gaps.

analyze_repo

When entering an unfamiliar public GitHub repository.

A concise decision brief without flooding the agent context.

get_artifact

Before substantial code work, after the short brief.

Key files, entry points, reading order, and a cached agent artifact.

compare_repos

When choosing between two repositories or npm packages.

Per-use-case preference, trade-offs, confidence, and unknowns.

check_change_risk

Before merging a pull request or after producing a local diff.

A deterministic change-shape score and review priorities.

Compact by default

Briefs preserve context. The full repository artifact is opt-in.

Unknown means unknown

A cache miss or missing evidence is never presented as approval.

Safe to delegate

Every tool is read-only, nondestructive, and idempotent.

What the result means

agent.summary is the action-oriented answer; confidence describes the available repository evidence; and evidence_gaps states what the agent must not assume.

RepoPilot evaluates repository-level signals. It does not certify an exact package version, compatibility, provenance, or production safety. Agents are instructed to verify those locally.

REST API reference Agent rules without MCPEndpoint: https://repopilot.app/api/mcp