AI Code Review • 100% Local

Code Review
That Stays Local

Catch bugs, security issues, and code smells before they reach your team. MCP server with 7 AI tools. Works offline. Zero configuration.

🔐

100% Local

Code never leaves your machine. Uses local git commands. No external API calls or uploads.

⚡

Instant Feedback

Review before pushing. Catch issues locally. Fix them instantly without waiting for CI.

🔑

Zero Config

Install from Marketplace. Start reviewing. No API keys, no accounts, no setup needed.

Install from VS Code View on GitHub →

7 Powerful MCP Tools

Use them directly in Copilot Chat or Claude to power your code review workflow.

📝

check_changes

Review your uncommitted changes. Catch bugs in local staging area before commit.

🔄

get_diff

Get diff between your branch and base (main/master). Raw or processed output.

🔍

review_code

AI-powered code review. Detect bugs, security issues, code smells. Custom focus areas.

🏷️

create_pr_title

Generate semantic PR titles from your changes. Follows conventional commits.

📄

create_pr_body

Generate complete PR descriptions with summaries, changes, and testing notes.

💬

create_commit_message

Generate descriptive commit messages from staged changes automatically.

🔐

find_secrets

Detect API keys, AWS credentials, JWT tokens, private keys before they're pushed.

Real Use Cases

Everything happens locally on your machine

🔍

Self-Review Before PR

@workspace #check_changes

Finish your feature → AI reports issues → Fix locally → Push clean code

👀

Security-Focused Code Review

git checkout feature/payment-integration
@workspace #review_code focus on security, input validation, SQL injection

AI scans payment features for security vulnerabilities before merging

🛡️

Pre-Commit Secret Detection

@workspace #find_secrets

Catches: API keys, AWS credentials, JWT tokens, private keys, database passwords

💬

Auto-Generated Commit Messages

@workspace #create_commit_message

Output: feat(auth): add JWT token refresh with 24h expiry

Why DiffPilot?

Built for privacy-conscious teams and regulated industries

100% Local Processing

Code never leaves your machine. Only uses local git commands. No external servers, no uploads.

Zero Configuration

Install from Marketplace and start immediately. No API keys, no accounts, no setup needed.

No Telemetry or Logging

Zero data collection. DiffPilot doesn't store, transmit, or log any code content.

Open Source

Full source code available for audit. MIT licensed. Built with transparency in mind.

Works Everywhere

GitHub & GitLab
Azure DevOps & TFS
Local Git Repositories
Air-Gapped Environments

Works with any AI assistant:

GitHub Copilot Claude Desktop Any MCP Client

Built for Regulated Industries

DiffPilot is ideal for air-gapped environments, on-premises deployments, and organizations with strict data residency requirements. The extension contains no outbound network code—perfect for HIPAA, PCI-DSS, SOC 2, and other compliance frameworks.

Quick Start

VS Code Marketplace (Recommended)

Easiest
ext install BurakKalafat.diffpilot

Open VS Code → Extensions (Ctrl+Shift+X) → Search "DiffPilot" → Install

.NET Global Tool

NuGet
dotnet tool install -g DiffPilot

For use as a standalone MCP server with Claude Desktop or other clients

Requires Git installed and accessible in your PATH. Works best with VS Code 1.101+ and Node.js 18+.