CodeRabbit MCP tools

The CodeRabbit MCP server builds most of its tools from the CodeRabbit API. A tool has the same name as its API operation’s operationId, and the operation’s summary and description as its title and description: create_code_task is the tool for Create a coding task. It takes the operation’s path, query, and body fields as one set of arguments, returns the same response, and runs the same permission and plan checks. Leave out org_id: the connection already selects the organization. The Access column shows the hint each tool gives your client. Read marks tools that only read data, which your client sees as read-only. Write marks every other tool, including previews that change nothing, such as preview_triage_rule and preview_repository_configuration. Your client can use the hint to ask you before the agent runs a Write tool.

Scopes by area

A tool needs the read scope of its group to read data and the write scope to change it. Every tool except connection_status, list_pull_requests, get_pull_request, start_code_review, and get_code_review also needs account:read, so include it in every scope list. If your connection lacks a scope, the call fails with insufficient_scope and names the missing scope; add it in your client and sign in again, as Choose scopes describes.

Group	Read scope	Write scope
Organizations and repositories	`repositories:read` for repositories, `configuration:read` for organizations and linked repositories. `get_me` needs only `account:read`, and `connection_status` only `connection`.
Pull requests and reviews	`pull_requests:read`. `get_code_review` needs `review`.	`reviews:write` for `request_pull_request_review`. `start_code_review` needs `review`.
Coding Agent	`code:read`	`code:write`
Coding environments	`code:read`	`code:write`
Verify	`verify:read`	`verify:write`
Triage	`triage:read`, which is also enough for `preview_triage_rule`	`triage:write` together with `triage:read`
Security	`security:read`	`security:write`
Knowledge Base	`knowledge:read`	`knowledge:write`
Automations	`automations:read`	`automations:write`
Reports	`reports:read`	`reports:write`
Configuration	`configuration:read`	`configuration:write`
Connections	`connections:read`	`connections:write`
Users and roles	`configuration:read`	`configuration:write`
Usage and metrics	`usage:read`

Differences from the API

Tools marked MCP only have no API operation with the same name:

connection_status checks the connected account, organization, and region.
list_pull_requests and get_pull_request find and read pull requests by repository, branch, or pull request URL. They take the place of the List pull requests and Get a pull request operations, which aren’t tools.
start_code_review and get_code_review run a CodeRabbit review of local code, which the CodeRabbit CLI uploads from your machine.
list_organizations, list_organization_repositories, list_linked_repositories, list_users, manage_seats, and list_audit_logs do the jobs of export and user-management operations such as List users and List audit log entries, in the connected organization only. manage_seats takes user IDs and doesn’t work in an Enterprise SSO workspace; there, manage seats with a workspace API token.

These API operations have no tool, so call them through the API or the CLI:

The metrics exports, such as review metrics.
The organization Learnings operations on /v1/learnings. The Knowledge Base tools, such as list_learnings, work with Learnings too; see Learnings.
The Deep Scan and Bug Scan findings exports.
Adding users to a self-hosted organization, changing roles, and changing the seat assignment mode.
download_verify_evidence, which returns a file. The get_verify_evidence tool returns the evidence details.

Tools

Organizations and repositories

Tool	What it does	Access	REST operation
`get_me`	Get the authenticated principal and selected organization	Read	`GET /v1/me`
`list_repositories`	List accessible installed repositories	Read	`GET /v1/repositories`
`get_repository`	Get an accessible installed repository	Read	`GET /v1/repositories/{repository_id}`
`connection_status`	Check the connected account and organization.	Read	MCP only
`list_organizations`	Read the selected organization inventory	Read	MCP only
`list_organization_repositories`	List onboarded organization repositories	Read	MCP only
`list_linked_repositories`	List saved linked repository associations	Read	MCP only

Pull requests and reviews

Tool	What it does	Access	REST operation
`get_pull_request_change_stack`	Read a saved Change Stack overview and layers	Read	`GET /v1/repositories/{repository_id}/pull-requests/{pull_request_number}/change-stack`
`get_pull_request_change_stack_layer_diff`	Read one saved Change Stack layer’s diff	Read	`GET /v1/repositories/{repository_id}/pull-requests/{pull_request_number}/change-stack/groups/{group_id}/layers/{layer_id}/diff`
`get_pull_request_review`	Read the existing CodeRabbit review status for a pull request	Read	`GET /v1/repositories/{repository_id}/pull-requests/{pull_request_number}/review`
`request_pull_request_review`	Request a review of the current pull-request head	Write	`POST /v1/repositories/{repository_id}/pull-requests/{pull_request_number}/review`
`get_pull_request_review_summary`	Read the full published CodeRabbit summary	Read	`GET /v1/repositories/{repository_id}/pull-requests/{pull_request_number}/review/summary`
`list_pull_request_review_thread_comments`	List all comments in a pull-request review thread	Read	`GET /v1/repositories/{repository_id}/pull-requests/{pull_request_number}/review-threads/{thread_id}/comments`
`list_pull_requests`	Find accessible GitHub Cloud pull requests in the connected organization.	Read	MCP only
`get_pull_request`	Get a GitHub Cloud PR’s metadata, review state and known merge blockers using a linked GitHub account.	Read	MCP only
`start_code_review`	Authorize one local code review in the connected organization.	Write	MCP only
`get_code_review`	Read the saved result of an existing local review.	Read	MCP only

Coding Agent

Tool	What it does	Access	REST operation
`get_code_autofix`	Read existing autofix status for a task or pull request	Read	`GET /v1/code/autofix`
`set_code_autofix`	Enable, disable, resume or recover existing autofix	Write	`POST /v1/code/autofix/commands`
`list_code_tasks`	List accessible coding tasks	Read	`GET /v1/code/tasks`
`create_code_task`	Create a coding task	Write	`POST /v1/code/tasks`
`get_code_task`	Read an accessible coding task	Read	`GET /v1/code/tasks/{task_id}`
`cancel_code_task_turn`	Request the existing human Stop action for a coding task	Write	`POST /v1/code/tasks/{task_id}/cancel`
`deliver_code_task`	Deliver a task patch using the caller’s existing repository write authorization	Write	`POST /v1/code/tasks/{task_id}/delivery`
`get_code_task_patch`	Read a coding task’s stored patch	Read	`GET /v1/code/tasks/{task_id}/patch`
`get_code_task_plan`	Read a stored coding plan version	Read	`GET /v1/code/tasks/{task_id}/plan`
`set_code_task_plan_approval`	Approve or withdraw approval of a coding plan	Write	`PUT /v1/code/tasks/{task_id}/plan/approval`
`list_code_task_plan_comments`	Read feedback on a specific stored plan version	Read	`GET /v1/code/tasks/{task_id}/plan/comments`
`replace_code_task_plan_comment`	Replace your Plan comment text	Write	`PUT /v1/code/tasks/{task_id}/plan/comments/{comment_id}`
`delete_code_task_plan_comment`	Delete your Plan comment	Write	`DELETE /v1/code/tasks/{task_id}/plan/comments/{comment_id}`
`reopen_code_task_plan_comment_thread`	Reopen a Plan feedback thread	Write	`POST /v1/code/tasks/{task_id}/plan/comments/threads/{thread_id}/reopen`
`reply_code_task_plan_comment_thread`	Reply to an existing Plan feedback thread	Write	`POST /v1/code/tasks/{task_id}/plan/comments/threads/{thread_id}/replies`
`resolve_code_task_plan_comment_thread`	Resolve a Plan feedback thread	Write	`POST /v1/code/tasks/{task_id}/plan/comments/threads/{thread_id}/resolve`
`implement_code_task_plan`	Implement a stored plan after its existing readiness checks	Write	`POST /v1/code/tasks/{task_id}/plan/implementation`
`revise_code_task_plan`	Queue a plan revision using the existing replan operation	Write	`POST /v1/code/tasks/{task_id}/plan/revisions`
`list_code_task_questions`	Read questions recorded in a task’s recent execution history	Read	`GET /v1/code/tasks/{task_id}/questions`
`answer_code_task_question`	Answer an existing coding task interaction	Write	`POST /v1/code/tasks/{task_id}/questions/{interaction_id}/answers`
`get_code_task_queue`	Read queued coding task messages	Read	`GET /v1/code/tasks/{task_id}/queue`
`list_code_task_turns`	List retained coding execution turns	Read	`GET /v1/code/tasks/{task_id}/turns`
`create_code_task_turn`	Queue a follow-up coding message	Write	`POST /v1/code/tasks/{task_id}/turns`
`get_code_task_turn`	Read a retained coding execution turn by its native start sequence	Read	`GET /v1/code/tasks/{task_id}/turns/{turn_start_seq}`

Coding environments

Tool	What it does	Access	REST operation
`list_code_environment_assignments`	List existing repository environment assignments	Read	`GET /v1/code/environment-assignments`
`list_code_environments`	List coding environments	Read	`GET /v1/code/environments`
`create_code_environment`	Create a coding environment with existing preparation behavior	Write	`POST /v1/code/environments`
`get_code_environment`	Read environment configuration without secret values	Read	`GET /v1/code/environments/{environmentId}`
`update_code_environment`	Update environment configuration with native revision checks	Write	`PUT /v1/code/environments/{environmentId}`
`archive_code_environment`	Archive a coding environment	Write	`DELETE /v1/code/environments/{environmentId}`
`add_code_environment_repository`	Assign a repository to a coding environment	Write	`POST /v1/code/environments/{environmentId}/repositories`
`update_code_environment_repository`	Update repository setup using its native revision check	Write	`PUT /v1/code/environments/{environmentId}/repositories/{repositoryAssignmentId}`
`remove_code_environment_repository`	Remove a repository environment assignment	Write	`DELETE /v1/code/environments/{environmentId}/repositories/{repositoryAssignmentId}`
`set_code_environment_variable`	Set an environment variable using existing encrypted storage	Write	`PUT /v1/code/environments/{environmentId}/variables`
`delete_code_environment_variable`	Delete an environment variable	Write	`DELETE /v1/code/environments/{environmentId}/variables/{variableId}`

Verify

Tool	What it does	Access	REST operation
`list_verify_repositories`	List registered Verify repositories	Read	`GET /v1/verify/repositories`
`register_verify_repository`	Register an accessible repository with an existing execution environment	Write	`POST /v1/verify/repositories`
`get_verify_repository`	Read a Verify repository and its recent jobs	Read	`GET /v1/verify/repositories/{repository_id}`
`configure_verify_repository`	Configure an existing Verify repository	Write	`PUT /v1/verify/repositories/{repository_id}`
`get_verify_bug_history`	Read a Verify bug’s observed history	Read	`GET /v1/verify/repositories/{repository_id}/bugs/{bug_id}/history`
`get_verify_execution`	Read a Verify execution result	Read	`GET /v1/verify/repositories/{repository_id}/executions/{execution_id}`
`get_verify_evidence`	Read published Verify evidence metadata	Read	`GET /v1/verify/repositories/{repository_id}/executions/{execution_id}/evidence/{artifact_id}`
`list_verify_findings`	List current Verify findings	Read	`GET /v1/verify/repositories/{repository_id}/findings`
`list_verify_jobs`	List Verify jobs	Read	`GET /v1/verify/repositories/{repository_id}/jobs`
`start_verify_job`	Start an existing Verify authoring, testability or execution operation	Write	`POST /v1/verify/repositories/{repository_id}/jobs`
`get_verify_job`	Read a Verify job and execution statuses	Read	`GET /v1/verify/repositories/{repository_id}/jobs/{job_id}`
`get_verify_job_bugs`	Read observed bugs from a Verify job	Read	`GET /v1/verify/repositories/{repository_id}/jobs/{job_id}/bugs`
`list_verify_journeys`	List registered user journeys	Read	`GET /v1/verify/repositories/{repository_id}/journeys`
`create_verify_journey`	Create a user journey	Write	`POST /v1/verify/repositories/{repository_id}/journeys`
`update_verify_journey`	Update or archive a user journey with native revision checks	Write	`PUT /v1/verify/repositories/{repository_id}/journeys/{cuj_id}`
`list_verify_schedules`	List Verify schedules	Read	`GET /v1/verify/repositories/{repository_id}/schedules`
`get_verify_schedule_history`	Read Verify schedule occurrences	Read	`GET /v1/verify/repositories/{repository_id}/schedules/{schedule_id}/history`
`change_verify_schedule`	Create, update or delete a Verify schedule with native revision checks	Write	`POST /v1/verify/repositories/{repository_id}/schedules/changes`

Triage

Tool	What it does	Access	REST operation
`list_triage_changes`	List the caller’s accessible Triage changes	Read	`GET /v1/triage/changes`
`get_triage_change`	Read an accessible Triage change	Read	`GET /v1/triage/changes/{id}`
`list_triage_change_history`	Read the recorded priority and close-candidacy history	Read	`GET /v1/triage/changes/{id}/history`
`set_triage_change_priority`	Set a change’s manual priority	Write	`PUT /v1/triage/changes/{id}/priority`
`list_triage_rules`	List Triage rules	Read	`GET /v1/triage/rules`
`create_triage_rule`	Create a Triage rule	Write	`POST /v1/triage/rules`
`get_triage_rule`	Read a Triage rule and its definition	Read	`GET /v1/triage/rules/{ruleId}`
`update_triage_rule`	Replace a Triage rule definition	Write	`PUT /v1/triage/rules/{ruleId}`
`delete_triage_rule`	Delete a Triage rule	Write	`DELETE /v1/triage/rules/{ruleId}`
`list_triage_rule_executions`	Read executions for a rule revision	Read	`GET /v1/triage/rules/{ruleId}/executions`
`transition_triage_rule`	Activate, pause, or resume a Triage rule	Write	`POST /v1/triage/rules/{ruleId}/transition`
`preview_triage_rule`	Preview existing changes matching a rule definition	Write	`POST /v1/triage/rules/preview`
`list_triage_teams`	List accessible Triage teams	Read	`GET /v1/triage/teams`

Security

Tool	What it does	Access	REST operation
`list_security_dependencies`	List vulnerable dependencies	Read	`GET /v1/security/dependencies`
`list_security_findings`	List code and secret findings	Read	`GET /v1/security/findings`
`get_security_dependency`	Read a dependency and its advisories	Read	`GET /v1/security/repositories/{repository_id}/dependencies/{dependency_id}`
`get_security_finding`	Read a code security finding	Read	`GET /v1/security/repositories/{repository_id}/findings/{finding_id}`
`dismiss_security_finding`	Dismiss a security finding	Write	`POST /v1/security/repositories/{repository_id}/findings/{finding_id}/dismiss`
`fix_security_finding`	Request an AI fix for a security finding	Write	`POST /v1/security/repositories/{repository_id}/findings/{finding_id}/fix`
`reopen_security_finding`	Reopen a code security finding	Write	`POST /v1/security/repositories/{repository_id}/findings/{finding_id}/reopen`
`get_security_runtime_validation_capability`	Read runtime validation availability for a finding	Read	`GET /v1/security/repositories/{repository_id}/findings/{finding_id}/validation-capability`
`get_security_scan`	Read an existing security scan	Read	`GET /v1/security/repositories/{repository_id}/scans/{scan_id}`
`get_security_scan_quote`	Estimate an AI Deep Scan	Read	`GET /v1/security/repositories/{repository_id}/scans/quote`
`get_security_secret_finding`	Read a secret finding	Read	`GET /v1/security/repositories/{repository_id}/secrets/{finding_id}`
`list_security_runtime_validations`	List runtime validation attempts for a finding	Read	`GET /v1/security/repositories/{repository_id}/validations`
`get_security_runtime_validation`	Read a runtime validation result	Read	`GET /v1/security/repositories/{repository_id}/validations/{validation_id}`
`list_security_sbom`	List software bill of materials components	Read	`GET /v1/security/sbom`
`export_security_sbom`	Export a software bill of materials	Read	`GET /v1/security/sbom/export`
`list_security_scans`	List security scan activity	Read	`GET /v1/security/scans`
`start_security_scans`	Request security scans for installed repositories	Write	`POST /v1/security/scans`
`list_security_secret_findings`	List secret scanner findings	Read	`GET /v1/security/secrets`

Knowledge Base

Tool	What it does	Access	REST operation
`get_architecture_capabilities`	Read available architecture knowledge scopes	Read	`GET /v1/knowledge/architecture/capabilities`
`get_architecture_document`	Read an architecture knowledge document at an observed revision	Read	`GET /v1/knowledge/architecture/document`
`list_architecture_repositories`	List repositories with architecture knowledge	Read	`GET /v1/knowledge/architecture/repositories`
`get_architecture_tree`	List the current architecture knowledge document tree	Read	`GET /v1/knowledge/architecture/tree`
`list_knowledge_connections`	List connected knowledge repositories	Read	`GET /v1/knowledge/connected-repositories`
`connect_knowledge_repository`	Connect an installed repository as a knowledge source	Write	`POST /v1/knowledge/connected-repositories`
`disconnect_knowledge_repository`	Disconnect a knowledge repository	Write	`DELETE /v1/knowledge/connected-repositories/{repository_id}`
`reindex_knowledge_repository`	Request a connected repository index refresh	Write	`POST /v1/knowledge/connected-repositories/{repository_id}/reindex`
`list_learnings`	List saved Learnings	Read	`GET /v1/knowledge/learnings`
`create_learnings`	Create Learnings	Write	`POST /v1/knowledge/learnings`
`get_learning`	Read a saved Learning	Read	`GET /v1/knowledge/learnings/{learning_id}`
`delete_learning`	Delete a Learning	Write	`DELETE /v1/knowledge/learnings/{learning_id}`
`update_learning`	Update a Learning	Write	`PATCH /v1/knowledge/learnings/{learning_id}`
`export_learnings`	Export saved Learnings	Read	`GET /v1/knowledge/learnings/export`
`get_learning_filters`	Read available Learning filters	Read	`GET /v1/knowledge/learnings/filters`
`get_learning_statistics`	Read recorded Learning usage statistics	Read	`GET /v1/knowledge/learnings/statistics`

Automations

Tool	What it does	Access	REST operation
`list_automations`	List accessible automations	Read	`GET /v1/automations`
`create_automation`	Create an ordinary Automation	Write	`POST /v1/automations`
`get_automation`	Read an ordinary Automation and its editable definition	Read	`GET /v1/automations/{automation_id}`
`update_automation`	Replace an ordinary Automation definition at its observed revision	Write	`PUT /v1/automations/{automation_id}`
`command_automation`	Run, pause, resume, or delete an ordinary Automation	Write	`POST /v1/automations/{automation_id}/commands`
`list_automation_runs`	List recorded ordinary Automation runs	Read	`GET /v1/automations/{automation_id}/runs`

Reports

Tool	What it does	Access	REST operation
`list_reports`	List existing report configurations	Read	`GET /v1/reports`
`create_report`	Create an on-demand or scheduled report	Write	`POST /v1/reports`
`get_report`	Read an existing report configuration	Read	`GET /v1/reports/{report_id}`
`update_report`	Replace a recurring report configuration	Write	`PUT /v1/reports/{report_id}`
`delete_report`	Delete a report configuration	Write	`DELETE /v1/reports/{report_id}`
`set_report_status`	Enable or disable a report schedule	Write	`PATCH /v1/reports/{report_id}`

Configuration

Tool	What it does	Access	REST operation
`get_organization_configuration`	Read organization review configuration	Read	`GET /v1/configuration/organization`
`set_organization_configuration`	Replace organization review configuration	Write	`PUT /v1/configuration/organization`
`get_workspace_configuration`	Read workspace review configuration	Read	`GET /v1/configuration/workspace`
`get_workspace_configuration_defaults`	Read the workspace configuration-default policy	Read	`GET /v1/configuration/workspace-defaults`
`set_workspace_configuration_defaults`	Set the workspace configuration-default policy	Write	`PUT /v1/configuration/workspace-defaults`
`get_repository_configuration`	Read repository review configuration	Read	`GET /v1/repositories/{repository_id}/configuration`
`set_repository_configuration`	Replace repository review configuration	Write	`PUT /v1/repositories/{repository_id}/configuration`
`get_effective_repository_configuration`	Read the effective review configuration and its layers	Read	`GET /v1/repositories/{repository_id}/configuration/effective`
`preview_repository_configuration`	Preview effective repository configuration without saving	Write	`POST /v1/repositories/{repository_id}/configuration/preview`
`get_repository_configuration_source`	Read a repository’s configuration source	Read	`GET /v1/repositories/{repository_id}/configuration/source`
`set_repository_configuration_source`	Set a repository’s configuration source	Write	`PUT /v1/repositories/{repository_id}/configuration/source`

Connections

Tool	What it does	Access	REST operation
`list_connections`	List accessible workspace connections	Read	`GET /v1/connections`
`create_connection`	Create a workspace connection	Write	`POST /v1/connections`
`get_connection`	Read masked saved-connection configuration	Read	`GET /v1/connections/{connectionId}`
`update_connection`	Update a workspace connection	Write	`PUT /v1/connections/{connectionId}`
`delete_connection`	Delete a workspace connection	Write	`DELETE /v1/connections/{connectionId}`
`patch_connection_metadata`	Update a connection’s name or description	Write	`PATCH /v1/connections/{connectionId}`
`complete_connection_requests`	Verify a saved connection and complete matching requests	Write	`POST /v1/connections/{connectionId}/complete-requests`
`discover_connection_mcp_tools`	Discover tools from a configured MCP connection	Write	`POST /v1/connections/mcp/tools`
`list_connection_requests`	List pending workspace connection requests	Read	`GET /v1/connections/requests`
`get_connection_request`	Read an existing connection-request intent	Read	`GET /v1/connections/requests/{intent}`
`submit_connection_request`	Submit an existing connection-request intent	Write	`POST /v1/connections/requests/{intent}`
`test_connection`	Test a connection with existing credential and provider checks	Write	`POST /v1/connections/test`

Users and roles

Tool	What it does	Access	REST operation
`list_roles`	List organization roles	Read	`GET /v1/configuration/roles`
`create_role`	Create a custom role by copying an existing role	Write	`POST /v1/configuration/roles`
`get_role`	Read a role and its permissions	Read	`GET /v1/configuration/roles/{roleId}`
`delete_role`	Delete an unassigned custom role	Write	`DELETE /v1/configuration/roles/{roleId}`
`update_role`	Update a custom role	Write	`PATCH /v1/configuration/roles/{roleId}`
`list_role_permission_options`	List supported role permissions	Read	`GET /v1/configuration/roles/permissions`
`list_users`	List organization users and seat assignments	Read	MCP only
`manage_seats`	Assign or unassign organization seats	Write	MCP only
`list_audit_logs`	List organization audit logs	Read	MCP only

Usage and metrics

Tool	What it does	Access	REST operation
`get_credits`	Read permitted credit balances	Read	`GET /v1/credits`
`get_usage`	Read current usage and permitted credit balances	Read	`GET /v1/usage`
`get_usage_budget`	Read current usage budget policy and consumption	Read	`GET /v1/usage/budget`
`list_usage_budget_members`	Read paginated member usage budgets	Read	`GET /v1/usage/budget/members`

Basics

Clients

Guides

API reference