- Review your local changes with CodeRabbit and fix the findings.
- Apply CodeRabbit’s review comments from your GitHub pull request.
agy), and runs the CodeRabbit CLI on your machine. It’s open source under the MIT license: read its skills and agents, or report issues, in the coderabbitai/skills repository.
What you need:
- The CodeRabbit CLI and a CodeRabbit account. Set up covers installing the CLI and signing in.
- The Antigravity App or the Antigravity CLI.
- For pull request feedback only: a GitHub repository and the GitHub CLI (
gh), signed in.
This page covers the App and the CLI. In the standalone Antigravity IDE, you can use the CodeRabbit IDE extension, which the IDE installs from Open VSX.
Set up
To have the Antigravity agent run these steps for you, see Set up from an agent.1
Install the CodeRabbit CLI
- Install script
- Homebrew
- Windows
coderabbit is not available immediately after installation, start a new shell, or run the exact shell-specific reload command printed under Next steps. If the install script offers browser sign-in without first asking for a region, EU users should skip it and authenticate later with an explicit --region eu.PATH:0.9.0.2
Sign in to CodeRabbit
Run this in your own terminal, not through the agent:A browser window opens. Complete sign-in there. For a first login to an EU-hosted account, use The output shows your user, organization, and region. The plugin never starts a login itself; when you’re signed out, the agent asks you to run this step.
coderabbit auth login --region eu. If you belong to more than one organization, see Organization selection.Check the result:3
Install the plugin
- Antigravity App
- Antigravity CLI
- In the left sidebar, open Customizations.
- In the marketplace, find CodeRabbit.
- Click + on the plugin card.
4
Check the plugin
- Antigravity App: CodeRabbit is listed under Customizations > Installed.
- Antigravity CLI:
agy plugin listshowscoderabbitmarkedenabled.
code-review and autofix skills, and code-reviewer and autofix agents that do the same work in their own context.coderabbit commands and, in the App’s Default and Auto presets, to run them outside the sandbox. Approve, or allow them in advance as described in Permissions and sandbox.
Review your changes
Ask the agent in plain language. Thecode-review skill activates for review requests:
To make sure the skill is used, name it in the prompt, for example
Use the code-review skill to review my changes. Antigravity also exposes skills as slash commands; see Antigravity skills.
When you ask for a review, the agent:
- Runs
coderabbit auth status --agentand continues only when you’re signed in. - Runs
coderabbit review --agentwith the scope you asked for. A review can take several minutes; allow at least 15 minutes before you treat it as stuck. - Presents the findings grouped by CodeRabbit’s severities: critical, major, minor, trivial, and info.
status: review_skipped and zero findings means no review ran, usually because the scope has no changes. It doesn’t mean the code is clean. See agent mode output.
Usage credits. When your included reviews are used up and your organization runs usage-based reviews on demand, the review stops and returns the billable file count and maximum price. The agent explains the offer and reruns the review with --use-credits only if you agree. To have Antigravity ask before each review as well, see Require approval for paid reviews. Run coderabbit usage to check your allowance.
Apply pull request feedback
Theautofix skill applies CodeRabbit’s review comments from your pull request on GitHub. It uses the GitHub CLI, not the CodeRabbit CLI.
It needs gh signed in (gh auth status succeeds) and an open GitHub pull request for the current branch that CodeRabbit reviewed after you pushed your changes.
Ask the agent:
Permissions and sandbox
The plugin runscoderabbit in Antigravity’s terminal, so Antigravity’s permissions and sandbox apply. Rules are per user: the Antigravity CLI reads ~/.gemini/antigravity-cli/settings.json, and the App layers its rules on the preset under Settings > General > Global Permissions.
Allow CodeRabbit commands. The skill runs the CodeRabbit CLI by its absolute path, and rules match the start of a command word by word, so command(coderabbit) doesn’t match. In a regex: rule, each word is a regular expression that must match a whole word, so (.*/)?coderabbit matches any install path:
~/.gemini/antigravity-cli/settings.json
command -v coderabbit, such as command(/opt/homebrew/bin/coderabbit review). A command(...) allow rule also lets the command run outside the sandbox without asking. Business and enterprise accounts need matching unsandboxed(...) rules for that, such as unsandboxed(regex:(.*/)?coderabbit review).
Require approval for paid reviews. The review allow rule also matches coderabbit review --use-credits, so only the skill’s instruction keeps the agent from starting a paid review without asking. Rules match from the start of the command and the flag can follow other options, so a deny rule can’t reliably catch it. To have Antigravity ask, put the review rule in ask instead of allow. Ask rules take priority over allow rules and the preset, so Antigravity asks before every command that starts with coderabbit review, and you can check the command for --use-credits before you approve. The rule doesn’t match a review started another way, such as coderabbit --agent --use-credits, which reviews because review is the default command, or the cr alias, so in presets that run commands without asking, such as Turbo, those still run without a prompt.
Sandbox. The terminal sandbox is off by default in the Antigravity CLI and on in the App’s Default and Auto presets. Sandboxed commands have no network access and can’t read unmounted paths, so the CodeRabbit CLI can’t reach CodeRabbit or its saved sign-in there. When the sandbox is on, the skill asks to run auth status and review outside it; approve, or the review can’t run. credentials_unavailable and callback_listener_unavailable mean the sandbox blocked access, not that you’re signed out.
What CodeRabbit receives. A review sends the diff of the changes in its scope to CodeRabbit for analysis. Untracked files are included only when you ask for them. See Data Security. If your network restricts outbound traffic, allow the domains in CLI network requirements.
Use CodeRabbit without the plugin
You can run CodeRabbit from Antigravity with the CLI alone. After installing the CLI and signing in, tell the agent to run it, or add a rule toAGENTS.md in your project:
.agents/skills/ folder for Antigravity:
Update or remove the plugin
Antigravity updates plugins installed from the App automatically.- Antigravity App: in Customizations, click the CodeRabbit plugin card, then Uninstall.
- Antigravity CLI: turn the plugin off with
agy plugin disable coderabbitand back on withagy plugin enable coderabbit, or remove it withagy plugin uninstall coderabbit.
Troubleshooting
Set up from an agent
This section is for the Antigravity agent. To hand setup to your agent, paste this into Antigravity:Setup prompt
- Don’t install the CodeRabbit CLI, pipe install scripts to a shell, run
coderabbit auth login, or handle tokens or API keys. The human does these. - Don’t edit
~/.gemini/antigravity-cli/settings.jsonor other permission settings. - Request to run a command outside the sandbox at most once per command. If the human declines, report it.
- Don’t start a review during setup unless the human asks for one.
- Add
--use-creditsonly after the human says yes in chat to the offer in anaction_requiredresult withstatus: "awaiting_confirmation". A yes covers that offer only. If the code changes or you start another review, run it without--use-creditsand present the new offer. - After a rate limit, wait for the reported time instead of retrying in a loop.
- When you review later, tell the human the scope and which severities you’ll fix: critical and major unless they say otherwise.
- For output fields and exit codes, see Agent mode.
- Probe with read-only commands, then report every missing piece in one message.
command -v coderabbitandcoderabbit --version: the CLI path and a version, such as0.9.0. A failure means the CLI is missing, outsidePATH, or hidden by the sandbox.coderabbit auth status --agent, if the CLI was found: one JSON line with"authenticated":true."authenticated":falsemeans the human must sign in.credentials_unavailableorcallback_listener_unavailablemeans the sandbox blocked access; request to run it outside the sandbox. Report any other error or malformed output.command -v agy: if found, runagy plugin list --json, which needs Antigravity CLI 1.3.4 or later, and look for an entry with"name": "coderabbit","enabled": true, and the skillscode-reviewandautofix. If the command fails, report it. Don’t fall back toagy plugin list, which lists only imported plugins before 1.3.4. Withoutagy, the human uses the App.
- Stop if anything is missing, and list what the human must do:
- No CLI: install it from Getting started, or tell you where it’s installed.
- Signed out: run
coderabbit auth loginin their own terminal (coderabbit auth login --region eufor an EU account). agy plugin list --jsonfailed: update the Antigravity CLI to 1.3.4 or later.- Plugin disabled: approve running
agy plugin enable coderabbit. - Plugin missing, with
agy: approve runningagy plugin install coderabbit. If that fails because the plugin isn’t found, ask separately before runningagy plugin install https://github.com/coderabbitai/skills. - Plugin status unknown, without
agy: install CodeRabbit from Customizations in the Antigravity App and confirm that it’s listed under Installed. After they confirm, continue with the next check.
- After the human acts, run the probes again. If the plugin was installed or enabled during setup, by you or by the human in the App, and the
code-reviewskill isn’t available to you, ask the human to start a new conversation. Setup isn’t complete until the skill is available. - Request once to run
coderabbit doctoroutside the sandbox, where its network checks can pass.- Exit code
0: success. Warnings don’t cause a failure. - Exit code
1: setup isn’t complete. Stop and report the failed checks. For connectivity failures, point the human to CLI network requirements.
- Exit code
- Report the CLI version, the signed-in region, the plugin status, and the
coderabbit doctorresult. Setup is complete only when every check passed.
What’s next
Agent mode output and exit codes
See the structured output the
code-review skill reads when it runs a review.CLI command reference
Look up every CodeRabbit CLI command and option the agent can run.
CodeRabbit Skills
Install the CodeRabbit skills in other coding agents.