Scans Terraform, CloudFormation, Kubernetes and Pulumi IaC plus CI files and Dockerfiles for misconfigurations and committed secrets, and reviews app architecture, from an MCP server or offline CLI.
- Access
- MCPCLI
- Auth
- OAuth 2.0
- Skills
- 5
Skills
Scan IaC
Scans Terraform, CloudFormation, Kubernetes, Helm, Ansible, Bicep, ARM and Dockerfiles, returning a resource inventory plus findings with rule IDs, severity and remediation.
Review Architecture
Reviews a single source snippet or infrastructure config for security, reliability and cost concerns, such as disabled timeouts or unbounded retry limits.
Review Application Architecture
Maps related source files into an import graph and checks Next.js boundaries, covering data access, authorization, reliability and delivery with cited evidence.
Plan Architecture Review
Starts a review consultation from a repository-relative file inventory and project goals, suggesting files to read and asking focused follow-up questions.
Offline CLI Scan
Scans IaC, CI, Dockerfile and package files locally with no account and no network calls, supporting baselines, changed-file mode and JSON output.
Related Agents
OpenCodeReview
CLI · APIReviews pull requests with deterministic static analysis plus an LLM agent, posting line-level comments backed by…
CodeRabbit
API · CLI · ExtensionReviews pull requests with AI across GitHub, GitLab, Azure DevOps, and Bitbucket — flagging bugs, security issues, and…
TerraVision
MCP · CLIGenerates official-style AWS, Azure, and Google Cloud architecture diagrams from plain-language descriptions or…
HOL Guard
CLIBlocks risky AI coding agent actions at runtime on your machine — shell commands, secret access, MCP servers, plugins…