Serveur MCP LoopOver
Commit 3 nov. 2026Automatise l'intégralité du cycle de vie du développement en fournissant des agents autonomes pour l'écriture, la revue et la fusion de code sur les dépôts GitHub.
Aussi connu sous JSONbored/loopover
- Étoiles
- 22
- Outils
- —
- Téléchargements, 30 jours
- —
- Dernière version
- —
- Dernier commit
- 3 nov. 2026
- Licence
- AGPL-3.0
Qu'est-ce que LoopOver MCP ?
LoopOver est un serveur MCP. Automatise l'intégralité du cycle de vie du développement en fournissant des agents autonomes pour l'écriture, la revue et la fusion de code sur les dépôts GitHub.
Résumé généré à partir du README du projet
À propos du MCP server LoopOver
LoopOver permet aux mainteneurs et aux contributeurs d'automatiser l'intégralité du cycle de vie du développement, de l'écriture et la revue jusqu'à la fusion du code sur GitHub. Les mainteneurs peuvent auto-héberger un agent de revue autonome qui gère les files d'attente de pull requests en ancrant les revues IA sur le statut final de la CI, le contenu complet des fichiers et le RAG de la base de code. Cet agent peut bloquer, approuver ou fusionner des modifications tout en respectant des contrôles spécifiques tels que des kill-switches et des modes dry-run.
Les contributeurs utilisent le package @loopover/mcp pour intégrer les verdicts de blocage prédictifs, les vérifications de prévol (preflight) de branche et la détection de doublons dans leurs propres outils IA. Le système inclut un runtime de minage qui s'exécute de manière autonome sur plusieurs dépôts en fonction d'une spécification d'objectif. Pour les utilisateurs de Bittensor, le moteur fournit des aperçus de score et une économie de registre. L'installation nécessite une installation CLI locale via npm et peut être intégrée dans des clients comme Claude ou Cursor via une configuration stdio.
Ce que vous pouvez faire avec
- 1Minage autonome de dépôtsLe runtime de minage peut s'exécuter sans surveillance sur plusieurs dépôts pour identifier des opportunités de développement.
- 2Sécurité et scan de secretsLe système peut scanner automatiquement les diffs de code pour détecter les fuites de secrets et neutraliser les tentatives d'injection de prompt.
Extrait du README du projet. Chaque cas d'utilisation est vérifié par rapport à une citation du document.
Vérifications automatisées
Exécuté le 14 nov. 2026Rapport complet →Pas encore vérifié. Un serveur nécessite un score de 80, aucune faille sérieuse et suffisamment de données pour que nous puissions effectuer les vérifications. Fonctionnement des vérifications · Ce qu'il faut corriger pour gagner des points
- Dépôt source lié et accessiblejsonbored/loopover is public and reachablegithub.com/jsonbored/loopover ↗Réussi
- Le nom du package correspond au dépôt sourceNon vérifié
- Provenance du build (attestation Sigstore)Non vérifié
- Licence open source (OSI)AGPL-3.0spdx.org/licenses/AGPL-3.0.html ↗Réussi
- Commit ou version publiée au cours de l'année écouléeLast commit or release 2026-11-03github.com/jsonbored/loopover ↗Réussi
- OpenSSF ScorecardNon vérifié
- Nom du package non proche d'un package populaireNon vérifié
- Aucun avis critique dans le package ou ses dépendancesNon vérifié
- Aucune instruction cachée destinée au modèle0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersRéussi
- Les outils destructifs sont étiquetésNon vérifié
- Le point de terminaison distant répond à la poignée de main MCPNon vérifié
README
Voir sur GitHubLoopOver
Formerly Gittensory.
The loop never sleeps. You finally can.
LoopOver automates the entire development lifecycle — write, review, merge, learn — end to end, with agents on both sides and a published safety record. The good kind of infinite loop, on any GitHub repo.
- For maintainers (self-hosted): an autonomous review agent works the PR queue end-to-end — AI review grounded in finished CI status, full post-change file content, and codebase RAG — then gates, approves, requests changes, merges, or closes on its own, governed by dry-run / pause / freeze / kill-switch controls.
- For contributors: the
@loopover/mcpcopilot brings predicted gate verdicts, branch preflight, duplicate detection, and cross-repo opportunity discovery into your own AI harness; the autonomous miner runtime (@loopover/miner) runs unattended across a fleet of repos, respecting each target repo's.loopover-miner.ymlgoal spec. - With proof: merge/close decisions are outcome-confirmed (merged / reopened / reverted), published with coverage and confidence intervals on the live fairness report, and backed by a certified close-precision guarantee that self-tightens as data grows. The backtest corpus behind the published numbers is checksummed and replayable by anyone.
- Gittensor-native intelligence built in: for Bittensor SN74 miners the same engine adds scoreability previews, registry economics, and the cross-repo duplicate graph — while keeping wallet, hotkey, and raw trust-score context out of public GitHub output.
Self-hosting the whole stack is the path available today — and it doubles as the trust story: audit the algorithm, run it on your own infra, replay the published numbers yourself. A hosted plane is in open development on the public milestones (ORB Cloud Readiness, Rent-a-Loop): rentable, metered loops you point at a repo — and, further out, at nothing more than an idea.
It is the single converged home of the native review system; the legacy separate reviewbot repo/runtime is not part of the active architecture described here.
It is not a Gittensor explorer, public leaderboard, reward-farming bot, or wallet dashboard.
Privacy Boundary
LoopOver keeps sensitive context private by default.
- MCP local branch analysis sends metadata, not source contents.
- Public GitHub comments never include wallet, hotkey, reward estimate, private ranking, raw trust score, or reviewability context.
- Optional AI summaries receive compact deterministic signal bundles, not raw source code.
- Maintainer packets and scoring context stay on protected API/MCP surfaces.
- MCP tool-call telemetry is an allowlist of four fields, and is anonymous — see below.
MCP telemetry
A recorded MCP tool call carries exactly four fields, and there is no fifth: the tool name, which surface
dispatched it (remote or local), whether it succeeded, and a coarse duration in milliseconds. The
allowlist is the event shape itself rather than a filter over a richer one, so there is nowhere to put anything
else.
Never tracked: tool arguments, source contents, repository or issue text, and wallet, hotkey, coldkey, reward, private ranking, or raw trust-score data. Events also carry no per-actor identity — every event shares one constant, anonymous handle, so there is no per-user profile to accumulate — and IP-based geo enrichment is disabled.
Each surface is controlled separately, and they differ in who holds the switch:
- Local CLI (
@loopover/mcp) — opt-in, OFF by default. Nothing is recorded unless you have runloopover-mcp telemetry enable; an API key alone is not enough.loopover-mcp telemetry statusreports the current state, anddisableremoves the flag entirely. - Hosted / remote MCP — a deployment setting, not a per-user one: it records when the operator configures
POSTHOG_API_KEY, which the hosted service does. A self-hosted deployment that leaves it unset records nothing.
See Privacy and security for the full boundary.
Review Capabilities
LoopOver CI and LoopOver review score, gate, and comment on pull requests. The review algorithm is open-source; operators tune behavior through per-repo settings and the LOOPOVER_REVIEW_* feature flags, every one of which ships OFF and is opt-in per repo.
- Safety scan — defangs untrusted PR title/body/diff (prompt-injection neutralization) before the AI reviewer reads them, and scans the diff for leaked secrets, surfacing a
secret_leakblocker. - CI + full-file grounding — grounds the AI reviewer with the PR's finished CI status and the full post-change content of the changed files, so claims are verified against reality instead of predicted.
- Codebase RAG — retrieval-augmented context that queries the codebase vector index for related callers, modules, and conventions and appends them to the reviewer prompt (additive only; inert until an index exists).
- Submitter-reputation gating — an internal-only spend control that downgrades new / burst / low-reputation submitters to a deterministic-only review, never surfaced on any public comment, label, or check.
- Unified review comment — renders the public PR feedback as one in-place comment instead of multiple panels. With
.loopover.yml'sreview.changed_files_summaryalso on (off by default), it gains a deterministic, no-AI "Changed files" collapsible: one row per file category (source/test/docs/config/generated), with file counts and +/- totals. - Per-repo activation — capabilities roll forward (and back) one flag and one repo at a time via the
LOOPOVER_REVIEW_REPOSallowlist.
Check-run and comment surfaces, disambiguated (a common point of confusion — these are three independent, separately-configured things, not layers of the same feature):
LoopOver Orb Review Agent(gate.*/settings.reviewCheckMode, off by default) — the authoritative GitHub Check Run carrying the gate's pass/fail verdict. This is the one worth making a required status check.LoopOver Context(settings.checkRunMode/settings.checkRunDetailLevel, off by default) — a separate, purely advisory Check Run. At its defaultcheckRunDetailLevel: minimalit publishes no findings at all; even atstandard/deepit only re-renders content already shown elsewhere. Never make this one required.- Inline review comments (
LOOPOVER_REVIEW_INLINE_COMMENTS+.loopover.yml'sreview.inline_comments, off by both by default) — real, reply-able line-anchored PR review comment threads (CodeRabbit-style). This is the ONLY one of the three that posts an interactive per-line thread; the two check runs above never do. With.loopover.yml'sreview.suggestionsalso on, a precise line-anchored fix is additionally rendered as a one-click, committable GitHub suggested-change block. Withreview.finding_categoriesalso on (off by default), each finding is additionally tagged with a category — security/correctness/performance/maintainability/tests/style — in both the inline comment label and the unified comment's "Finding categories" collapsible; a deterministic path/keyword fallback covers whatever the model omits.
See Tuning your reviews for the full flag, setting, and .loopover.yml reference.
Start Here
| Audience | Start | Useful next links |
|---|---|---|
| Miners and contributors | Quickstart | MCP client setup, Miner workflow, Scoreability |
| Maintainers | GitHub App | Maintainer workflow, Self-host reviews, Privacy and security |
| Repo owners and operators | Beta onboarding | Upstream drift, Troubleshooting, Roadmap |
| Agent authors | Agents | API browser, MCP client setup |
Surfaces
| Surface | Link |
|---|---|
| Website | loopover.ai |
| Docs | loopover.ai/docs |
| MCP package | @loopover/mcp |
| Engine package | @loopover/engine — shared deterministic logic for the review stack and miner |
| Miner package | @loopover/miner — local foundation CLI for the autonomous miner runtime |
| API | API browser and OpenAPI JSON |
| GitHub App | Setup docs — self-hosting is the only currently available path |
MCP Install
npm install -g @loopover/mcp@latest
loopover-mcp login
loopover-mcp doctor
loopover-mcp --stdio
Print editor/client snippets:
loopover-mcp init-client --print codex
loopover-mcp init-client --print claude
loopover-mcp init-client --print cursor
For full editor setup and stdio configuration, use MCP client setup.
Run base-agent commands:
loopover-mcp agent plan --login jsonbored --json
loopover-mcp agent packet --login jsonbored --json
loopover-mcp agent status <run-id> --json
Local Development
npm install
npm run cf-typegen
npm run db:migrate:local
npm run dev
npm run test:ci
Release-only validation:
npm run test:release
npm run test:release:mcp
Frontend:
npm run ui:dev
npm run ui:build
Gittensor Contributor Impact
Refreshed weekly by .github/workflows/gittensor-impact.yml.
Project Links
| Need | Link |
|---|---|
| Contributing | CONTRIBUTING.md |
| Security | SECURITY.md |
| Support | SUPPORT.md |
| Changelog | CHANGELOG.md |
Normal feature/fix PRs do not edit changelogs. Changelogs are release-prep artifacts.
Questions sur LoopOver MCP
Comment LoopOver gère-t-il la confidentialité et les données sensibles ?
Il préserve la confidentialité du contexte sensible par défaut, en n'envoyant que des métadonnées pour l'analyse des branches locales et en garantissant que les commentaires publics sur GitHub n'incluent jamais de données privées relatives aux portefeuilles ou aux classements.
Puis-je auto-héberger LoopOver ?
Oui, l'auto-hébergement de l'ensemble de la stack est actuellement la méthode disponible, ce qui vous permet d'auditer l'algorithme et de l'exécuter sur votre propre infrastructure.
Quelles sont les capacités de revue de l'agent ?
L'agent propose des scans de sécurité contre l'injection de prompt et les secrets, une intégration CI et un ancrage sur le fichier complet, du RAG sur la base de code, ainsi que des commentaires de revue unifiés.