LoopOver MCP sunucusu
Commit 3 Kas 2026GitHub depolarında kod yazma, inceleme ve birleştirme işlemleri için otonom ajanlar sağlayarak tüm geliştirme yaşam döngüsünü otomatikleştirir.
Ayrıca bilinen adı JSONbored/loopover
- Yıldızlar
- 22
- Araçlar
- —
- İndirmeler, 30 gün
- —
- En son sürüm
- —
- Son commit
- 3 Kas 2026
- Lisans
- AGPL-3.0
LoopOver MCP nedir?
LoopOver bir MCP sunucusudur. GitHub depolarında kod yazma, inceleme ve birleştirme işlemleri için otonom ajanlar sağlayarak tüm geliştirme yaşam döngüsünü otomatikleştirir.
Özet, projenin README dosyasından oluşturuldu
LoopOver MCP sunucusu hakkında
LoopOver, bakım yöneticileri ve katkıda bulunanlar için GitHub üzerinde kod yazma ve incelemeden birleştirmeye kadar tüm geliştirme yaşam döngüsünü otomatikleştirmeyi sağlar. Bakım yöneticileri; yapay zeka incelemelerini tamamlanmış CI durumu, tam dosya içeriği ve codebase RAG ile temellendiren, pull request kuyruklarını yöneten otonom bir inceleme ajanı barındırabilir. Bu ajan; kill-switch ve dry-run gibi belirli kontrolleri göz önünde bulundurarak değişiklikleri engelleyebilir, onaylayabilir veya birleştirebilir.
Katkıda bulunanlar, tahmin edilen geçiş kararlarını, dal ön uçuş kontrollerini ve yinelenen tespitini kendi yapay zeka araçlarına dahil etmek için @loopover/mcp paketini kullanırlar. Sistem, bir hedef spesifikasyonuna göre depolar arasında gözetimsiz çalışan bir miner runtime içerir. Bittensor kullananlar için motor, puanlanabilir önizlemeler ve kayıt defteri ekonomisi sağlar. Kurulum için npm aracılığıyla yerel bir CLI kurulumu gereklidir ve stdio yapılandırması kullanılarak Claude veya Cursor gibi istemcilere entegre edilebilir.
Neler yapabilirsiniz
- 1Otonom Depo MadenciliğiMiner runtime, geliştirme fırsatlarını bulmak için birden fazla depo üzerinde gözetimsiz olarak çalışabilir.
- 2Güvenlik ve Sır TaramaSistem, sızdırılan sırları tespit etmek için kod farklarını (diffs) otomatik olarak tarayabilir ve prompt injection girişimlerini etkisiz hale getirebilir.
Projenin README dosyasından alınmıştır. Her kullanım durumu, oradaki bir alıntı ile kontrol edilir.
Otomatik kontroller
Çalıştırıldı 14 Kas 2026Tam rapor →Henüz doğrulanmadı. Bir sunucunun 80 puana, ciddi bir bulgu olmamasına ve kontrol edebilmemiz için yeterli veriye ihtiyacı vardır. Kontroller nasıl çalışır · Daha fazla puan için nelerin düzeltileceği
- Kaynak deposu bağlantılı ve erişilebilirjsonbored/loopover is public and reachablegithub.com/jsonbored/loopover ↗Geçti
- Paket, bu depoyu kaynağı olarak gösteriyorKontrol edilmedi
- Derleme kökeni (Sigstore onayı)Kontrol edilmedi
- Açık kaynak lisansı (OSI)AGPL-3.0spdx.org/licenses/AGPL-3.0.html ↗Geçti
- Son bir yıl içinde commit veya sürüm mevcutLast commit or release 2026-11-03github.com/jsonbored/loopover ↗Geçti
- OpenSSF ScorecardKontrol edilmedi
- Paket adı popüler bir pakete yakın değilKontrol edilmedi
- Pakette veya bağımlılıklarında kritik uyarı yokKontrol edilmedi
- Modele yönelik gizli talimat yok0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersGeçti
- Yıkıcı araçlar etiketlenmişKontrol edilmedi
- Uzak uç nokta MCP el sıkışmasına yanıt veriyorKontrol edilmedi
LoopOver
Formerly Gittensory.
The loop never sleeps. You finally can.
LoopOver automates the entire development lifecycle — write, review, merge, learn — end to end, with agents on both sides and a published safety record. The good kind of infinite loop, on any GitHub repo.
- For maintainers (self-hosted): an autonomous review agent works the PR queue end-to-end — AI review grounded in finished CI status, full post-change file content, and codebase RAG — then gates, approves, requests changes, merges, or closes on its own, governed by dry-run / pause / freeze / kill-switch controls.
- For contributors: the
@loopover/mcpcopilot brings predicted gate verdicts, branch preflight, duplicate detection, and cross-repo opportunity discovery into your own AI harness; the autonomous miner runtime (@loopover/miner) runs unattended across a fleet of repos, respecting each target repo's.loopover-miner.ymlgoal spec. - With proof: merge/close decisions are outcome-confirmed (merged / reopened / reverted), published with coverage and confidence intervals on the live fairness report, and backed by a certified close-precision guarantee that self-tightens as data grows. The backtest corpus behind the published numbers is checksummed and replayable by anyone.
- Gittensor-native intelligence built in: for Bittensor SN74 miners the same engine adds scoreability previews, registry economics, and the cross-repo duplicate graph — while keeping wallet, hotkey, and raw trust-score context out of public GitHub output.
Self-hosting the whole stack is the path available today — and it doubles as the trust story: audit the algorithm, run it on your own infra, replay the published numbers yourself. A hosted plane is in open development on the public milestones (ORB Cloud Readiness, Rent-a-Loop): rentable, metered loops you point at a repo — and, further out, at nothing more than an idea.
It is the single converged home of the native review system; the legacy separate reviewbot repo/runtime is not part of the active architecture described here.
It is not a Gittensor explorer, public leaderboard, reward-farming bot, or wallet dashboard.
Privacy Boundary
LoopOver keeps sensitive context private by default.
- MCP local branch analysis sends metadata, not source contents.
- Public GitHub comments never include wallet, hotkey, reward estimate, private ranking, raw trust score, or reviewability context.
- Optional AI summaries receive compact deterministic signal bundles, not raw source code.
- Maintainer packets and scoring context stay on protected API/MCP surfaces.
- MCP tool-call telemetry is an allowlist of four fields, and is anonymous — see below.
MCP telemetry
A recorded MCP tool call carries exactly four fields, and there is no fifth: the tool name, which surface
dispatched it (remote or local), whether it succeeded, and a coarse duration in milliseconds. The
allowlist is the event shape itself rather than a filter over a richer one, so there is nowhere to put anything
else.
Never tracked: tool arguments, source contents, repository or issue text, and wallet, hotkey, coldkey, reward, private ranking, or raw trust-score data. Events also carry no per-actor identity — every event shares one constant, anonymous handle, so there is no per-user profile to accumulate — and IP-based geo enrichment is disabled.
Each surface is controlled separately, and they differ in who holds the switch:
- Local CLI (
@loopover/mcp) — opt-in, OFF by default. Nothing is recorded unless you have runloopover-mcp telemetry enable; an API key alone is not enough.loopover-mcp telemetry statusreports the current state, anddisableremoves the flag entirely. - Hosted / remote MCP — a deployment setting, not a per-user one: it records when the operator configures
POSTHOG_API_KEY, which the hosted service does. A self-hosted deployment that leaves it unset records nothing.
See Privacy and security for the full boundary.
Review Capabilities
LoopOver CI and LoopOver review score, gate, and comment on pull requests. The review algorithm is open-source; operators tune behavior through per-repo settings and the LOOPOVER_REVIEW_* feature flags, every one of which ships OFF and is opt-in per repo.
- Safety scan — defangs untrusted PR title/body/diff (prompt-injection neutralization) before the AI reviewer reads them, and scans the diff for leaked secrets, surfacing a
secret_leakblocker. - CI + full-file grounding — grounds the AI reviewer with the PR's finished CI status and the full post-change content of the changed files, so claims are verified against reality instead of predicted.
- Codebase RAG — retrieval-augmented context that queries the codebase vector index for related callers, modules, and conventions and appends them to the reviewer prompt (additive only; inert until an index exists).
- Submitter-reputation gating — an internal-only spend control that downgrades new / burst / low-reputation submitters to a deterministic-only review, never surfaced on any public comment, label, or check.
- Unified review comment — renders the public PR feedback as one in-place comment instead of multiple panels. With
.loopover.yml'sreview.changed_files_summaryalso on (off by default), it gains a deterministic, no-AI "Changed files" collapsible: one row per file category (source/test/docs/config/generated), with file counts and +/- totals. - Per-repo activation — capabilities roll forward (and back) one flag and one repo at a time via the
LOOPOVER_REVIEW_REPOSallowlist.
Check-run and comment surfaces, disambiguated (a common point of confusion — these are three independent, separately-configured things, not layers of the same feature):
LoopOver Orb Review Agent(gate.*/settings.reviewCheckMode, off by default) — the authoritative GitHub Check Run carrying the gate's pass/fail verdict. This is the one worth making a required status check.LoopOver Context(settings.checkRunMode/settings.checkRunDetailLevel, off by default) — a separate, purely advisory Check Run. At its defaultcheckRunDetailLevel: minimalit publishes no findings at all; even atstandard/deepit only re-renders content already shown elsewhere. Never make this one required.- Inline review comments (
LOOPOVER_REVIEW_INLINE_COMMENTS+.loopover.yml'sreview.inline_comments, off by both by default) — real, reply-able line-anchored PR review comment threads (CodeRabbit-style). This is the ONLY one of the three that posts an interactive per-line thread; the two check runs above never do. With.loopover.yml'sreview.suggestionsalso on, a precise line-anchored fix is additionally rendered as a one-click, committable GitHub suggested-change block. Withreview.finding_categoriesalso on (off by default), each finding is additionally tagged with a category — security/correctness/performance/maintainability/tests/style — in both the inline comment label and the unified comment's "Finding categories" collapsible; a deterministic path/keyword fallback covers whatever the model omits.
See Tuning your reviews for the full flag, setting, and .loopover.yml reference.
Start Here
| Audience | Start | Useful next links |
|---|---|---|
| Miners and contributors | Quickstart | MCP client setup, Miner workflow, Scoreability |
| Maintainers | GitHub App | Maintainer workflow, Self-host reviews, Privacy and security |
| Repo owners and operators | Beta onboarding | Upstream drift, Troubleshooting, Roadmap |
| Agent authors | Agents | API browser, MCP client setup |
Surfaces
| Surface | Link |
|---|---|
| Website | loopover.ai |
| Docs | loopover.ai/docs |
| MCP package | @loopover/mcp |
| Engine package | @loopover/engine — shared deterministic logic for the review stack and miner |
| Miner package | @loopover/miner — local foundation CLI for the autonomous miner runtime |
| API | API browser and OpenAPI JSON |
| GitHub App | Setup docs — self-hosting is the only currently available path |
MCP Install
npm install -g @loopover/mcp@latest
loopover-mcp login
loopover-mcp doctor
loopover-mcp --stdio
Print editor/client snippets:
loopover-mcp init-client --print codex
loopover-mcp init-client --print claude
loopover-mcp init-client --print cursor
For full editor setup and stdio configuration, use MCP client setup.
Run base-agent commands:
loopover-mcp agent plan --login jsonbored --json
loopover-mcp agent packet --login jsonbored --json
loopover-mcp agent status <run-id> --json
Local Development
npm install
npm run cf-typegen
npm run db:migrate:local
npm run dev
npm run test:ci
Release-only validation:
npm run test:release
npm run test:release:mcp
Frontend:
npm run ui:dev
npm run ui:build
Gittensor Contributor Impact
Refreshed weekly by .github/workflows/gittensor-impact.yml.
Project Links
| Need | Link |
|---|---|
| Contributing | CONTRIBUTING.md |
| Security | SECURITY.md |
| Support | SUPPORT.md |
| Changelog | CHANGELOG.md |
Normal feature/fix PRs do not edit changelogs. Changelogs are release-prep artifacts.
LoopOver MCP soruları
LoopOver gizliliği ve hassas verileri nasıl yönetiyor?
Hassas bağlamı varsayılan olarak gizli tutar; yerel dal analizi için yalnızca meta verileri gönderir ve kamuya açık GitHub yorumlarının hiçbir zaman özel cüzdan veya sıralama verilerini içermemesini sağlar.
LoopOver'ı kendi sunucumda barındırabilir miyim?
Evet, tüm yığını kendi sunucunuzda barındırmak şu an için mevcut olan yöntemdir; bu sayede algoritmayı denetleyebilir ve kendi altyapınızda çalıştırabilirsiniz.
Ajanın inceleme yetenekleri nelerdir?
Ajan; prompt injection ve sırlar için güvenlik taramaları, CI ve tam dosya temellendirme, codebase RAG ve birleşik inceleme yorumları sunar.