Connect your coding agent (MCP server)

Your standards go in. What is actually blocking delivery comes back out.

One connection, and your agent stops guessing

Your coding agent writes code well and knows nothing about your team. It cannot tell you that a 900-line change will stall in review here, that the repo you are editing feeds two others, or that four of your PRs merged last week and never shipped. Coderbuds runs an MCP server that hands your agent all of it — and lets it act, so the work moves instead of just being measured.

What is MCP?

The Model Context Protocol is an open standard for connecting AI agents to outside data and tools. It is the reason this works in whichever agent you already run, rather than being one more vendor-specific rules file to maintain — see how this compares to a CLAUDE.md file.

Compatible with Codex, Claude Code, Claude Desktop, Cursor, Windsurf, and any other MCP-compatible client. Your code never leaves your repo — Coderbuds serves facts about how your team ships, and never receives your source.

Building a dashboard or a scheduled report instead of wiring up an agent? Use the REST API — plain JSON over HTTP, no MCP client needed.

Connect your coding agent

Two steps, about a minute: add the server URL, then click Authorize in the browser tab your client opens. There is no token to mint, copy, or paste, and every member of your team connects the same way with their own Coderbuds account.

Step 1 — add the server

Claude Code

claude mcp add --scope user --transport http coderbuds https://coderbuds.com/mcp/insights

Paste straight into a terminal. --scope user makes it available in every project — see managing the connection if you want it scoped differently.

OpenAI Codex

codex mcp add coderbuds --url https://coderbuds.com/mcp/insights

This adds Coderbuds to your Codex configuration without storing an API token. In step 2, run codex mcp login coderbuds to authorize it in your browser.

Cursor

Add this to ~/.cursor/mcp.json (global) or .cursor/mcp.json in the repo, then save:

{
  "mcpServers": {
    "coderbuds": {
      "type": "http",
      "url": "https://coderbuds.com/mcp/insights"
    }
  }
}

Everyone on the team at once

Commit that same block as .mcp.json in the repo root. Nothing secret is committed — each person authorizes once in their own browser the first time their client connects.

Step 2 — authorize in the browser

Your client opens a Coderbuds tab the first time it connects. Sign in if you are not already, click Authorize, and the tab hands control back to your editor. That grant is per person and per machine, so it happens once here and never again on this laptop.

If no tab opens, trigger it by hand: run codex mcp login coderbuds in Codex; run /mcp in a Claude Code session and choose Authenticate; or in Cursor open Settings → MCP and use the login control on that server. Leave your editor running while you authorize — it is listening on a local port for the redirect.

Step 3 — check it worked

Ask your agent a question only Coderbuds can answer:

"Using Coderbuds, what pull requests are waiting on review right now?"

A real answer means you are connected. If the tools are missing entirely, the client has not authorized yet — go back to step 2.

If you are on more than one team

Coderbuds never guesses which team a call is about. On one team, there is nothing to do. On several, either is fine:

  • Per call (no reconnect): pass the repository you are working in, as owner/name. Coderbuds maps it to the owning team. Your agent can read that from git remote get-url origin.
  • For the whole session: pin the team in the URL — https://coderbuds.com/mcp/insights?team=Your%20Team. Changing this counts as a different server, so your client will ask you to authorize once more.

Untracked repos — an internal tool, a scratch repo — will not resolve to a team on their own, so pin the team in the URL for those.

Managing the connection

Codex stores this server in ~/.codex/config.toml, shared by Codex CLI, the desktop app, and the IDE extension on this computer. Use codex mcp list to check it and codex mcp remove coderbuds to remove it.

Claude Code stores an MCP server in one of three scopes. Which one you used decides where the config lives, who else gets it, and how you remove it later. If you omit --scope you get local — not project, and not user.

Scope Where it is stored Who gets it
local (default) Your own Claude Code config Just you, in this project
project .mcp.json in the repo root — a tracked file Everyone who clones the repo
user Your own Claude Code config Just you, in every project

Removing uses the same scope you added with:

claude mcp list                        # what is configured now
claude mcp remove coderbuds --scope user

If you added at project scope, removing edits a file that is checked into git. claude mcp remove coderbuds will delete the entry from .mcp.json, which shows up as an uncommitted change and takes the server away from your whole team if you commit it. To put it back, restore the file — git checkout .mcp.json — rather than re-adding by hand.

After adding or removing, restart Claude Code — the server list is read once at session start, so claude mcp list inside a running session can report a server that is no longer configured on disk.

If something goes wrong

Every failure below names its own fix on screen too — this table is just the short version.

What you see What to do
The server connects but no Coderbuds tools appear Not authorized yet. Run /mcp → Authenticate in Claude Code, or the login control in Cursor.
"This connection request is missing something" Your session expired part-way through. Nothing is broken — start the connection again from your editor now that you are signed in.
"Coderbuds no longer recognises…" Your client cached a connection that has been rotated. Remove the server and add it back — claude mcp remove coderbuds, then step 1.
"This authorization page went stale" The Authorize screen sat open too long. Start again and click Authorize within a few minutes.
Browser says it can't connect to localhost:<port> after you authorize Your editor stopped listening for the redirect. Make sure it is still running, then start the connection again from inside it.
A tool replies that you are not on a team Your account has no team yet. Create one or get invited, then retry — no reconnection needed.
A tool replies that you are on several teams Pass the repository as owner/name on the call, or pin ?team= in the URL.
A 401 mentioning a rejected bearer token Headless path only. The token was revoked, expired, or mistyped — mint a replacement below.

Fallback: headless environments (CI, servers)

Most people should not use this. Browser authorization above is the default and needs no token. Reach for a bearer token only where a browser cannot open — CI jobs, remote build boxes. Pass --header "Authorization: Bearer <your-token>" to the command in step 1, or an equivalent headers block in .mcp.json with the token supplied via an environment variable. A token is tied to you personally, so never commit one or share it with the team.

Log in or create an account to generate a token here.

Once connected, load the Work Our Way prompt at the start of a session to prime your agent with this team's box — the active Coderbuds Standards, observed shipping norms, and review-queue state — before it writes a line of code.

Things to ask it

Ask in plain language — your agent picks the tool. The first two are the ones worth building a habit around.

"Before I open this PR — does this change fit how we ship?"

The habit that saves a review round. Do it while the diff is still easy to split.

"Load our team context before you start — how do these repos relate?"

Opens the session knowing the org map instead of inferring it from the files you happened to open.

"What's blocking my pull requests right now?"

Your open PRs, what each is waiting on, and reviews you could unblock for someone else.

"What have we merged that hasn't shipped to production yet?"

Deploy lag, grouped by repo with wait times.

"Ask the team for a review on #482."

Posts to Slack picking the next reviewer in rotation, and comments on the PR.

"Why is PR #1186 marked poor?"

Every penalty with its point cost, rather than a guess at the criteria.

"Is this repo ready for agents to work in?"

The gaps worth closing first — deploy automation, review coverage, stale rules files.

What your agent can do once connected

Twenty-two tools, grouped by where they land in the delivery loop. You never call these by hand — ask in plain language and your agent picks. Everything is scoped to your team, and the acting tools are the same ones the Coderbuds agent uses in Slack, under the same limits.

There is also one prompt, Work Our Way, which your client lists separately from tools. Load it at the start of a session to prime the agent with this team's box in a single step.

1

Before it writes code — learn the box

At session start, or whenever work might span more than one repo.

get-team-context-tool
The org map: every repo with activity level, top contributors, deploy setup and an agent-readiness verdict; how repos relate; which are archived; and the team's confirmed conventions. Pass the repo you are in for a focused map.
get-repo-readiness-tool
Is this repo ready for agents? Per-repo pass/fail checks — deploy automation, PR size discipline, review coverage, agent guidance, CI, tests, whether the fit check is wired in, and whether the rules file still references archived repos.
link-repositories-tool
Teach the map. Record that two repos depend on, document, or ship with each other — or mark a noisy derived link unrelated. Taught once, every teammate's agent inherits it.
2

Before you open a PR — pre-flight

After the diff exists and before it becomes a pull request.

assess-change-fit-tool
Does this change fit how this team ships? A verdict against the team's own merged-PR norms, expected merge time for that size, and current queue pressure. Pass test and moved lines and the verdict judges the reviewable surface, not the raw count.
record-change-fit-decision-tool
What you did about the verdict — proceeded, split, trimmed, or abandoned — and why. Overriding the standard is allowed; recording it is how a threshold that fires too often gets noticed and moved.
explain-pull-request-score-tool
Why one specific PR got the score and label it got — the recorded score, every structural penalty with its point cost, the AI adjustment, and what the score does not measure.
3

What is blocking the loop right now

Standup prep, or any time you are about to ask a human the same question.

get-my-status-tool
Your cross-repo standup in one call: your open PRs and what blocks each, reviews you could unblock oldest-first, your merged-but-undeployed work, and what you shipped recently.
get-open-pull-requests-tool
Open PRs by author with what is blocking each — awaiting review, changes requested, ready to merge, draft, or failing checks.
get-undeployed-pull-requests-tool
Merged but not yet in production, grouped by repo with wait times. The deploy-lag signal.
get-merged-pull-requests-tool
What merged over a window, split human vs bot, broken down per repo and per author.
get-deployments-by-person-tool
Who shipped to production and how often, with failed deploys surfaced per person.
get-person-activity-tool
What one named person has been doing over a recent window — pull requests opened, reviews given and deploys, week by week, read together so a low PR count is never the whole story.
4

Act on it — close the loop

Where most MCP servers stop at reporting.

request-pull-request-review-tool
Ask for a review: Coderbuds posts to the team Slack channel picking the next reviewer in rotation (or one you name) and comments on the PR in its own voice.
deploy-repository-tool
Trigger a production deploy for a repo with a deploy hook or Actions workflow configured.
set-agent-posture-tool
How loudly the Coderbuds agent speaks, and whether it acts at all — off, quiet, public, or direct. Team admins only.
5

The measurement underneath

For retros, reviews, and answering "did that actually help".

get-team-overview-tool
One SPACE-framework snapshot combining activity, DORA, collaboration and efficiency.
get-dora-metrics-tool
Deployment frequency, lead time, change failure rate, mean time to recovery.
get-pull-request-metrics-tool
PR counts, code reviews, quality scores, size distribution.
get-weekly-summary-tool
Changelog summaries with feature highlights and team achievements.
get-my-insights-tool
Active team and personal insights, filterable by category or unseen only.
get-team-insight-summary-tool
Aggregate counts per category, unseen count, and personal insights.
mark-insight-seen-tool
Mark an insight reviewed so it stops resurfacing.
get-agent-activity-tool
What the autonomous Coderbuds agent has done, its stats, and anything waiting on approval.
get-mcp-adoption-tool
Who on the team is actually using this — per member and per tool, plus members who have never connected.

Endpoint

MCP Server URL Streamable HTTP
https://coderbuds.com/mcp/insights

Authentication is OAuth 2.1 — your client discovers it automatically and opens a browser to authorize. Bearer tokens are accepted as a fallback for headless environments.

Access renews itself: your client holds a token that lasts 30 days and refreshes it in the background, so coming back after a few weeks away just works. Only after a full year of no use does it ask you to authorize again. You can revoke a machine's access at any time from API Tokens.

Other clients

Claude Desktop, Windsurf, and other MCP-compatible clients all accept the same shape as Claude Code and Cursor above — a Streamable HTTP server. Add the URL and the client walks you through the browser authorization on first connect:

{
  "mcpServers": {
    "coderbuds": {
      "type": "http",
      "url": "https://coderbuds.com/mcp/insights"
    }
  }
}
Transport Streamable HTTP
URL https://coderbuds.com/mcp/insights
Auth OAuth 2.1 (auto-discovered) or Authorization: Bearer <your-token>

Data & Privacy

Everything is scoped to your authenticated user and the teams you belong to. Personal insights are visible only to the person they belong to. Your source code is never sent to Coderbuds — the tools above answer questions about how your team ships, from data Coderbuds already holds.

The tools that act are deliberately narrow: a deploy only works where your team has already configured a deploy hook or workflow, changing the agent's posture is restricted to team admins, and a review request goes to your own Slack channel. Revoke a machine's access at any time from API Tokens. See our Security documentation for more.