One connection, and your agent stops guessing
Your coding agent writes code well and knows nothing about your team. It cannot tell you that a 900-line change will stall in review here, that the repo you are editing feeds two others, or that four of your PRs merged last week and never shipped. Coderbuds runs an MCP server that hands your agent all of it — and lets it act, so the work moves instead of just being measured.
Let your agent connect itself
Connecting is a config file and a browser click, so hand the whole thing over. This prompt connects your agent, writes the two rules into this repository's agent guidance, commits the connection to the repository so teammates are offered it, opens both as one pull request, and reports back what your team context says. The dashboard offers the same prompt with your team already filled in. Already connected? Skip it: ask your agent to set this repository up for Coderbuds, or in Claude Code run /mcp__coderbuds__set-up-repository.
Set this repository up for Coderbuds, end to end: connect the MCP server,
write our two rules into this repository's agent guidance and into my own
agent instructions, commit the connection so the rest of the team gets it,
then prove it works.
WHY THIS MATTERS
Coderbuds serves facts about how this team ships — our size and scope
standards, review turnaround, what is blocking the queue, what merged but
never reached production — along with tools to act on them. Connected, you
stop guessing at this team's norms, and you can check a change before it
becomes a pull request rather than after a reviewer has already looked.
1 — CONNECT THE CODERBUDS MCP SERVER
URL https://coderbuds.com/mcp/insights
Transport http
Auth OAuth. I sign in to Coderbuds in the browser and click
Authorize, once per person, per machine.
There is no token to mint or store, so nothing secret is ever
committed.
Use whichever fits the agent you are:
Claude Code claude plugin install coderbuds --marketplace coderbuds/claude-plugin
The Coderbuds plugin: the server, plus skills and hooks
that bring the two rules below into every repository.
In a session that is already running, I load it with
/reload-plugins. No browser tab opens by itself:
I sign in by running /mcp, choosing
plugin:coderbuds:coderbuds, and selecting
Authenticate. Once I have, the plugin's
/coderbuds:set-up-repository carries out the rest of
setup for the plugin, so stop after this step and
tell me to run it instead of following steps 2 to 5.
The server alone, without the plugin:
claude mcp add --scope user --transport http coderbuds https://coderbuds.com/mcp/insights
Omitting --scope gives `local`, not user or project.
Codex codex mcp add coderbuds --url https://coderbuds.com/mcp/insights
then: codex mcp login coderbuds
Cursor, or any other MCP client — write .cursor/mcp.json, or .mcp.json
in the repository root so everyone on the team gets the same
connection:
{
"mcpServers": {
"coderbuds": {
"type": "http",
"url": "https://coderbuds.com/mcp/insights"
}
}
}
Once it is added, tell me exactly how to sign in for the agent you are,
then wait until I say I have — everything below needs the connection.
2 — WRITE THE TWO MOMENTS INTO OUR AGENT GUIDANCE
Add a `## Coderbuds` section to every agent guidance file this repository
already has — CLAUDE.md, AGENTS.md, .cursor/rules/*, .github/copilot-instructions.md.
If there is none, create AGENTS.md. If the section already exists, update
it in place rather than adding a second one. Use this text:
## Coderbuds
Before opening a pull request, run `git diff --numstat <base>...` and
call the Coderbuds `assess-change-fit` tool with that output plus the
distinct outcomes a reviewer has to approve. Describe outcomes, not
layers: an API, a UI, a migration and their tests that deliver one
behaviour are one outcome, not four. If the verdict is not `fits`, trim
or split the change — or call `record-change-fit-decision` with a
one-line reason and carry on.
After opening the pull request, call `report-ai-usage` with its number,
the tool that wrote it, and `review_evidence`: what you saw a person do
before it went up — approved each edit, commented on the diff, changed
the code, or replied after the change was finished. List only what
happened in front of you. An empty list is the right answer for most
agent-opened pull requests, and a flattering one is worse than none.
Keep both attached to a moment the agent already passes through — "before
opening a pull request" — rather than describing what the tools do. That
difference is the whole reason one of these gets called and the other
does not.
3 — PUT THE SAME RULES IN MY OWN AGENT INSTRUCTIONS
This repository's guidance only reaches people working in it. So that my
agent follows the rules in every repository my team tracks, without a
pull request in each, add a `## Coderbuds` section to my user-level
instructions too, updating it in place if it is already there:
~/.claude/CLAUDE.md Claude Code. Create it if it is missing.
~/.codex/AGENTS.md Codex. Only if ~/.codex exists.
Cursor keeps user rules in its settings rather than in a file. If I use
Cursor, give me the section to paste into its Rules settings.
These files apply in every repository on this machine, including ones
that are not ours, so the section opens with its scope. Use this text:
## Coderbuds
Only in repositories whose `git remote get-url origin` is owned by an
organisation or account Coderbuds tracks for my team — `get-team-context`
lists the repositories. In any other repository, never call Coderbuds
and never send it a diff — and if a call says a repository is not
tracked, treat that one as outside this scope too.
Before opening a pull request, run `git diff --numstat <base>...` and
call the Coderbuds `assess-change-fit` tool with that output plus the
distinct outcomes a reviewer has to approve. Describe outcomes, not
layers: an API, a UI, a migration and their tests that deliver one
behaviour are one outcome, not four. If the verdict is not `fits`, trim
or split the change — or call `record-change-fit-decision` with a
one-line reason and carry on.
After opening the pull request, call `report-ai-usage` with its number,
the tool that wrote it, and `review_evidence`: what you saw a person do
before it went up — approved each edit, commented on the diff, changed
the code, or replied after the change was finished. List only what
happened in front of you. An empty list is the right answer for most
agent-opened pull requests, and a flattering one is worse than none.
Claude Code asks before writing anything under ~/.claude, whatever
permission mode it is in. Expect that prompt, and say what the edit is
for before you make it. If the write is declined or blocked, give me the
section and the file to paste it into — not a script to run — and carry
on with the rest.
4 — COMMIT THE CONNECTION FOR THE REST OF THE TEAM
So that nobody else has to do step one, add a `coderbuds` server to the
repository's own MCP config. Merge it into a file that already exists and
leave every other server in it alone.
.mcp.json Claude Code. Create it if it is missing.
.cursor/mcp.json Only if `git ls-files .cursor` lists anything.
.vscode/mcp.json Only if `git ls-files .vscode` lists anything.
A directory that exists only on this machine — gitignored, say — reaches
nobody else, so leave it alone.
In .mcp.json and .cursor/mcp.json:
{ "mcpServers": { "coderbuds": { "type": "http", "url": "https://coderbuds.com/mcp/insights" } } }
In .vscode/mcp.json:
{ "servers": { "coderbuds": { "type": "http", "url": "https://coderbuds.com/mcp/insights" } } }
Pin the URL to this repository's team by appending `?team=Team%20Name`, with
the team `get-team-context` reports for this repository, so every call from
here counts against that team, whichever teams a person is on.
Claude Code treats .mcp.json and the .vscode directory as protected paths and
asks me before writing either, whatever permission mode it is in. Expect
that prompt: say what the edit is for before you make it, and if it is
declined, give me the exact entry to add by hand rather than skipping it.
The URL holds no secret. Each person signs in with their own Coderbuds
account the first time they use it, so it is safe to commit.
Put this and the guidance on one new branch, cut from the up-to-date
default branch, and open one pull request, so the team reviews the setup
once. Afterwards, switch back to the branch I was on, so my checkout is
where I left it. In its description, tell teammates what
happens after it merges: the next time they run Claude Code here it asks
them to approve `coderbuds`, then `/mcp` and Authenticate signs them in.
Codex reads no repository config, so Codex users still run
`codex mcp add coderbuds --url https://coderbuds.com/mcp/insights` once.
5 — CHECK IT WORKS
Call `get-team-context` and summarise what it says about how this team
ships: size norms, review turnaround, what it expects of a change. Then
tell me anything in it that contradicts how this repository is currently
set up.
IF I AM ON MORE THAN ONE CODERBUDS TEAM
Coderbuds never guesses which team a call is about. Either pass the
repository as `owner/name` on each call — read it from
`git remote get-url origin` — or pin the team on the server URL as
`?team=Team%20Name`. A repository Coderbuds does not track will not resolve
to a team on its own, so pin it for those. Changing a pinned team counts as
a different server and has to be authorized again.
Paste it into Claude Code, Codex, Cursor, or whichever agent you run. The rest of this page is the same information, written for a person.
What is MCP?
The Model Context Protocol is an open standard for connecting AI agents to outside data and tools. It is the reason this works in whichever agent you already run, rather than being one more vendor-specific rules file to maintain — see how this compares to a CLAUDE.md file.
Compatible with Codex, Claude Code, Claude Desktop, Cursor, Windsurf, and any other MCP-compatible client. Your code never leaves your repo — Coderbuds serves facts about how your team ships, and never receives your source.
Building a dashboard or a scheduled report instead of wiring up an agent? Use the REST API — plain JSON over HTTP, no MCP client needed.
Connect your coding agent
Two steps, about a minute: connect your agent, then click Authorize in the browser tab it opens. There is no token to mint, copy, or paste, and every member of your team connects the same way with their own Coderbuds account. Claude Code gets a plugin; Codex, Cursor and every other MCP client connect to the server directly.
Step 1 — connect your agent
Claude Code — the Coderbuds plugin
claude plugin install coderbuds --marketplace coderbuds/claude-plugin
Paste straight into a terminal. The plugin is the server plus the two moments, in every repository: before you open a pull request it checks the change against how your team ships, and after, it reports how much an agent wrote. Its hooks add one line to Claude's context after git push and after a pull request opens, and send nothing anywhere. The source is on GitHub.
That command needs Claude Code v2.1.292 or later. On an older version, run /plugin marketplace add coderbuds/claude-plugin and then /plugin install coderbuds@coderbuds inside a session.
Claude Code — the server only
claude mcp add --scope user --transport http coderbuds https://coderbuds.com/mcp/insights
The tools without the plugin's skills and hooks. Use one or the other, not both, or Claude sees every tool twice. --scope user makes it available in every project — see managing the connection if you want it scoped differently.
OpenAI Codex
codex mcp add coderbuds --url https://coderbuds.com/mcp/insights
This adds Coderbuds to your Codex configuration without storing an API token. In step 2, run codex mcp login coderbuds to authorize it in your browser.
Cursor
Add this to ~/.cursor/mcp.json (global) or .cursor/mcp.json in the repo, then save:
{
"mcpServers": {
"coderbuds": {
"type": "http",
"url": "https://coderbuds.com/mcp/insights"
}
}
}
Any other MCP client
Add https://coderbuds.com/mcp/insights as a remote server over HTTP (streamable HTTP). It signs you in with OAuth, which the client discovers from the server, so leave any API key or header field empty.
Everyone on the team at once
Connecting one person at a time is the slow way. Nothing below commits or distributes a secret — the URL holds none, and each person still authorizes once with their own Coderbuds account.
Per person — every one of your team's repositories at once
The same setup also writes the two rules into your own agent instructions — ~/.claude/CLAUDE.md for Claude Code, ~/.codex/AGENTS.md for Codex — which your agent reads in every project. So one run covers every repository your team tracks, with no pull request in each. Those files apply on the whole machine, so the section opens by naming the organisations Coderbuds tracks for your team and tells the agent to leave every other repository alone. If an agent calls anyway from a repository Coderbuds does not track, the call is refused, the repository's name and diff are not stored, and the agent is told to stop. With the Claude Code plugin there is nothing to write: its skills carry the two rules into every repository.
Per repository — have the first person's agent commit it
Once connected, ask your agent to set this repository up for Coderbuds (in Claude Code, /mcp__coderbuds__set-up-repository). It adds a coderbuds server pinned to your team to the repository's .mcp.json — and to .cursor/mcp.json or .vscode/mcp.json if the repository already commits those directories — alongside the two rules for your agent guidance, in one pull request. After it merges, Claude Code asks each teammate who opens the repository whether to use the server; they approve it, run /mcp, choose Authenticate, and are done. Codex reads no repository config, so Codex users still run the command above once.
With the plugin, run /coderbuds:set-up-repository instead. It writes the same two rules into the repository's agent guidance, but commits the plugin to .claude/settings.json rather than a server to .mcp.json, so teammates on Claude Code are offered the plugin once they trust the repository. Cursor and VS Code still get the server in their own config.
Per organisation — provide it through Claude Code managed settings
If you administer Claude Code for your company, list Coderbuds under managedMcpServers in a managed settings source — server-managed settings, an MDM profile, or managed-settings.json. Every user gets it in every repository and keeps their own servers alongside it. It needs Claude Code v2.1.259 or later; earlier versions ignore the key.
{
"managedMcpServers": {
"coderbuds": {
"type": "http",
"url": "https://coderbuds.com/mcp/insights?team=Your%20Team"
}
}
}
To give everyone the two rules too, deploy them as your organisation's Claude Code instructions file — /Library/Application Support/ClaudeCode/CLAUDE.md on macOS, /etc/claude-code/CLAUDE.md on Linux — which Claude Code loads in every project and nobody can exclude. Open it with the same scope line the per-person setup writes, naming your organisations. Leave out headers so each person signs in with OAuth as themselves; a header set here is readable by anyone on the machine. Pinning the team means a person on several Coderbuds teams still lands on yours. Use managedMcpServers rather than managed-mcp.json unless you mean to take exclusive control — that file stops everyone's other servers loading. Anthropic's managed MCP guide covers both.
Step 2 — authorize in the browser
The first time your client connects, a Coderbuds tab opens in your browser — in Claude Code, run /mcp, choose the server (plugin:coderbuds:coderbuds with the plugin), and choose Authenticate to open it. Sign in if you are not already, click Authorize, and the tab hands control back to your editor. That grant is per person and per machine, so it happens once here and never again on this laptop.
If no tab opens, trigger it by hand: run codex mcp login coderbuds in Codex; run /mcp in a Claude Code session and choose Authenticate; or in Cursor open Settings → MCP and use the login control on that server. Leave your editor running while you authorize — it is listening on a local port for the redirect.
Step 3 — check it worked
Ask your agent a question only Coderbuds can answer:
"Using Coderbuds, what pull requests are waiting on review right now?"
A real answer means you are connected. If the tools are missing entirely, the client has not authorized yet — go back to step 2.
If you are on more than one team
Coderbuds never guesses which team a call is about. On one team, there is nothing to do. On several, either is fine:
- Per call (no reconnect): pass the repository you are working in, as
owner/name. Coderbuds maps it to the owning team. Your agent can read that fromgit remote get-url origin. - For the whole session: pin the team in the URL —
https://coderbuds.com/mcp/insights?team=Your%20Team. Changing this counts as a different server, so your client will ask you to authorize once more.
Untracked repos — an internal tool, a scratch repo — will not resolve to a team on their own, so pin the team in the URL for those.
Managing the connection
Codex stores this server in ~/.codex/config.toml, shared by Codex CLI, the desktop app, and the IDE extension on this computer. Use codex mcp list to check it and codex mcp remove coderbuds to remove it.
Claude Code stores an MCP server in one of three scopes. Which one you used decides where the config lives, who else gets it, and how you remove it later. If you omit --scope you get local — not project, and not user.
| Scope | Where it is stored | Who gets it |
|---|---|---|
local (default) |
Your own Claude Code config | Just you, in this project |
project |
.mcp.json in the repo root — a tracked file |
Everyone who clones the repo |
user |
Your own Claude Code config | Just you, in every project |
Removing uses the same scope you added with:
claude mcp list # what is configured now claude mcp remove coderbuds --scope user
If you added at project scope, removing edits a file that is checked into git. claude mcp remove coderbuds will delete the entry from .mcp.json, which shows up as an uncommitted change and takes the server away from your whole team if you commit it. To put it back, restore the file — git checkout .mcp.json — rather than re-adding by hand.
After adding or removing, restart Claude Code — the server list is read once at session start, so claude mcp list inside a running session can report a server that is no longer configured on disk.
If something goes wrong
Every failure below names its own fix on screen too — this table is just the short version.
| What you see | What to do |
|---|---|
| The server connects but no Coderbuds tools appear | Not authorized yet. Run /mcp → Authenticate in Claude Code, or the login control in Cursor. |
| "This connection request is missing something" | Your session expired part-way through. Nothing is broken — start the connection again from your editor now that you are signed in. |
| "Coderbuds no longer recognises…" | Your client cached a connection that has been rotated. Remove the server and add it back — claude mcp remove coderbuds, then step 1. |
| "This authorization page went stale" | The Authorize screen sat open too long. Start again and click Authorize within a few minutes. |
Browser says it can't connect to localhost:<port> after you authorize |
Your editor stopped listening for the redirect. Make sure it is still running, then start the connection again from inside it. |
| A tool replies that you are not on a team | Your account has no team yet. Create one or get invited, then retry — no reconnection needed. |
| A tool replies that you are on several teams | Pass the repository as owner/name on the call, or pin ?team= in the URL. |
| A 401 mentioning a rejected bearer token | Headless path only. The token was revoked, expired, or mistyped — mint a replacement below. |
Fallback: headless environments (CI, servers)
Most people should not use this. Browser authorization above is the default and needs no token. Reach for a bearer token only where a browser cannot open — CI jobs, remote build boxes. Pass --header "Authorization: Bearer <your-token>" to the command in step 1, or an equivalent headers block in .mcp.json with the token supplied via an environment variable. A token is tied to you personally, so never commit one or share it with the team.
Log in or create an account to generate a token here.
Once connected, load the Work Our Way prompt at the start of a session to prime your agent with this team's box — the active Coderbuds Standards, observed shipping norms, and review-queue state — before it writes a line of code.
Things to ask it
Ask in plain language — your agent picks the tool. The first two are the ones worth building a habit around.
"Before I open this PR — does this change fit how we ship?"
The habit that saves a review round. Do it while the diff is still easy to split.
"Load our team context before you start — how do these repos relate?"
Opens the session knowing the org map instead of inferring it from the files you happened to open.
"What's blocking my pull requests right now?"
Your open PRs, what each is waiting on, and reviews you could unblock for someone else.
"What have we merged that hasn't shipped to production yet?"
Deploy lag, grouped by repo with wait times.
"Ask the team for a review on #482."
Posts to Slack picking the next reviewer in rotation, and comments on the PR.
"Why is PR #1186 marked poor?"
Every penalty with its point cost, rather than a guess at the criteria.
"Is this repo ready for agents to work in?"
The gaps worth closing first — deploy automation, review coverage, stale rules files.
What your agent can do once connected
Twenty-two tools, grouped by where they land in the delivery loop. You never call these by hand — ask in plain language and your agent picks. Everything is scoped to your team, and the acting tools are the same ones the Coderbuds agent uses in Slack, under the same limits.
There are also two prompts, which your client lists separately from tools. Set Up Repository finishes setup once you are connected — in Claude Code, run /mcp__coderbuds__set-up-repository, or in any agent ask it to set the repository up for Coderbuds. It writes the two rules into this repository's agent guidance and commits the connection to .mcp.json in one pull request, so teammates using Claude Code are offered it the next time they open the repository. Work Our Way primes a session with this team's box in a single step; load it at the start of one.
Before it writes code — learn the box
At session start, or whenever work might span more than one repo.
-
get-team-context-tool - The org map: every repo with activity level, top contributors, deploy setup and an agent-readiness verdict; how repos relate; which are archived; and the team's confirmed conventions. Pass the repo you are in for a focused map.
-
get-repo-readiness-tool - Is this repo ready for agents? Per-repo pass/fail checks — deploy automation, PR size discipline, review coverage, agent guidance, CI, tests, whether the fit check is wired in, and whether the rules file still references archived repos.
-
get-guidance-drift-tool - Is this repo's CLAUDE.md still true? Directory listings the file enumerates are checked against what is actually there — how many entries it documents, how many exist now, and what is missing — plus when the file last changed. A stale inventory is worse than none, because agents read it as truth.
-
set-up-repository-tool - Set this repository up for Coderbuds. Returns the steps for the agent to carry out: write the two moments into the agent guidance, commit the connection to .mcp.json pinned to the team so teammates are offered it, and open both as one pull request. The same steps as the set-up-repository prompt, for clients that do not run prompts.
-
link-repositories-tool - Teach the map. Record that two repos depend on, document, or ship with each other — or mark a noisy derived link unrelated. Taught once, every teammate's agent inherits it.
Before you open a PR — pre-flight
After the diff exists and before it becomes a pull request.
-
assess-change-fit-tool - Does this change fit how this team ships? A verdict against the team's own merged-PR norms, expected merge time for that size, and current queue pressure. Pass test and moved lines and the verdict judges the reviewable surface, not the raw count.
-
record-change-fit-decision-tool - What you did about the verdict — proceeded, split, trimmed, or abandoned — and why. Overriding the standard is allowed; recording it is how a threshold that fires too often gets noticed and moved.
-
set-change-fit-standard-tool - Set your team's PR size standard when someone says the number is wrong — tighter, looser, or back to Coderbuds' default. Setting it pins the number; leave it alone and Coderbuds loosens it for you off the override record.
-
set-review-policy-tool - Choose how much review your pull requests need — skip trivial changes, or review by risk with the paths you call sensitive. Coderbuds then says on each pull request whether it needs no review, an AI review, one review or a careful one.
-
explain-pull-request-score-tool - Why one specific PR got the score and label it got — the recorded score, every structural penalty with its point cost, the AI adjustment, and what the score does not measure.
What is blocking the loop right now
Standup prep, or any time you are about to ask a human the same question.
-
get-my-status-tool - Your cross-repo standup in one call: your open PRs and what blocks each, reviews you could unblock oldest-first, your merged-but-undeployed work, and what you shipped recently.
-
get-open-pull-requests-tool - Open PRs by author with what is blocking each — awaiting review, changes requested, ready to merge, draft, or failing checks.
-
get-created-pull-requests-tool - How many PRs were opened over a recent window, split human vs bot and broken down per repo and per author. Counts from the team's repositories, including authors without a Coderbuds account.
-
get-undeployed-pull-requests-tool - Merged but not yet in production, grouped by repo with wait times. The deploy-lag signal.
-
get-merged-pull-requests-tool - What merged over a window, split human vs bot, broken down per repo and per author.
-
get-deployments-by-person-tool - Who shipped to production and how often, with failed deploys surfaced per person.
-
get-person-activity-tool - What one named person has been doing over a recent window — pull requests opened, reviews given and deploys, week by week, read together so a low PR count is never the whole story.
Act on it — close the loop
Where most MCP servers stop at reporting.
-
request-pull-request-review-tool - Ask for a review: Coderbuds posts to the team Slack channel picking the next reviewer in rotation (or one you name) and comments on the PR in its own voice.
-
deploy-repository-tool - Trigger a production deploy for a repo with a deploy hook or Actions workflow configured.
-
set-agent-posture-tool - How loudly the Coderbuds agent speaks, and whether it acts at all — off, preview, quiet, public, or direct. Team admins only.
-
report-ai-usage-tool - Tell Coderbuds you wrote this change: which agent, how much of it, and what it saw a person do before the pull request opened. First-party, where AI authorship is otherwise inferred from the diff — and the only thing that can grade that inference.
The measurement underneath
For retros, reviews, and answering "did that actually help".
-
find-delivery-bottleneck-tool - Where a change spends its waiting time — before review, in review, or after merge. Names the single slowest stage with the PRs that prove it and one thing to change. A stage it could barely measure says so instead of looking fast.
-
get-team-overview-tool - One SPACE-framework snapshot combining activity, DORA, collaboration and efficiency.
-
get-dora-metrics-tool - Deployment frequency, lead time, change failure rate, mean time to recovery.
-
get-pull-request-metrics-tool - PR counts, code reviews, quality scores, size distribution.
-
get-weekly-summary-tool - Changelog summaries with feature highlights and team achievements.
-
get-my-insights-tool - Active team and personal insights, filterable by category or unseen only.
-
get-team-insight-summary-tool - Aggregate counts per category, unseen count, and personal insights.
-
mark-insight-seen-tool - Mark an insight reviewed so it stops resurfacing.
-
get-agent-activity-tool - What the autonomous Coderbuds agent has done, its stats, and anything waiting on approval.
-
get-ai-adoption-tool - How much of the shipped work is AI-assisted, joined to what that work did — lead time and size against everything else — plus how far the inferred numbers sit from what agents reported about themselves.
-
get-mcp-adoption-tool - Who on the team is actually using this — per member and per tool, plus members who have never connected.
Endpoint
https://coderbuds.com/mcp/insights
Authentication is OAuth 2.1 — your client discovers it automatically and opens a browser to authorize. Bearer tokens are accepted as a fallback for headless environments.
Access renews itself: your client holds a token that lasts 30 days and refreshes it in the background, so coming back after a few weeks away just works. Only after a full year of no use does it ask you to authorize again. You can revoke a machine's access at any time from API Tokens.
Other clients
Claude Desktop, Windsurf, and other MCP-compatible clients all accept the same shape as Claude Code and Cursor above — a Streamable HTTP server. Add the URL and the client walks you through the browser authorization on first connect:
{
"mcpServers": {
"coderbuds": {
"type": "http",
"url": "https://coderbuds.com/mcp/insights"
}
}
}
Any client that runs on your computer can connect. A hosted client can only connect if it's on our list: today that's Claude, ChatGPT, Amp, VS Code for the Web, Glama and Smithery. That list keeps a phishing link from sending your authorization to someone else's server. If yours is turned away with invalid_redirect_uri, email [email protected] and we'll add it.
| Transport | Streamable HTTP |
| URL | https://coderbuds.com/mcp/insights |
| Auth | OAuth 2.1 (auto-discovered) or Authorization: Bearer <your-token> |
Data & Privacy
Everything is scoped to your authenticated user and the teams you belong to. Personal insights are visible only to the person they belong to. Your source code is never sent to Coderbuds — the tools above answer questions about how your team ships, from data Coderbuds already holds.
The tools that act are deliberately narrow: a deploy only works where your team has already configured a deploy hook or workflow, changing the agent's posture is restricted to team admins, and a review request goes to your own Slack channel. Revoke a machine's access at any time from API Tokens. See our Security documentation for more.