RepoPilot is an MCP server with 8 tools an agent can call, among them analyze_repo, check_change_risk, check_dependency. It answers at https://repopilot.app/api/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 10 of 10 times since 4 September 2026; the last check, on 17 October 2026, succeeded.
Repository evidence for agents before they adopt dependencies, enter codebases, compare, or merge.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
analyze_repo | CALL when entering an unfamiliar repository or deciding whether to depend on, fork, learn from, or deploy it. Returns a concise four-use-case brief, watchouts, evidence confidence, architecture summary, freshness, and next actions without d Inputs: repo, package |
check_change_risk | CALL before merging a pull request or after producing a local diff. Returns a deterministic 0-10 change-shape score with receipts for size, spread, missing tests, sensitive paths, hotspots, and blast radius. Pass repo+pr OR diff; repo may a Inputs: repo, pr, diff, files, contract_id, base_sha |
check_dependency | CALL when the user or agent is about to add, upgrade, trust, fork, or deploy an npm package or public GitHub repository. Returns a lean repository-level recommendation, confidence, evidence gaps, CVEs, maintenance, ownership, license, CI/te Inputs: repo, package |
compare_repos | CALL when the user is choosing between exactly two dependencies or repositories. Returns the preferred candidate for each use case, material trade-offs, confidence, and evidence gaps. Each target is owner/repo, a GitHub URL, an npm package Inputs: a, b |
evaluate_dependency_change | CALL immediately before adding or upgrading an npm dependency. Answers "is this exact version safe to take on" from registry metadata, advisory deltas, provenance, license, and repository evidence, and returns blockers, warnings, a recommen Inputs: dependency, to_version, from_version, dependency_type, package_manager, project |
get_artifact | CALL before substantial code work in an unfamiliar repository when the agent needs key files, entry points, architecture hypotheses, a reading order, and verify-before-trusting guidance. Returns the cached CLAUDE.md-style artifact or Cursor Inputs: repo, package, format |
plan_repo_task | CALL before editing an unfamiliar public repository. Returns a bounded reading order, relevant files, dependency consumers, test/verification obligations, analyzed-vs-checked SHA relation, evidence provenance, and a short-lived verification Inputs: repo, package, task, checked_sha, intent, max_files |
verify_dependency_change | CALL after changing the manifest/lockfile and running local checks. Compares the exact evaluated target with the resolved result and caller-reported proof receipts, reports missing/failed evidence and residual risk, and labels receipts as c Inputs: evaluation, after, diff, checks |
Every block below points at https://repopilot.app/api/mcp. Pick your client and copy.
claude mcp add --transport http repopilot https://repopilot.app/api/mcp
{
"mcpServers": {
"repopilot": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://repopilot.app/api/mcp"]
}
}
}{
"mcpServers": {
"repopilot": {
"url": "https://repopilot.app/api/mcp"
}
}
}{
"servers": {
"repopilot": {
"type": "http",
"url": "https://repopilot.app/api/mcp"
}
}
}{
"context_servers": {
"repopilot": {
"url": "https://repopilot.app/api/mcp"
}
}
}{
"mcpServers": {
"repopilot": {
"serverUrl": "https://repopilot.app/api/mcp"
}
}
}{
"mcpServers": {
"repopilot": {
"url": "https://repopilot.app/api/mcp"
}
}
}name: RepoPilot
version: 0.0.1
schema: v1
mcpServers:
- name: RepoPilot
type: streamable-http
url: https://repopilot.app/api/mcp{
"mcpServers": {
"repopilot": {
"httpUrl": "https://repopilot.app/api/mcp"
}
}
}{
"mcpServers": {
"repopilot": {
"type": "http",
"url": "https://repopilot.app/api/mcp"
}
}
}{
"mcpServers": {
"repopilot": {
"url": "https://repopilot.app/api/mcp"
}
}
}goose://extension?url=https%3A%2F%2Frepopilot.app%2Fapi%2Fmcp&type=streamable_http&id=repopilot&name=RepoPilot
It answered our last check on 17 October 2026 in 193 ms. Over 10 checks since 4 September 2026 it answered 10. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by repopilot.app and served from repopilot.app, the vendor's own domain: https://repopilot.app/api/mcp.
8, as returned by the server's own tools/list on 9 September 2026: analyze_repo, check_change_risk, check_dependency, compare_repos, evaluate_dependency_change, get_artifact, plan_repo_task, verify_dependency_change.
It answered our last check on 17 October 2026 in 193 ms. Over 10 checks since 4 September 2026 it answered 10.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://repopilot.app/api/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: app.repopilot. Endpoint host: repopilot.app. ARD identifier: urn:air:app.repopilot:mcp:repopilot.
First indexed 31 August 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.