Safety boundary for agent written GitHub PR reviews: pending and invisible, submitting is opt-in
Connect Runs on your machine
claude mcp add review-guard -e GITHUB_TOKEN=<GITHUB_TOKEN> -- npx -y @eclipsesource/[email protected]{
"mcpServers": {
"review-guard": {
"command": "npx",
"args": [
"-y",
"@eclipsesource/[email protected]"
],
"env": {
"GITHUB_TOKEN": "<GITHUB_TOKEN>"
}
}
}
}{
"mcpServers": {
"review-guard": {
"command": "npx",
"args": [
"-y",
"@eclipsesource/[email protected]"
],
"env": {
"GITHUB_TOKEN": "<GITHUB_TOKEN>"
}
}
}
}{
"servers": {
"review-guard": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@eclipsesource/[email protected]"
],
"env": {
"GITHUB_TOKEN": "<GITHUB_TOKEN>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
GITHUB_TOKENOptional, secret | GitHub token with pull request read and write access. Can be left unset if the GitHub CLI is authenticated, because the server then falls back to gh auth token. |
Details
| Package | @eclipsesource/[email protected] (NPM, stdio) |
| First published | 12 Nov 2026 |
| Last updated | 12 Nov 2026 |
| Registry name | com.eclipsesource/review-guard |
More developer tools servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.