CodeRabbit MCP integration for AI agents.
Connect AI agents to CodeRabbit through 13 structured actions, including get review metrics, create role, delete role, and change roles. Review authenticatio…
- ACTION CONTRACTS
- 13
- AUTHENTICATION
- API key
- SOURCE STATUS
- Provider-backed
CATALOG SOURCE REVIEWED AUGUST 23, 2026 / ACTION NAMES AND SCHEMAS DERIVED FROM WORKING MACHINES PROVIDER SOURCE
CAPABILITY PROFILE
What the CodeRabbit integration exposes
The CodeRabbit Agent App exposes 13 provider-backed actions for developer tools work. Its current contract lets an authorized agent get coderabbit merged pull request review metrics for a date range with optional organization, repository, and user filters, create a coderabbit enterprise custom role, and delete a coderabbit enterprise custom role when it is not assigned to users. These operations are called through Working Machines as typed capabilities rather than through browser navigation or copied UI steps.
A connection uses API key. Before execution, the agent can inspect the selected action, its required fields, declared scopes, and expected output contract. Provider credentials remain inside the Working Machines runtime; the calling agent receives the capability and its structured result, not the underlying secret.
For reliable operation, start with the narrowest action that satisfies the task, resolve stable provider identifiers before changing state, and validate the returned object or status after execution. Availability still depends on the connected CodeRabbit account, granted provider permissions, workspace policy, region, plan, and upstream API behavior.
VERIFIED ACTION SAMPLE
Real CodeRabbit capabilities.
Showing 12 of 13 actions. Risk labels are conservative signals based on operation names, not substitutes for provider documentation or runtime policy.
get_review_metricsREADGet CodeRabbit merged pull request review metrics for a date range with optional organization, repository, and user filters.
INPUTS: startDate / endDate / organizationIds / repositoryIds / userIds
create_roleWRITECreate a CodeRabbit Enterprise custom role.
INPUTS: orgId / name / description / isDefault / duplicateFrom
delete_roleHIGH IMPACTDelete a CodeRabbit Enterprise custom role when it is not assigned to users.
INPUTS: roleId / orgId
change_rolesREVIEWBulk change CodeRabbit organization roles for up to 500 users.
INPUTS: role / userIds
get_roleREADGet details for one CodeRabbit built-in or Enterprise custom role.
INPUTS: roleId / orgId / includePermissions / includeUserCount
get_seat_assignment_modeREADRetrieve the current CodeRabbit seat assignment mode for a self-hosted Enterprise organization.
list_audit_logsREADList CodeRabbit organization audit log entries with optional actor, action, resource type, date, and pagination filters.
INPUTS: search / actions / resourceTypes / dateFrom / dateTo
list_role_permissionsREADList valid CodeRabbit role permission resource identifiers and access types for custom roles.
INPUTS: orgId
list_rolesREADList CodeRabbit built-in and Enterprise custom roles for the organization.
INPUTS: orgId / roleType / includePermissions / includeUserCount
list_usersREADList CodeRabbit organization users with optional seat and role filters using cursor-based pagination.
INPUTS: seatFilter / roleFilter / limit / cursor
manage_seatsREVIEWBulk assign or unassign CodeRabbit seats for up to 500 organization users.
INPUTS: action / userIds
update_roleWRITEUpdate a CodeRabbit Enterprise custom role.
INPUTS: orgId / roleId / name / description / isDefault
INPUT CONTRACTS
Know what the action needs before it runs.
get_review_metrics
startDateREQUIRED- The start date in YYYY-MM-DD format.
endDateREQUIRED- The end date in YYYY-MM-DD format.
organizationIdsOPTIONAL- The organization Git provider IDs to filter by, up to 10 values.
repositoryIdsOPTIONAL- The repository Git provider IDs to filter by, up to 10 values.
userIdsOPTIONAL- The author Git provider IDs to filter by, up to 10 values.
create_role
orgIdOPTIONAL- The git-provider organization ID for workspace-scoped API tokens.
nameREQUIRED- The name of the custom role.
descriptionOPTIONALisDefaultOPTIONAL- Whether the new role should become the subscription default.
duplicateFromOPTIONAL- The role ID to copy permissions from.
delete_role
roleIdREQUIRED- The CodeRabbit role identifier.
orgIdOPTIONAL- The git-provider organization ID for workspace-scoped API tokens.
change_roles
roleREQUIRED- The CodeRabbit user role.
userIdsREQUIRED- The provider user identifiers to assign the role to.
PROVIDER-SPECIFIC WORKFLOWS
Jobs this Agent App can support
Inspect Get Review Metrics
Get CodeRabbit merged pull request review metrics for a date range with optional organization, repository, and user filters. Use this as a bounded discovery step, retain the returned identifier, and avoid expanding the read beyond the task's stated scope.
get_review_metricsControl Create Role
Create a CodeRabbit Enterprise custom role. Resolve the target first, present material changes for confirmation, and make retries idempotent where the provider supports it.
create_roleVerify with Get Role
Get details for one CodeRabbit built-in or Enterprise custom role. Compare the returned provider state with the intended outcome and preserve stable IDs or canonical links in the run record.
get_roleSAFETY BOUNDARY
Operate CodeRabbit with explicit limits
- Authorize CodeRabbit with API key and grant only the provider access required by the selected actions.
- 4 actions are change-capable by name. Confirm the target identity and material parameters before allowing a write.
- Treat `delete_role` as high-impact operations and require an explicit approval boundary.
- No provider scope string is declared on the sampled actions. Verify the connected account's actual permissions in CodeRabbit rather than assuming unrestricted access.
- After a call, inspect the structured result and execution record before reporting that the CodeRabbit task completed successfully.
CONNECTION MODEL
API key
CodeRabbit API key sent with the x-coderabbitai-api-key header. Create or view API keys from the CodeRabbit dashboard, then confirm the REST API authentication contract in the official API docs: https://docs.coderabbit.ai/api-reference/users-list
Working Machines stores provider credentials behind the execution boundary. An agent can use an authorized connection identity, but catalog discovery alone does not reveal OAuth tokens, API keys, or provider secrets.
- READ SIGNALS
- 7
- WRITE SIGNALS
- 3
- HIGH IMPACT
- 1
- REVIEW SIGNALS
- 2
EVIDENCE AND AVAILABILITY
Provider reference
Action names, input fields, authentication types, and counts on this page are generated from the Working Machines provider catalog. Provider behavior, quotas, object semantics, account eligibility, and regional availability remain governed by CodeRabbit.