LoginSign Up
← Back to all sparks
C

CodeRabbit

DEVOPS
Velocity5.0

AI-powered code review platform that posts line-by-line pull request feedback

coderabbit.ai ↗

CodeRabbit is turning its review output into an Enterprise API surface

code-reviewsecuritypublic-apiplatform-paritydeveloper-toolsenterprise
◆Current state
CodeRabbit ships close to one user-visible change a day, and the newest cluster is a public API for Enterprise. Deep Scan security findings, per-pull-request MCP server and tool usage, and Learnings all became retrievable or writable programmatically inside five days. The rest of the window is provider parity work — Entra service principals for Azure DevOps, Post-Merge Actions reaching Bitbucket Cloud — plus guideline plumbing that tells reviewers which conventions were actually applied.
◆Where it's heading
Three API endpoints in five days reads as a plan rather than a coincidence: the data CodeRabbit produces during review is being made addressable from outside the tool. Learnings covered the write side; Deep Scan findings and MCP usage cover the read side, aimed at teams that want review output inside their own dashboards and compliance systems. Provider parity continues on a separate track, closed methodically rather than opportunistically.
◆Prediction
Expect the API to widen to the remaining review artifacts — findings history, guidelines, and usage reporting — and for Enterprise to stay the tier where the programmatic surface is gated.

◆Recent moves

  1. 2d ago

    AI Deep Scan API | Enterprise, CodeRabbit Security

    The security half of the new API surface: Deep Scan findings, previously readable only in the review interface, can now be pulled programmatically by Enterprise organizations with CodeRabbit Security. It is the read counterpart to the Learnings write API four days earlier, pointing the same direction — review output as data other systems consume.

    View source ↗
  2. 2d ago

    MCP usage API | Enterprise

    Per-pull-request MCP server and tool usage becomes retrievable through the public API, giving Enterprise teams a record of which MCP tools a given review actually invoked. Landing alongside the Deep Scan endpoint, it extends the API from review findings to review telemetry.

    View source ↗
  3. 5d ago

    Custom Path Instructions | CodeRabbit Security

    Path-scoped instructions arrive for Deep Scan, letting a repository steer security analysis by file pattern instead of globally. It is the guidelines machinery CodeRabbit already applies to pull request reviews, now pointed at the security product.

    View source ↗
  4. 6d ago

    Learnings write API | Enterprise

    The write side of the API push: Learnings — the conventions a team's reviews have accumulated — become something external systems can create, update, delete and search. It is the structural move the later read endpoints build on.

    View source ↗
  5. 7d ago

    Service principal onboarding | Azure DevOps | Pro

    Azure DevOps onboarding moves to Microsoft Entra service principals for new organizations and SSO workspaces, while existing PAT-based setups keep their current flow. Unglamorous parity work, and a prerequisite for enterprise Azure customers.

    View source ↗
  6. 7d ago

    Post-Merge Actions on Bitbucket Cloud | GitHub Cloud, GitLab Cloud, Azure DevOps, Bitbucket Cloud | Pro+, Enterprise

    Post-Merge Actions reach Bitbucket Cloud, and deletion-only actions now open follow-up pull requests across every supported provider. Another gap closed in the parity campaign running underneath the API work.

    View source ↗