Merlin AI Code Review
Merlin AI Code Review is a free, MIT-licensed tool for reviewing pull request changes on Linux or in a self-hosted setup.
What Merlin AI Code Review is
Merlin AI Code Review is a free, MIT-licensed tool for reviewing pull request changes on Linux or in a self-hosted setup. It analyzes diffs and posts file- and line-level comments about bugs, security, style and performance, with findings sorted by severity. Security checks include OWASP Top 10 analysis, secret detection and Snyk dependency scanning. It supports GitHub, GitLab, Bitbucket, Azure DevOps and Gitea, and lists Claude, GPT-4o, Gemini, Bedrock, Ollama and Claude Code CLI as AI backends. The tool can index code and past review comments to retrieve relevant snippets, with embeddings run locally through Ollama. It is presented as a Rust single binary for CI, with no Merlin server or account required. The maker says source code stays on the user's servers and describes an Ollama and local Qdrant setup for offline operation. It is free forever, but users provide an API key and pay their AI provider for token usage.
Good
- MIT-licensed and free forever
- Supports five listed code hosts
- Comments cover bugs, security, style and performance
- Can run locally in CI
Watch out
- Users must supply an AI API key
- Provider token charges still apply
- Platforms listed are Linux and self-hosted
Who it suits
It may suit developers and teams that want self-hosted pull request reviews and configurable AI backends. The maker also describes use by solo developers, startups, open-source teams and regulated or air-gapped organisations.
Verdict
Merlin AI Code Review offers self-hosted pull request analysis with severity-sorted comments and security scanning. Its software is free, but AI provider usage is an additional cost paid by users.
Plans and prices
From Merlin AI Code Review's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free forever | Free | MIT license · No per-seat fee · Bring your own AI API key; provider token charges apply |
The facts
Each one read from Merlin AI Code Review's own pages, with the date it was checked.
What it does
- AI providers
- The site lists Claude, GPT-4o, Gemini, Bedrock, Ollama, and Claude Code CLI as supported AI backends.checked 3 Oct 2026
- Audit logs
- The maker says every AI call can be logged locally and describes this as HIPAA/SOC2 friendly.checked 3 Oct 2026
- Autonomous agent
- Its ReAct-loop agent can plan multi-step tasks and use the slash commands, RAG search, comment posting, and PR information tools.checked 3 Oct 2026
- Context-aware reviews
- Merlin can index a codebase and past review comments, then retrieve relevant snippets before AI calls; embeddings run locally via Ollama.checked 3 Oct 2026
- Deployment
- The product is presented as a Rust single binary that runs in a CI pipeline, with no Merlin server or account required.checked 3 Oct 2026
- Git integrations
- The site says Merlin works with GitHub, GitLab (cloud and self-hosted), Bitbucket, Azure DevOps, and Gitea.checked 3 Oct 2026
- Intended users
- The maker describes it for solo developers, startups, open-source teams, regulated banks, and air-gapped defence labs.checked 3 Oct 2026
- Purpose
- Merlin reviews pull request diffs with configurable AI and posts inline comments without sending code to a third-party SaaS.checked 3 Oct 2026
- Review comments
- It posts file- and line-level comments about bugs, security, style, and performance, sorted by severity.checked 3 Oct 2026
- Security and privacy
- The maker says source code stays on the user's servers and describes an Ollama plus local Qdrant configuration for offline use with zero external calls.checked 3 Oct 2026
- Security features
- Security scanning includes OWASP Top 10 analysis, secret detection, and Snyk dependency scanning.checked 3 Oct 2026
- Support
- The maker directs users to open an issue, start a discussion, or contact the team directly for feedback.checked 3 Oct 2026
Money
- License and cost
- Merlin is MIT-licensed and free forever; users supply their own API key and pay their AI provider for token usage.checked 3 Oct 2026
The company
- Maker
- The site credits Arunachalam Kalimuthu as the maker.checked 3 Oct 2026
Alternatives to Merlin AI Code Review
- 1
DeepSource
Free planWebAPILinuxmacOS8.0From $30 a month - 2
Cubic
Free planWebAPILinuxmacOS7.9From $30 a month - 3
Sourcery
Free planWebAPIExtensionLinux7.9From $12 a month - 4
Ellipsis
Free planWebAPILinuxmacOS7.8Free plan - 5
Greptile
Free planWebAPIExtensionLinux7.7From $30 a month - 6
CodeAnt AI
Free planWebAPIExtensionSelf-hosted7.5From $20 a month