Mesrai
Multi-agent v2 — monorepo & multi-repo aware

AI code review that understands your architecture.

A multi-agent reviewer that maps your whole codebase as one graph — across monorepo packages and multiple repos, not just the diff. It traces the blast radius of every PR and turns it into DORA-grade metrics.

Start freeSee how it works
25,000+PRs reviewed·99.2%signal precision
[ Whole-codebase graph ]

See the blast radius before you merge.

Mesrai maps every package and repo as one graph. A change in apps/web shows exactly what it touches across auth and payments — scored and flagged on the pull request.

MONOREPO · DEPENDENCY GRAPH live
PR #482· blast radius crosses 3 packages1 CRITICAL2 WARN
[ One review surface ]

Every capability, in its own view.

Code review, engineering metrics, the CLI and IDE sync — each a first-class surface your whole team works from.

[ Code review ]

Every PR, ranked by severity.

Mesrai reviews every pull request the moment it opens — explaining the reasoning and proposing a one-click fix, not just a vague comment.

  • Severity-ranked findings, each with rationale
  • One-click suggested fixes on the diff
  • OWASP / CWE security + performance checks
mesrai · reviewlive
feat: add user authentication flowOpen#247 · 6 files
api/users.tsline 42
42−const msg = searchParams.get("error");
Mesraireviewed · just now
High · SecurityOWASP · CWE-79confidence92%

XSS via URL parameters. searchParams reaches JSX unsanitized — an attacker can inject script.

Suggested change
−const msg = searchParams.get("error");
+const msg = sanitize(searchParams.get("error"));
ranked by severity · confidence-scored Commit suggestion
[ Pulse ]

DORA metrics, measured for you.

Every review feeds Pulse — your engineering-health dashboard. Deploy frequency, cycle time and bug ratio, scored against elite benchmarks.

  • Deploy frequency, PR cycle time, bug ratio
  • Scored against DORA elite benchmarks
  • Per-team and per-repo trends
mesrai · pulselive
Deploy FrequencyElite
0/week
was 12/week41.7%
PR Cycle TimeElite
0h 00m
was 4h 58m12.4%
Bug RatioNeeds focus
0.0%
was 8.1%30%
PR Size (p75)Elite
0 loc
was 1.2k90.4%
[ CLI & CI ]

Review locally, before you push.

Run the exact same review from your terminal — as a pre-push hook or a CI step — and have the findings posted straight to the pull request.

  • Pre-push hook or CI step
  • Same rules as the cloud reviewer
  • Findings posted back to the PR
~/app · mesrai-clilive
~/app · mesrai-cli v0.2.19
▋
pre-push hook · CI step · same rules as the cloud reviewer
[ IDE sync ]

One ruleset, everywhere.

Import the rule files you already keep for Cursor, Copilot, Claude and Windsurf. Your IDE, the cloud reviewer and the CLI all enforce the same policy.

  • Import Cursor / Copilot / Claude / Windsurf rules
  • No new config to maintain
  • One policy across IDE · cloud · CLI
mesrai · ide synclive
Importing existing rule files
one ruleset across IDE · cloud reviewer · CLI
Works with the tools you already use
GitHubGitLabBitbucketAzure DevOpsVS CodeCursor

Trusted by fast-moving engineering teams

0K+PRS REVIEWED
0+TEAMS ONBOARDED
0.0%SIGNAL PRECISION
< 0 minREVIEW TIME
[ Why teams switch ]
“Mesrai catches the cross-file bugs our linters and human reviewers kept missing — and it does it on every PR in under two minutes. It's the first review tool our engineers actually trust.”
—Engineering LeadSeries-B fintech · replace with a named customer
[ The problem ]

Code reviews don't scale with your team.

Senior engineers spend hours on PR feedback that catches the same bugs week after week. Reviews ship late, context gets lost, and security regressions slip into main.

  • beforeJunior PR sits for 2 days

    Senior is in a meeting · waiting on a single approver

  • beforeSame bug class shipped

    Async race in payment retry — caught in prod, not review

  • afterMesrai posts inline review in 1.2s

    AGENT trace · 5 rules fired · 1 critical · 2 suggestions

[ How it works ]

From connected repo to merged with confidence.

Four steps, no config marathon. Connect once and Mesrai reviews every pull request automatically — inline, ranked by severity, with a recommended fix.

01

Connect repo

OAuth or PAT — no code changes. Live in about 2 minutes.

GitHubGitLabBitbucketAzure Repos
02

Push a PR

Mesrai listens for the webhook and starts reviewing immediately.

03

Get inline feedback

Comments on the diff with severity, rationale, and recommended fix.

04

Merge with confidence

Auto-approve when clean · request changes when risk crosses threshold.

[ What Mesrai catches ]

Everything a senior reviewer would flag — automatically.

Specialised agents run in parallel on every PR — architecture, security, performance, your custom rules — then Mesrai turns the results into live metrics, shareable skills and memory your whole team builds on.

agent_graph

Architecture-aware review

Multi-agent analysis builds an AST graph of your whole repo — catching cross-file impact, layer violations and hidden coupling that linters and humans miss.

owasp · cwe

Security on every PR

SQL injectionXSSHardcoded secretsVulnerable depsIAM mis-scopes
p95

Performance regressions

N+1 queries, missed indexes, render thrash — flagged before prod.

pulse
Elite▲ 24%

DORA metrics, live

english · yaml

Rules in plain English

“All exported functions must declare an explicit return type.”

applied on 1,284 PRs · 4 repos
$0 markup

Bring your own key

OpenAI · Anthropic · Gemini

memory

Learns your codebase

Never re-suggests the same fix. Memory you control.

[ Why Mesrai ]

Not a linter. Not another bot.

Linters see one file. Most AI bots see only the diff. Mesrai reads your whole codebase as a graph — so it catches what the others structurally can't.

Linters & SAST
Other AI reviewers
Mesrai
Reviews every pull request
Whole-codebase graph context
Cross-file blast radius
Security — OWASP · CWE · secrets
Performance regressions (N+1 · p95)
Custom rules in plain English
Learns from feedback — never repeats
DORA & engineering metrics
Runs in your IDE + CLI
Bring your own key · $0 markup
Full support Partial / limited Not available
[ CLI & IDE sync ]

Same rules for every reviewer.

Run the same review locally as a pre-push hook or CI step — and import the rule files you already keep for Cursor, Copilot, Claude, and Windsurf. One ruleset, everywhere.

// cli + ide_rules

Review locally. Sync your IDE rules.

Run Mesrai from the terminal as a pre-push hook or CI step — and import rule files you already keep for Cursor, Copilot, Claude, Windsurf, and more. One ruleset across every reviewer.

Explore CLI IDE rule sync
~ ❯ mesrai reviewv0.2.19
[12:01:01] PASS arch/layer-boundary
[12:01:02] INFO perf/n-plus-one services/orders.ts
[12:01:03] WARN security/sql-injection api/users.ts:42
[12:01:04] DONE 9 pass · 3 warn · 1.2s
[ Security & privacy ]

Your code stays yours.

Mesrai never trains on your code. Reviews run in ephemeral sandboxes. Bring your own LLM key and pay your provider directly — you control the cost and the data path.

Where your code goes
Your PREphemeral sandboxYour LLM key
never storednever trains a modelno third-party sharing
  • Bring your own LLM key
  • Zero training on your code
  • Ephemeral review sandboxes
  • Role-based accessEnt
  • Full audit logEnt
  • SAML SSOEnt
01
Zero retentionCode processed in-memory, never stored
02
No model trainingYour code never trains a model
03
BYOKYour LLM key, your data path
04
In your boundarySelf-host on Enterprise
?Frequently asked
7 questions
  • What is Mesrai?+

    Mesrai is a multi-agent AI code review platform for product engineering teams. It reviews every pull request across GitHub, GitLab, Bitbucket, and Azure Repos using specialised AI agents for bugs, security, performance, architecture, and your team's own rules — all in under two minutes.

  • How does AI code review work?+

    Mesrai listens for new pull requests, parses the changed code into an AST, runs it through multiple specialised AI agents in parallel (bug detection, security, performance, architecture, custom team rules), then posts the findings as inline comments on the PR — ranked by severity. The full review loop runs in ~60-120 seconds.

  • Is Mesrai free?+

    A 14-day Free Trial unlocks every Pro feature — bring your own AI key, no credit card required. After the 14 days, continued use requires a paid plan: Pro BYOK at ₹499 / $6 per developer per month (bring your own LLM key and pay your provider directly), or Enterprise on a custom contract.

  • Which git providers does Mesrai support?+

    GitHub, GitLab, Bitbucket, and Azure Repos — all four major providers. Each connection takes about 30 seconds via the official OAuth app or a Personal Access Token. Self-hosted GitHub Enterprise Server is supported on Enterprise plans.

  • Will Mesrai store or train on my code?+

    No. Mesrai operates with zero data retention — code is processed in-memory and never stored after the review completes. BYOK (Bring Your Own LLM Key) keeps your code on your own LLM provider entirely. We never train models on customer code.

  • What programming languages does Mesrai support?+

    JavaScript, TypeScript, Python, Java, Go, Rust, C++, C#, Ruby, PHP, Kotlin, Swift, Scala, and most modern languages. Architecture-aware review (via the mesrai-graph AST engine) is deepest on JavaScript/TypeScript, Python, Go, Java, and Rust.

  • Does Mesrai give engineering metrics like DORA?+

    Yes. Pulse — Mesrai's built-in analytics surface — tracks the four DORA metrics (deployment frequency, lead time for changes, change failure rate, mean time to restore) alongside PR cycle time, review depth, AI-finding adoption rate, and Mesrai-Rules coverage per team. Included on every paid plan; no separate dashboard subscription.

Get started

Ship code your team trusts.

14-day Free Trial. No credit card. Install in two minutes — first PR reviewed today.

Start free Read docs