<div align="center"
<img src="assets/logo.png" alt="CodeCora" width="120" /
AI-Powered Code Review CLI — BYOK
</div
---
Cora is a fast, native CLI for AI-powered code review and code intelligence — in your terminal, CI/CD, git hooks, or directly inside AI coding agents. Bring your own key, pick any model, index your codebase, and search semantically. All local, zero cloud.
Why Cora?
- 🤖 Multi-LLM — OpenAI, Anthropic, Groq, Ollama, Z.AI, or any OpenAI-compatible API
- ⚡ Native Rust — fast binary, no runtime dependencies, cross-platform
- 🪝 Pre-commit hooks — catch issues before they reach CI
- 📋 SARIF output — upload to GitHub Code Scanning
- 🛡️ Deterministic scanners — 12 built-in rules + 13 security patterns + 15 secret detection patterns that run without LLM
- 🧠 Language-specific analysis — tailored review guidance for Dart/Flutter, Svelte, TypeScript, Go, Rust, Python
- 🚧 Quality gate — configurable pass/fail thresholds for CI enforcement
- 📐 Quality profiles — strict, balanced, or lax presets for different project needs
- 📏 Custom rule engine — write your own regex rules in .cora.yaml
- ✂️ Auto-chunking — splits large PRs into reviewable chunks automatically
- 🔍 Code Intelligence — index symbols across 15 languages, call graph, trace, impact analysis
- 🧠 Brain Mode — hybrid semantic search (FTS5 + vector KNN + graph) with RRF fusion
- 🗄️ Multi-project database — one global index, search across all your repos at once
- 🌳 Tree-sitter (opt-in) — AST-based symbol extraction for 13 languages: Rust, Go, Python, TypeScript/TSX, Java, C, C++, C#, Ruby, PHP, Scala, JavaScript, Svelte (via TypeScript delegation, zero extra dependency)
- 🔌 MCP server — 18 tools for AI coding agents (review, search, brain, debt, trace, dead code, graph query, ...)
- 💾 Diff-hash caching — skip repeat reviews automatically
- 🔧 Configurable — per-project .cora.yaml, global ~/.cora/config.yaml, or env vars
Quick Start
Install
Pick one install method — mixing channels can leave stale binaries on your PATH.
| Method | When to use | |---|---| | curl … install.sh (recommended) | Quick standalone install; fetches the latest GitHub release binary | | cargo install --git … | You already have a Rust toolchain; builds from source | | Pre-built binaries | Manual download from Releases |
# Install with the quick installer
curl -fsSL https://raw.githubusercontent.com/codecoradev/cora-code/main/install-bundle.sh | sh
# Or build from source with cargo
cargo install --git https://github.com/codecoradev/cora-codePin a version: CORAVERSION=v0.6.1 curl -fsSL ... | sh
Upgrading: run cora upgrade (downloads the latest release, verifies its SHA-256 checksum, replaces the binary) or cora upgrade --check to just see if one is available. If you installed via cargo install --path ., re-run that instead.
Verify which cora you're running — which -a cora will reveal stale copies from other channels: