# Open Code Review

> Apache-2.0 hybrid deterministic+LLM review agent (MCP/plugins)

**Category:** AI Agents  
**Pricing:** open-source  
**URL:** https://open-codereview.ai  
**GitHub:** https://github.com/alibaba/open-code-review  
**Added:** 2026-09-16

---

## The Hook

Open Code Review is Alibaba’s Apache-2.0 code-review CLI — deterministic pipelines plus an LLM agent, not a pure lint pass and not a generic coding agent.

## What's Good

Apache-2.0 (alibaba/open-code-review). Hybrid architecture: rule/file selection and bundling stay deterministic; the agent does repo-aware, line-level review with tool use. Built-in multi-language ruleset, OpenAI/Anthropic-compatible endpoints, CI hooks, MCP client for plugins, and delegation mode so your coding agent can run the review. Docs and product at open-codereview.ai.

## The Catch

Vs Semgrep/Gitleaks (deterministic SAST/secrets): OCR adds an LLM agent layer for context-heavy review, not a drop-in replacement for static rules alone. Vs Claude Code/SWE-agent/OpenHands (general coding agents): OCR is a purpose-built review harness, not a full autonomous coder. BYO LLM cost — you bring the model endpoint and pay the provider; the OSS CLI itself is free.

## Verdict

Apache-2.0 hybrid review agent. Deterministic+LLM vs Semgrep/Gitleaks and vs general coding agents; BYO LLM.