Merlin AI Code Review

Spec sheet

Purpose

Merlin reviews pull request diffs with configurable AI and posts inline comments without sending code to a third-party SaaS.Read 3 Oct 2026 · merlin-review.com

Intended users

The maker describes it for solo developers, startups, open-source teams, regulated banks, and air-gapped defence labs.Read 3 Oct 2026 · merlin-review.com

Deployment

The product is presented as a Rust single binary that runs in a CI pipeline, with no Merlin server or account required.Read 3 Oct 2026 · merlin-review.com

Support

The maker directs users to open an issue, start a discussion, or contact the team directly for feedback.Read 3 Oct 2026 · merlin-review.com

Maker

The site credits Arunachalam Kalimuthu as the maker.Read 3 Oct 2026 · merlin-review.com

AI providers

The site lists Claude, GPT-4o, Gemini, Bedrock, Ollama, and Claude Code CLI as supported AI backends.Read 3 Oct 2026 · merlin-review.com

Audit logs

The maker says every AI call can be logged locally and describes this as HIPAA/SOC2 friendly.Read 3 Oct 2026 · merlin-review.com

Autonomous agent

Its ReAct-loop agent can plan multi-step tasks and use the slash commands, RAG search, comment posting, and PR information tools.Read 3 Oct 2026 · merlin-review.com

Context-aware reviews

Merlin can index a codebase and past review comments, then retrieve relevant snippets before AI calls; embeddings run locally via Ollama.Read 3 Oct 2026 · merlin-review.com

Git integrations

The site says Merlin works with GitHub, GitLab (cloud and self-hosted), Bitbucket, Azure DevOps, and Gitea.Read 3 Oct 2026 · merlin-review.com

License and cost

Merlin is MIT-licensed and free forever; users supply their own API key and pay their AI provider for token usage.Read 3 Oct 2026 · merlin-review.com

Review comments

It posts file- and line-level comments about bugs, security, style, and performance, sorted by severity.Read 3 Oct 2026 · merlin-review.com

Security and privacy

The maker says source code stays on the user's servers and describes an Ollama plus local Qdrant configuration for offline use with zero external calls.Read 3 Oct 2026 · merlin-review.com

Security features

Security scanning includes OWASP Top 10 analysis, secret detection, and Snyk dependency scanning.Read 3 Oct 2026 · merlin-review.com

Plans and prices

Every Merlin AI Code Review plan and price →

Where Specifiction places it

• AI Code Review Tools#26 of 477.6