Code review
A review Claude Code has to finish, not one it decides it has finished
Ask Claude Code to review a codebase and it does something reasonable: it reads what fits, forms a view, and writes it up. The problem is the word "decides". The agent decides what counts as enough, and on a large codebase enough arrives long before the review is complete. This use case replaces that decision with a workflow.
The free Code Quality package runs two assessments — ISO/IEC 5055 and Clean Code — as several hundred individual steps. The engine hands Claude Code one check at a time, waits for the findings, has them reviewed, and only then opens the next. The review is complete when the workflow says so, and the report cites file and line for every finding.
The facts
- ✓The Code Quality package is free and included with the Starter tier.
- ✓ISO/IEC 5055:2021 covers four measures — Maintainability, Performance Efficiency, Reliability and Security — each weakness its own step.
- ✓Clean Code runs twelve chapter workflows, each appending reviewed findings to a shared log.
- ✓Works with Claude Code, Codex and any MCP-capable client over streamable HTTP.
The problem
Where it goes wrong without rails
Free-form reviews are confident, partial, and different every time you run them.
Long reviews degrade: by the time the agent reaches the last module, the first one has fallen out of context.
Findings without a file and line are opinions, and a reviewer cannot act on an opinion.
How it works
What the engine does about it
- 1
Add one MCP server to Claude Code
An entry in .mcp.json pointing at the engine's streamable HTTP endpoint with an agent token. Claude Code now has the ccw_* tools alongside its own.
- 2
Start the review workflow
Claude Code calls ccw_start with the Code Quality workflow and the directory to review. From here the engine decides the order of events.
- 3
One check per step, reviewed before the next
Each weakness or chapter item arrives with its own instruction file. Findings go to a log on disk, not through the prompt, so the hundredth check is as sharp as the first. Each chapter loops through review until it passes.
- 4
A compiled report with the evidence
The compile step dedupes, ranks by severity and effort, and verifies that each recommendation is actionable. The raw findings log stays alongside, so the numbers can be audited.
Questions
Asked before buying
- Does this replace a human reviewer?
- It replaces the part a human should not be doing by hand — checking hundreds of items exhaustively — and gives the human a ranked, cited report to review instead. The judgement stays with you.
- How is this different from putting a review checklist in CLAUDE.md?
- A checklist in the prompt is advice; the agent can still decide it has done enough. Here the engine holds the checklist and will not open the next step until the current one has findings written down and reviewed.
- Can I review a pull request rather than a whole codebase?
- The Boy Scout Coding package reviews a change from three angles — architecture anti-patterns, OWASP and Clean Code — scoped to the changed lines, as part of making the change.
Start with
The packages that fit
- Code Quality →
Run a full ISO/IEC 5055 and Clean Code assessment of any codebase with your coding agent, every check its own verified step. Free with every CodyCody plan.
- Boy Scout Coding →
A code change by your coding agent: scoped, designed, approved at two human gates, reviewed from three angles, covered by tests — and the code left cleaner.
Every plan and what it includes is on the pricing page.