Credentials. A full scan sends many files to your LLM provider, which can cost tokens and expose code, so scope it with --path first.
Who it is forA developer who inherited a repository and wants a first pass at its defects.
The problemA diff review is no help when the code you worry about has no recent changes.
The outcomeReview comments covering whole files or the directory you point it at.
What you need first
- Git 2.41 or newer
- Node.js and npm to install the CLI
- An API key for an LLM provider, unless you use Delegation Mode
Steps
- Install the CLI with
npm install -g @alibaba-group/open-code-reviewand configure a model withocr config providerandocr config model - Run
ocr scanin the repository to scan the entire repository - Run
ocr scan --path internal/agentto scan just a directory or specific files - If a scan is interrupted, run
ocr scan --resume - Run
ocr session listto see earlier sessions
Prompt for your agent
Using alibaba/open-code-review, run `ocr scan --path <directory>` on this repository and list the most serious findings first, with file and line. Resume with `ocr scan --resume` if it is interrupted.
Caveat. The README notes recall is lower than general-purpose agents by design, favoring precision over noise.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for alibaba/open-code-review and "Audit an unfamiliar codebase with ocr scan"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer