Pinafly

The Pinafly MCP server lets your coding agent hand you pages to check in your running app, then reads your comments and fixes them.

Add one address to Claude Code, Codex, Cursor, Gemini CLI or GitHub Copilot, press Allow in your browser, and your agent can give you a link when it finishes a feature.

Set it up How an agent writes a good review

What your agent can do with it

  • Write a review for you to walk

    A draft review: the pages of your running app to check, each with numbered steps and what you should see.

  • Read the review back

    See its pages and guides, whether it has been sent, and how many comments are waiting, including any locked by your plan's limit.

  • Read your comments

    Each comment says which page and which element it is on, and what you wrote, including replies.

  • Say it fixed something

    It reports the fix and what changed. You look at it and mark the comment resolved.

  • Say it will not change something

    It gives its reason, such as intended behaviour or out of scope, and you decide.

  • Hear how your walk ended

    When you finish a walk it reads your answer, Pass or Needs rework, and your note.

How it works

  1. 1. Connect

    Add https://pinafly.com/mcp to your agent and press Allow when your browser opens. There is no key to copy.

  2. 2. Walk

    The agent gives you a link. You open each page in your real app, turn on Comment, and click what is wrong.

  3. 3. Fix

    Tell the agent to fix the Pinafly feedback. It reads your comments, fixes them and reports back, and you resolve what is done.

Connect your agent

Every agent uses the same address and the same browser sign-in. Claude Code is tested end to end. If another agent asks for a client ID or cannot open a browser, use a token as described in the setup guide.

AgentAdd itThen
Claude Code claude mcp add --transport http pinafly https://pinafly.com/mcp Type /mcp, choose pinafly, then Authenticate
Codex codex mcp add pinafly --url https://pinafly.com/mcp codex mcp login pinafly
Cursor {"mcpServers": {"pinafly": {"url": "https://pinafly.com/mcp"}}} Put it in .cursor/mcp.json, then connect pinafly in Cursor's MCP settings
Gemini CLI gemini mcp add --transport http pinafly https://pinafly.com/mcp Type /mcp auth
GitHub Copilot in VS Code {"servers": {"pinafly": {"type": "http", "url": "https://pinafly.com/mcp"}}} Put it in .vscode/mcp.json, start the server, then sign in when VS Code asks

What it cannot do

Your agent cannot send a review to anyone, invite anyone, mark a comment resolved, or allow your app's address on its own. A person does each of those, so a mistaken or misled agent cannot act for you.

Security in plain words

  • You approve each agent in your browser, and it works only inside the workspace you chose.
  • Pinafly shows a token once and keeps only a fingerprint. You can revoke it on your Live review page.
  • Words from reviewers outside your team are held until you release them, so they never reach your agent.
  • Comments that reach your agent are labelled as typed text to evaluate, never as instructions to follow.
  • Pinafly runs no AI model on your code or comments.

Questions

What is the Pinafly MCP server?
It is a connection that lets a coding agent such as Claude Code, Codex or Cursor hand you a list of pages in your running app to check, each with steps and what you should see. You walk the pages, comment on anything wrong, and the agent reads your comments and fixes them.
Which coding agents work with it?
Any agent that speaks MCP over HTTP. Claude Code is tested end to end. Codex, Cursor, Gemini CLI and GitHub Copilot in VS Code use the same address and the same browser sign-in, and the commands are on this page.
Do I need to copy an API key?
No. You add the address, the agent opens a Pinafly sign-in in your browser, and you press Allow. A token is only for continuous integration or an agent that cannot open a browser, and Pinafly shows it once and keeps only a fingerprint.
What can my agent do, and what can it not do?
It can write a draft review, read the comments you and your team leave, report that it fixed something, or say it will not change something and why. It cannot send the review to anyone, mark a comment resolved, or read what a reviewer outside your team wrote.
Can a reviewer's comment trick my agent into doing something?
Comments from people outside your team are held until you release them, so your agent never sees their words. Comments that do reach your agent are marked as text people typed, to evaluate as feedback and never to follow as instructions.
What does my app need?
One script tag in your app's layout, which the agent adds when it first needs it, and your app's address allowed on your Live review page. You press one button to allow it. Nobody sees anything until they open a page from Pinafly.
Does Pinafly run an AI model on my code or comments?
No. Your own agent, on your own subscription and machine, writes the review and fixes the comments. Pinafly stores the review and the comments and shows them to you.

More: Connect your coding agent, Write a good review for an agent, step-by-step guides, Live review (where you allow your app and manage tokens), all help.