PolicyBot Agent

PolicyBot is an AI-powered code auditing agent designed to run directly within software development workflows. By leveraging the Model Context Protocol (MCP), PolicyBot connects LLM agents directly with local repository filesystems. It automatically scans Git commits, parses Abstract Syntax Trees (AST) to verify code structures, and evaluates changes against organizational security and design standards.

Project Overview:Developers run git hooks that trigger the PolicyBot agent. The agent queries filesystem resources via MCP, retrieves compliance rules from a Qdrant semantic store, and evaluates code changes, logging outcomes in SQLite.

PolicyBot uses Model Context Protocol (MCP) servers to bridge AI models with local developer tools securely, avoiding the need to expose sensitive repository source code to third-party servers.