Codluma is designed to be operational before you finish your morning coffee. No agents to install, no YAML to write, no infrastructure to manage.
1
Create your accountHead to codluma.ai/signup. The free tier is permanent — no credit card required until you choose to upgrade.
2
Connect your Git providerGo to Settings → Integrations and click Connect GitHub or Connect GitLab. Authorize the OAuth app for your organization. This takes under 60 seconds.
3
Enable repositoriesOpen Repositories, find the repos you want monitored, and toggle them on. Changes take effect immediately.
4
Open a pull requestCreate or update any PR in an enabled repository. Within seconds Codluma posts inline review comments directly on the PR — no dashboard visit needed.
5
Trigger a failure analysisPush a commit that breaks a CI/CD pipeline, or navigate to any recent failed run in the Codluma dashboard and click Explain Failure. You'll receive a plain-English root-cause analysis in under 10 seconds.
Tip
Codluma automatically reviews every new PR in enabled repos — you don't need to manually trigger anything after initial setup.
Codluma uses a GitHub App — not personal access tokens — to access your repositories. GitHub Apps are scoped to specific repos and organizations, can be revoked independently of any user account, and produce audit log entries for every action they perform.
Installation steps
1
Start from SettingsNavigate to Settings → Integrations → GitHub.
2
Install the GitHub AppClick Install GitHub App. GitHub will prompt you to select which organizations and repositories to grant access to.
3
Confirm permissionsReview the permission request (see table below) and click Install.
4
Select repositoriesToggle on the repositories you want reviewed under Repositories.
Required GitHub permissions
Permission
Level
Why it is needed
Pull requests
Read & write
Post inline review comments and summary on each PR
Contents
Read
Fetch the diff of changed files for analysis
Commit statuses
Read & write
Set a pass/fail status check on the PR
Metadata
Read
List repositories and basic org information (required by all GitHub Apps)
Webhooks
Read
Receive events when PRs are opened, updated, or closed
Note
Codluma requests the minimum permissions required to function. We never request write access to repository contents — we can read diffs but cannot push code.
GitHub Enterprise Server
Self-hosted GitHub Enterprise Server (GHES) is supported on Business and Enterprise plans. Minimum supported GHES version: 3.6.
Codluma integrates with GitLab using a Group-level access token— a service credential scoped to your GitLab group rather than tied to any individual user account.
Creating the access token
1
Open your GitLab groupNavigate to Settings → Access Tokens.
2
Create a tokenSet a descriptive name (reviewops-ai), choose an expiry date, and select the scopes below.
3
Copy the tokenGitLab shows the token once — copy it immediately.
4
Paste into CodlumaIn Settings → Integrations → GitLab, paste the token and your GitLab base URL, then click Verify & Save.
Required GitLab token scopes
Scope
Why it is needed
api
Access the GitLab REST API to fetch MR diffs and post review notes
read_repository
Read repository contents and file trees
write_repository
Not required — Codluma never pushes code
GitLab Self-Managed
Self-managed GitLab instances are supported on Business and Enterprise plans. Minimum supported GitLab version: 15.0. GitLab.com SaaS is supported on all plans.
Warning
If your self-managed GitLab instance sits behind a firewall, you will need to allow outbound webhooks to https://hooks.codluma.ai.
Codluma connects to Azure DevOps using a Personal Access Token (PAT) tied to a service account. Azure DevOps and its pipelines are available on all plans.
Creating the Personal Access Token
1
Sign in to Azure DevOpsGo to User Settings → Personal Access Tokens (top-right avatar menu).
2
Create a new tokenSet a descriptive name (reviewops-ai), select your organisation, and set an expiry. Grant these scopes:
3
Copy the tokenAzure DevOps shows the token once — copy it before closing the dialog.
4
Paste into CodlumaNavigate to Settings → Integrations → Azure DevOps, enter your organisation URL (e.g. https://dev.azure.com/my-org) and paste the PAT.
PATs in Azure DevOps expire. Codluma will send you an email notification 7 days before your token expires so you can rotate it without any coverage gap.
Bitbucket integration uses an Atlassian API Token associated with your Atlassian account. Bitbucket and Bitbucket Pipelines are available on all plans.
Creating the API Token
1
Go to id.atlassian.comSign in and navigate to Security → API tokens → Create API token.
2
Label the tokenUse a recognisable name like Codluma. Atlassian API tokens don't have configurable scopes — they inherit the permissions of your Atlassian account.
3
Copy the tokenYou'll only see it once.
4
Paste into CodlumaGo to Settings → Integrations → Bitbucket. Enter your Atlassian email address and the API token, then click Verify & Save.
5
Select workspaces and enable repositoriesAfter verification, choose which Bitbucket workspaces to connect and toggle on individual repositories.
Note
To use Bitbucket Pipelines failure analysis, make sure the Atlassian account associated with the API token has read access to pipeline runs in the connected workspace.
Codluma is a team tool. Every member of your engineering team can view reviews, failure analyses, and analytics without each person needing to configure integrations.
Roles & permissions
Role
View reviews
Configure repos
Manage billing
Manage members
Owner
✓
✓
✓
✓
Admin
✓
✓
✗
✓
Member
✓
✗
✗
✗
Viewer
✓
✗
✗
✗
Sending invitations
1
Open Team SettingsNavigate to Settings → Team.
2
Enter email addressesEnter one or more work email addresses, separated by commas, and select a role.
3
Send invitesClick Send Invites. Each recipient gets a secure sign-up link valid for 72 hours.
4
Track acceptanceThe Team page shows Pending until the invite is accepted. You can resend or revoke pending invites at any time.
Tip
You can enforce SSO-only login so team members must authenticate through your identity provider. See the SSO / SAML section under Configuration.
We use cookies and analytics to understand how you interact with Codluma and improve your experience. We never sell your data. See our Privacy Policy and Terms for details.