---
title: "Baz | AI code review, from plan to production"
description: "Review plans, pull requests, security, and merge readiness with AI agents that understand your entire codebase. Catch the bugs single-file tools miss."
canonical: "https://baz.ai/"
---

# Baz | AI code review, from plan to production

Review plans, pull requests, security, and merge readiness with AI agents that understand your entire codebase. Catch the bugs single-file tools miss.

## Product

- [Baz AI Code Review | Agents that know your repos](https://baz.ai/product/agents): AI code review with five focused agents, cross-repo context, and an inspectable record of every run. Fewer comments, clearer evidence, one workspace to resolve and merge.
- [Baz Security Review | AI SAST that proves exploitability](https://baz.ai/product/security): AI security review with cyber-capable models: Advanced Security, SAST-inside, agent security, and full codebase scans. Compared with legacy SAST like Semgrep and Snyk Code.
- [Baz Standards & Conventions | Steer every coding agent](https://baz.ai/product/standards): Turn CLAUDE.md, AGENTS.md, Cursor rules, and Skills into enforced review standards. Skills Maintainer keeps them true, and reviewer memory learns your team's calls.
- [Baz AI SRE | Production errors to reviewed fix PRs](https://baz.ai/product/sre): The Baz AI SRE picks up production errors from Datadog, Sentry, and Coralogix, finds the root cause in the code that was deployed, and opens a tested fix PR or escalates.
- [Baz Merge Automation | Merger, rules, and review metrics](https://baz.ai/product/merger): Merger decides which pull requests merge, which are rejected, and which need a human. Rules set the bar, auto-resolve and auto-approve clear the routine, and Insights measures the result.
- [Pricing](https://baz.ai/pricing.md): seat-based pricing plus usage-based Engineering Work Credits.
- [Enterprise](https://baz.ai/enterprise): controls and deployment options for large organizations.

## Developer resources

- [OpenAPI specification](https://baz.ai/openapi.json): Live REST API schema. API requests go to https://baz.co; API-key access is limited to the endpoints documented in API Keys.
- [API catalog](https://baz.ai/.well-known/api-catalog): REST API and MCP service references.
- [MCP server](https://baz.co/mcp): Connect through an MCP client using OAuth, or an API key for clients without interactive sign-in.
- [OAuth resource metadata](https://baz.co/.well-known/oauth-protected-resource): Authentication discovery published by the resource server on baz.co.
- [Baz plugin repository](https://github.com/baz-scm/baz-plugin): Existing plugin manifests, skills and Cursor rules. Follow the installation documentation for your client.
- [Plugin installation](https://baz.ai/docs/basics/plugins): Claude Code, OpenAI Codex, Cursor and other MCP clients.
- [API Keys](https://baz.ai/docs/account/api-keys): Keys carry their creator's permissions on the supported endpoints; there is no separate scope picker.

## More

- [Site index](https://baz.ai/llms.txt)
- [Sitemap](https://baz.ai/sitemap.xml)