Using LintCat
Configuration
Everything is set on the dashboard. One model key per organization, and a few settings per repository.
Model key
Reviews run on your organization’s own Anthropic or OpenAI API key. An organization owner sets it under Settings in the dashboard sidebar; other members don’t see that page.
The key is stored encrypted and only the review service ever reads it back. The dashboard shows the provider and the last four characters, nothing more. Replacing the key takes effect on the next review; removing it stops reviews until a new one is added.
Repository settings
Each repository has a Settings page, linked from the repository on the dashboard. Anyone who can see the repository can view it; organization owners and people with admin or maintain access to the repository can change it.
| When reviews run | What happens |
|---|---|
| Every pull request | Default. Every pull request is reviewed when it is opened or reopened, and on every push. |
| On the ai-review label | A pull request is reviewed when it gets the label, and on every push while it carries it. |
| Off | Nothing is reviewed. The repository's past reviews stay on the dashboard. |
Models
Each repository uses the provider default unless you pick a model on its settings page. The choices follow the provider of the organization’s key:
| Provider | Models |
|---|---|
| Anthropic | claude-sonnet-5, claude-haiku-4-5, claude-sonnet-4-5 |
| OpenAI | gpt-5.6-luna, gpt-5.6-luna-mini |
Fixes
With Commit verified fixes off, the default, a finding’s fix arrives as a one-click suggested change on its review comment. Turn it on and LintCat commits the fixes to the pull request branch itself, in one commit.
Fixes are never force-pushed. If someone pushed while the review was running, the commit is skipped and the fixes arrive as suggestions instead.
What the App can access
GitHub shows these when you install the App. It never approves or merges a pull request, and it only writes file contents when you turn fixes on.
| Permission | Access | Used for |
|---|---|---|
| Contents | Read and write | Reads the files a review needs. Writes only to commit fixes, when you turn fixes on. |
| Pull requests | Read and write | Reads the pull request and posts the inline review comments. |
| Checks | Read and write | Publishes the AI PR Review check run. |
| Organization members | Read | Decides who can see the organization on the dashboard. |
| Metadata, email addresses | Read | Lists repositories and signs you in. |