IntegrationsBitbucket Cloud and Bitbucket Data Center

AI code review for Bitbucket pull requests

MergeHarbor reviews Bitbucket pull requests with the context of your whole codebase, posts verified findings as inline comments, and reports a build status you can require. It connects to Bitbucket Cloud and to Bitbucket Data Center.

Start free trial Bitbucket Cloud setup

14 days of the Team plan, no card needed.

.mergeharbor.yml

review: trigger: pushes tier: standard tier_rules: - name: Release branches conditions: - { field: base_branch, op: include, values: ["release/*"] } tier: deep status_check: enabled: true

What MergeHarbor does on Bitbucket Cloud and Bitbucket Data Center

Inline comments and a summary: Findings land as inline comments on the changed lines, anchored on Data Center, with a summary comment that describes the change and lists what was found.
A build status you can require: Each review reports a build status. The merge gate reports its own, MergeHarbor / merge gate, which you can require before a pull request merges.
Pull requests from forks: On Bitbucket Cloud, pull requests opened from forks are reviewed like any other.
Commands without the people picker: Bitbucket turns @ into a people picker, so a comment that starts with mergeharbor review, without the @, is a command too. Questions still need the @mergeharbor mention.
Codebase-aware and verified: The reviewer reads callers, related code and history from the repository index, and a second pass tries to disprove each finding before anything is posted.
Feedback in the console: Bitbucket has no reactions API, so rate MergeHarbor's comments in the console. Fixes and dismissals feed learning on every code host.

Connect Bitbucket

Bitbucket Cloud
Choose Bitbucket and authorize MergeHarbor for your workspace, or use a workspace, project or repository access token with Repositories: Read, Pull requests: Write and Webhooks: Read and write.
Bitbucket Data Center
Create a project or repository HTTP access token with write permission, choose Bitbucket Data Center, enter your instance URL and paste the token.
Choose repositories
Pick the repositories to review. MergeHarbor registers the webhooks itself and keeps one per repository, removing the hooks it added earlier when it registers again.

Read the full bitbucket Cloud setup

Bitbucket Cloud and Data Center at a glance

Bitbucket Cloud	OAuth, or a workspace, project or repository access token. Workspace access tokens need Bitbucket Premium.
Bitbucket Data Center	Generally available. A project or repository HTTP access token with write permission.
Why write access	To post comments, approve pull requests and manage webhooks. Bitbucket Cloud requires repository write for pull request write.
Repository names	Data Center repositories are identified as PROJECT/repository
Private networks	Data Center instances on a private network need a self-hosted MergeHarbor deployment

Documentation:Bitbucket Cloud Bitbucket Data Center Code host permissions Merge gate Learning and review quality

Other code hosts

Running your code host on a private network? See self-hosted AI code review.

Guide · 8 min readHow to reduce false positives in AI code reviewWhy AI reviewers post wrong or unwanted comments, and the settings, rules and feedback loops that cut the noise without hiding real bugs.Read the guide Guide · 8 min readMerge gates: safe-to-merge checks for pull requestsWhat a merge gate is, how it turns findings, tests, risk and approvals into one safe-to-merge verdict, and how to roll one out on each code host.Read the guide

Frequently asked questions

Is Bitbucket Data Center supported?

Yes. Connect with a project or repository HTTP access token with write permission and your instance URL. Reviews appear as anchored inline comments with a build status. Instances on private networks need a self-hosted MergeHarbor deployment.

Is Bitbucket Cloud generally available?

On Bitbucket Cloud, MergeHarbor posts inline comments, a summary comment and a build status, and reviews pull requests from forks.

How do we stop a pull request from merging when the review finds a problem?

Require the MergeHarbor / merge gate build status. The merge gate starts in advisory mode, which reports without failing; switch it to enforce when you want a failing verdict to fail the status.

Why do my @mergeharbor comments open a people picker?

Bitbucket's editor does that for every @. Start the comment with mergeharbor review, mergeharbor remember or another command without the @, and MergeHarbor treats it as a command. Questions still need the @mergeharbor mention.

How does MergeHarbor learn on Bitbucket without reactions?

Rate comments in the MergeHarbor console. MergeHarbor also counts a comment as acted on when its lines change before the pull request merges, and learns from dismissals and their reasons.

How do we try it?

Sign up and connect a code host. Every new organization gets the Team plan free for 14 days with no card, including the Deep review tier and the merge gate. If no one subscribes, reviews pause when the trial ends and nothing is deleted.

Have another question? Ask our support team