← Back to Docs
Webhooks

Automatic reviews on every pull request

How does VibeCop review pull requests automatically?

When you connect a repository, VibeCop registers a GitHub webhook that fires on every pull request open and synchronize event. The webhook receiver verifies the request's signature, then enqueues a review run — no manual trigger needed once the repository is connected.

Is webhook auto-review a Pro-only feature?

No — webhook auto-reviews require an active VibeCop plan, not a specific tier. Every plan today, including Free Trial, grants the same feature set at the entitlement layer; pricing pages may present webhook reviews as a Pro highlight, but the runtime does not gate the feature above Free Trial.

What is a hook token, and do I need one?

Hook tokens are separate from the GitHub PR webhook — they authenticate events from AI coding tools (like Claude Code) back to VibeCop, not GitHub pull request reviews. Generate and manage them from VibeCop Settings; they are gated by the same "requires an active plan" entitlement as webhook reviews.

What happens if a webhook fires too often?

Each repository is capped at a configurable number of webhook-triggered review runs per day (10 by default) to contain cost from unattended automatic scans. Manual and nightly-scheduled scans are unaffected by this cap — it applies only to PR-open and PR-sync webhook triggers.

Related docs
Getting StartedCLIDetectors
Webhooks & GitHub Integration