---
title: "Kiwi for Codecov"
description: "Have the agent on a Kiwi step read a pull request's coverage change from the Codecov API and return it with the step's outputs."
canonical: "https://kiwiflow.io/integrations/codecov"
---

# Kiwi for Codecov

Have the agent on a Kiwi step read a pull request's coverage change from the Codecov API and return it with the step's outputs.

- Your agent works in Codecov through its own connection. Kiwi does not call Codecov and never holds its credentials.
- A workflow skill can list Codecov among the tools it requires. When you supply your agent's available tools to a skill check and Codecov is not among them, the check reports `SK15-UNSUPPORTED-TOOL`.
- A project Admin can add links to Codecov, with notes, under Connections and bind them to the steps that use them. The agent reads them with `list_connections`.
- The agent can report the tools and plugins it ran with, including its Codecov connection, with `report_configuration`.
- The agent submits links to its work in Codecov as the step's outputs. People review them, and sign-off stays with the people your workflow names.

## What your agent can do in Codecov

- Read the coverage totals of a repository at a branch or commit.
- Compare coverage between a pull request's base and head commits.
- Reach repositories on GitHub, GitLab or Bitbucket through the service part of the API path.

## Set up

### 1. Connect your agent to Kiwi

Add Kiwi's hosted MCP server, `https://kiwiflow.io/mcp`, to your coding agent.

- [Coding agents](https://kiwiflow.io/integrations#agent)
- [Quickstart](https://docs.kiwiflow.io/quickstart#connect-your-agent)

### 2. Connect your agent to Codecov

Give your agent access to the Codecov API as its documentation describes. The credentials stay with your agent.

- [Codecov documentation](https://docs.codecov.com/reference/overview)

### 3. Example skill

Publish instructions like these as a workflow skill that lists Codecov among its required tools.

```
Start from the repository and the pull request number in the assignment.
Read the Codecov comparison for the pull request with the API token.
Record the head coverage and its change against the base as outputs.
If the comparison is not ready, stop and report a blocker to the step
owner; the assigned reviewer decides whether a coverage drop is allowed.
```

## More code quality and security integrations

- [Kiwi for SonarQube](https://kiwiflow.io/integrations/sonarqube.md): Have the agent on a Kiwi step read the SonarQube quality gate and issues for its change through the SonarQube MCP server.
- [Kiwi for Snyk](https://kiwiflow.io/integrations/snyk.md): Have the agent on a Kiwi step scan its code and dependencies for vulnerabilities through the MCP server in the Snyk CLI.
- [Kiwi for Semgrep](https://kiwiflow.io/integrations/semgrep.md): Have the agent on a Kiwi step scan the code it changed for security issues with Semgrep through the Semgrep CLI's MCP server.
- [Kiwi for CodeRabbit](https://kiwiflow.io/integrations/coderabbit.md): Have the agent on a Kiwi step review its own changes with the CodeRabbit CLI and fix the findings before it submits them.
- [Kiwi for Socket](https://kiwiflow.io/integrations/socket.md): Have the agent on a Kiwi step check the Socket scores of a dependency before adding it, through Socket's MCP server.

- [Get started](https://kiwiflow.io/get-started)
- [Read the setup guide](https://docs.kiwiflow.io/other-tools)