Skip to main content
Glama

Iris Code MCP launcher

Give coding agents your project's real code-quality rules, findings, safe fixes and gate results.

This repository contains the npm launcher and setup documentation for Iris Code's local MCP server. It starts the published @iris-code/cli package, which carries the implementation. The analysis engine's source is maintained separately and is not included here. The launcher declares the MIT license; this repository does not claim the whole Iris Code product is open source.

Install

Requires Node.js 18 or newer.

npx -y @iris-code/mcp

Add this to your client's MCP configuration:

{
  "mcpServers": {
    "iris_code": {
      "command": "npx",
      "args": ["-y", "@iris-code/mcp"]
    }
  }
}

Clients normally supply the current workspace root. For a client that does not provide MCP roots, append --root and your absolute project path to args. In JetBrains IDEs, use Tools | Iris Code | Set Up MCP Server from the installed Iris Code plugin.

Related MCP server: ci-guard-mcp

What agents can do

Tool

Purpose

iris_check

Located findings and code-health measurements

iris_config

Resolved project thresholds and rules

iris_fix_safe

Preview and apply provable mechanical fixes

iris_refactor_plan

Located refactor suggestions and a captured baseline

iris_verify_refactor

Verify improvement against a baseline

iris_schema

Real database tables, columns and relations

iris_explain

Rule details behind findings

iris_gate

Quality-gate result and failing rules

iris_check_dependency

Dependency advisory evidence

iris_check_package

Package risk before installation

Single-file workflows are Free and require no API key. Fresh project work requires sign-in and applicable access. Reopening owned evidence does not spend another project action. Paid access adds broader enforcement and project capabilities. See current pricing and the MCP guide.

Boundaries

Analysis runs locally. The server has no general shell-execution tool. Secret values are masked, and requested paths are confined to the project root, including symlink resolution. Safe fixes preview first; applying needs the preview's single-use token. Dependency and advisory lookups require network consent. Repository handoff policy and access checks still apply.

Support and privacy

Registry metadata release

Version 0.2.2 adds the official MCP Registry ownership name io.github.Daiveedjay/iris-code. Launcher behavior and the CLI dependency range are unchanged. The npm package's repository URL identifies the existing private release owner because npm trusted publishing requires it to match the workflow repository. This public repository supplies launcher source and documentation; npm publication still runs from the private release workflow.

Official MCP Registry identity: io.github.Daiveedjay/iris-code, published version 0.2.2. Verify the public registry metadata. The entry uses local stdio transport, not a hosted endpoint.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    Not graded
    maintenance
    Enables security scanning of code projects to identify common vulnerabilities like XSS, injections, SSRF, and path traversal issues. Provides local, offline scanning with severity-grouped results and actionable fix suggestions for improving code security.
    38 npm
    -
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables MCP clients to run deterministic, read-only local repository audits for risky GitHub workflows, undocumented environment variables, possible credentials, and conflicting dependency configuration, returning structured findings without sending source code to a service.
    63 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables a coding agent to get short, token-efficient answers about a project through grouped searches, focused symbol or section reads, and bounded read-only script output, with safety limits on paths, secrets, commands, and response size.
    3
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Enables AI coding agents to perform evidence-based, read-only audits of supported software projects by exposing bounded project inventory and static-analysis findings for discovery, code review, integration tracing, security, and tests. Reports are returned as Markdown or JSON directly in the tool response, with no code executed or files written.
    8
    38 npm
    MIT