Iris Code MCP
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
Iris Code MCP launcher
Give coding agents your project's real code-quality rules, findings, safe fixes and gate results.
This repository contains the npm launcher and setup documentation for Iris Code's local MCP server. It starts the published @iris-code/cli package, which carries the implementation. The analysis engine's source is maintained separately and is not included here. The launcher declares the MIT license; this repository does not claim the whole Iris Code product is open source.
Install
Requires Node.js 18 or newer.
npx -y @iris-code/mcpAdd this to your client's MCP configuration:
{
"mcpServers": {
"iris_code": {
"command": "npx",
"args": ["-y", "@iris-code/mcp"]
}
}
}Clients normally supply the current workspace root. For a client that does not provide MCP roots, append --root and your absolute project path to args. In JetBrains IDEs, use Tools | Iris Code | Set Up MCP Server from the installed Iris Code plugin.
Related MCP server: ci-guard-mcp
What agents can do
Tool | Purpose |
| Located findings and code-health measurements |
| Resolved project thresholds and rules |
| Preview and apply provable mechanical fixes |
| Located refactor suggestions and a captured baseline |
| Verify improvement against a baseline |
| Real database tables, columns and relations |
| Rule details behind findings |
| Quality-gate result and failing rules |
| Dependency advisory evidence |
| Package risk before installation |
Single-file workflows are Free and require no API key. Fresh project work requires sign-in and applicable access. Reopening owned evidence does not spend another project action. Paid access adds broader enforcement and project capabilities. See current pricing and the MCP guide.
Boundaries
Analysis runs locally. The server has no general shell-execution tool. Secret values are masked, and requested paths are confined to the project root, including symlink resolution. Safe fixes preview first; applying needs the preview's single-use token. Dependency and advisory lookups require network consent. Repository handoff policy and access checks still apply.
Support and privacy
Registry metadata release
Version 0.2.2 adds the official MCP Registry ownership name io.github.Daiveedjay/iris-code. Launcher behavior and the CLI dependency range are unchanged. The npm package's repository URL identifies the existing private release owner because npm trusted publishing requires it to match the workflow repository. This public repository supplies launcher source and documentation; npm publication still runs from the private release workflow.
Official MCP Registry identity: io.github.Daiveedjay/iris-code, published version 0.2.2. Verify the public registry metadata. The entry uses local stdio transport, not a hosted endpoint.
This server cannot be deployed
Maintenance
Related MCP Connectors
Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.
Run verified read-only code tools: quant diagnostics + agent-ops preflight, no source exposure.
Scores your code across 12 areas, with findings, fix prompts, and re-assessment in your AI agent
Code intelligence platform for AI agents. 20 tools for architecture, security & impact analysis.
Related MCP Servers
- AlicenseNot gradedqualityNot gradedmaintenanceEnables security scanning of code projects to identify common vulnerabilities like XSS, injections, SSRF, and path traversal issues. Provides local, offline scanning with severity-grouped results and actionable fix suggestions for improving code security.38 npm-
- AlicenseNot gradedqualityAmaintenanceEnables MCP clients to run deterministic, read-only local repository audits for risky GitHub workflows, undocumented environment variables, possible credentials, and conflicting dependency configuration, returning structured findings without sending source code to a service.63 npmMIT
- AlicenseAqualityAmaintenanceEnables a coding agent to get short, token-efficient answers about a project through grouped searches, focused symbol or section reads, and bounded read-only script output, with safety limits on paths, secrets, commands, and response size.3MIT
- AlicenseBqualityCmaintenanceEnables AI coding agents to perform evidence-based, read-only audits of supported software projects by exposing bounded project inventory and static-analysis findings for discovery, code review, integration tracing, security, and tests. Reports are returned as Markdown or JSON directly in the tool response, with no code executed or files written.838 npmMIT