Provides coding agents with local code-quality rules, findings, safe fixes, and quality-gate results for project analysis.
Also known as Daiveedjay/iris-code-mcp, iris-code-mcp, @iris-code/mcp
- Stars
- 0
- Tools
- —
- Downloads, 30 days
- —
- Latest version
- 0.2.2
- Last commit
- Oct 28, 2026
- License
- MIT
What is Iris Code MCP?
Iris Code provides coding agents with local code-quality rules, findings, safe fixes, and quality-gate results for project analysis.
Summary generated from the project's README
About Iris Code MCP server
Iris Code provides coding agents with direct access to local code-quality rules, findings, and quality-gate results. It operates as a local MCP server using stdio transport, which developers can set up by adding the npx command to their client configuration. While single-file workflows are free and do not require an API key, starting work on new projects requires a sign-in.
Agents use specific tools to interact with the codebase, such as iris_check for health measurements and iris_fix_safe for applying mechanical fixes. The server also provides iris_schema to reveal database tables and relations, alongside iris_gate to report failing rules. To maintain security, the analysis runs locally without general shell-execution capabilities, masks secret values, and confines all path requests to the project root. This setup allows AI clients to perform deep project analysis while adhering to established quality thresholds and dependency advisories.
What you can do with it
- 1Apply automated code fixesAsk the agent to preview and implement mechanical fixes for identified code issues.
- 2Analyze database structuresRequest a detailed view of the actual database tables, columns, and their relations.
- 3Evaluate quality gate statusHave the agent check if the current project meets all required quality-gate rules.
- 4Assess package security risksInstruct the agent to check for risks in a package before it is installed.
Written from the project's README. Every use case is checked against a quote from it.
How to install Iris Code MCP
Formats verified 10 Nov 2026Install Iris Code MCP in Claude Code
$ claude mcp add iris-code-mcp -- npx -y @iris-code/mcpInstall Iris Code MCP in Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"iris-code-mcp": {
"command": "npx",
"args": [
"-y",
"@iris-code/mcp"
]
}
}
}Install Iris Code MCP in VS Code
.vscode/mcp.json
{
"servers": {
"iris-code-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@iris-code/mcp"
]
}
}
}Install Iris Code MCP in Claude Desktop
claude_desktop_config.json
{
"mcpServers": {
"iris-code-mcp": {
"command": "npx",
"args": [
"-y",
"@iris-code/mcp"
]
}
}
}Install Iris Code MCP in Codex
~/.codex/config.toml
[mcp_servers.iris-code-mcp] command = "npx" args = ["-y", "@iris-code/mcp"]
Install Iris Code MCP in Gemini CLI
~/.gemini/settings.json
{
"mcpServers": {
"iris-code-mcp": {
"command": "npx",
"args": [
"-y",
"@iris-code/mcp"
]
}
}
}Automated checks
Ran Nov 14, 2026Full report →Passed our automated checks. That is not a security audit: read the code and give the server the narrowest access it needs. How checks work
- Source repository linked and reachabledaiveedjay/iris-code-mcp is public and reachablegithub.com/daiveedjay/iris-code-mcp ↗Pass
- Package names this repository as its source@iris-code/mcp names git+https://github.com/Daiveedjay/Iris-VSCode-Extension.git as its sourcenpmjs.com/package/@iris-code/mcp ↗Finding
- Build provenance (Sigstore attestation)No build attestation published for this releaseNot checked
- Open source license (OSI)MITspdx.org/licenses/MIT.html ↗Pass
- Commit or release in the last yearLast commit or release 2026-10-28github.com/daiveedjay/iris-code-mcp ↗Pass
- OpenSSF ScorecardNot checked
- Package name not close to a popular packageNo popular package one edit away from @iris-code/mcpPass
- No critical advisory in the package or its dependencies2 resolved dependencies checked; no critical advisoryosv.dev ↗Pass
- No hidden instructions to the model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
- Destructive tools are labelledNot checked
- Remote endpoint answers the MCP handshakeNot checked
README
View on GitHubIris Code MCP launcher
Give coding agents your project's real code-quality rules, findings, safe fixes and gate results.
This repository contains the npm launcher and setup documentation for Iris Code's local MCP server. It starts the published @iris-code/cli package, which carries the implementation. The analysis engine's source is maintained separately and is not included here. The launcher declares the MIT license; this repository does not claim the whole Iris Code product is open source.
Install
Requires Node.js 18 or newer.
npx -y @iris-code/mcp
Add this to your client's MCP configuration:
{
"mcpServers": {
"iris_code": {
"command": "npx",
"args": ["-y", "@iris-code/mcp"]
}
}
}
Clients normally supply the current workspace root. For a client that does not provide MCP roots, append --root and your absolute project path to args. In JetBrains IDEs, use Tools | Iris Code | Set Up MCP Server from the installed Iris Code plugin.
What agents can do
| Tool | Purpose |
|---|---|
iris_check |
Located findings and code-health measurements |
iris_config |
Resolved project thresholds and rules |
iris_fix_safe |
Preview and apply provable mechanical fixes |
iris_refactor_plan |
Located refactor suggestions and a captured baseline |
iris_verify_refactor |
Verify improvement against a baseline |
iris_schema |
Real database tables, columns and relations |
iris_explain |
Rule details behind findings |
iris_gate |
Quality-gate result and failing rules |
iris_check_dependency |
Dependency advisory evidence |
iris_check_package |
Package risk before installation |
Single-file workflows are Free and require no API key. Fresh project work requires sign-in and applicable access. Reopening owned evidence does not spend another project action. Paid access adds broader enforcement and project capabilities. See current pricing and the MCP guide.
Boundaries
Analysis runs locally. The server has no general shell-execution tool. Secret values are masked, and requested paths are confined to the project root, including symlink resolution. Safe fixes preview first; applying needs the preview's single-use token. Dependency and advisory lookups require network consent. Repository handoff policy and access checks still apply.
Support and privacy
Registry metadata release
Version 0.2.2 adds the official MCP Registry ownership name io.github.Daiveedjay/iris-code. Launcher behavior and the CLI dependency range are unchanged. The npm package's repository URL identifies the existing private release owner because npm trusted publishing requires it to match the workflow repository. This public repository supplies launcher source and documentation; npm publication still runs from the private release workflow.
Official MCP Registry identity: io.github.Daiveedjay/iris-code, published version 0.2.2. Verify the public registry metadata. The entry uses local stdio transport, not a hosted endpoint.
Iris Code MCP questions
How do I add Iris Code MCP to Claude Code?
Run claude mcp add iris-code-mcp -- npx -y @iris-code/mcp in your terminal. Add --scope user to make it available in every project.
How do I add Iris Code MCP to Cursor?
Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.
Does using Iris Code require an API key?
Single-file workflows are free and do not require an API key, but fresh project work requires sign-in.
Is the analysis performed in the cloud?
No, the analysis runs locally on your machine.
How do I install the server?
You can install it using the command npx -y @iris-code/mcp.