iridium-mcp-server

MCP server for AI agent security guardrails — blocks vulnerable imports at generation time.

Install

pip install iridium-mcp-server

Cursor setup

Add to your MCP config (see src/iridium_mcp/cursor_config.json):

{
  "mcpServers": {
    "iridium": {
      "command": "iridium-mcp-server",
      "env": {
        "IRIDIUM_API_URL": "https://api.iridium.example.com"
      }
    }
  }
}

No API key required for anonymous tier (rate-limited).

Tools (Phase 2)

Behavior

• Fail-open: API 429/5xx never blocks the agent — returns degraded: true
• Background warm-index: indexes workspace on startup before first tool call
• Parent heartbeat: exits cleanly when MCP parent process dies
• Audit log: writes to .iridium/audit.log

Development

uv sync
uv run pytest packages/iridium-mcp-server/tests -v