# Iris Code

- [Iris Code: Keep AI-Assisted Code Up to Your Standards](https://docs.iriscode.co/index.md): Iris Code reads the code you didn't. Local, deterministic checks that catch secrets, copy-paste and complexity before anyone else sees them.
- [Quick Start: Install Iris Code, Scan Files, and Preview Gates](https://docs.iriscode.co/quickstart.md): Install Iris Code, read your first score, scan the project, and see what a gate would block. Two minutes, no account.
- [Install Iris Code: VS Code, JetBrains, and CLI Setup Guide](https://docs.iriscode.co/installation.md): Install Iris Code from your editor's marketplace, from a .vsix file, or as an npm package for terminals and CI.
- [Iris Code Playground: Run the Real Engine in Your Browser](https://docs.iriscode.co/playground.md): Try Iris Code on an editable multi-file project in your browser. The real analysis and gate run locally in the Playground.
- [Iris Code Pro: Workspace Scans, Hooks, and Full Enforcement](https://docs.iriscode.co/pro.md): Pro turns Iris Code from something that tells you about your code into something that stops bad code shipping. 14-day trial, no card.
- [File Analysis: Health Scores, Code Smells, and Secrets](https://docs.iriscode.co/features/file-analysis.md): What the File tab tells you about the file you're in: score, complexity, functions, smells, security patterns and secrets.
- [Review My Changes: Check Your Git Changes Before Anyone Else Does](https://docs.iriscode.co/features/change-review.md): Check exactly what you changed, before it reaches a teammate or a pull request. Free.
- [Workspace and Folder Analysis: Aggregate Scores and Trends](https://docs.iriscode.co/features/workspace-analysis.md): Score the whole project at once: hotspots, unused packages, issues, TODOs and trends over time.
- [Hardcoded Secrets: Two-Layer Credential Detection in Iris Code](https://docs.iriscode.co/features/hardcoded-secrets.md): Iris Code catches credentials in two ways: variables that look like secrets, and strings that are unmistakably keys.
- [Security Smell Detection: Nine Patterns Across Nine Languages](https://docs.iriscode.co/features/security-smells.md): Iris Code detects nine security anti-patterns in every supported language. Each finding reduces the health score, surfaces as a sidebar blocker, and can emit a squiggle via inline diagnostics.
- [Duplicate Code Detection: Find, Diff, and Gate on Copy-Paste](https://docs.iriscode.co/features/duplicate-detection.md): Finds copy-pasted blocks even after renaming and reformatting, shows both sides, and can fail a build on them.
- [Git History Secrets Scan: Find Credentials Your History Still Remembers](https://docs.iriscode.co/features/git-history-secrets.md): Deleting a key from a file doesn't delete it from your history. This finds the ones still sitting in old commits.
- [Quality Signals](https://docs.iriscode.co/features/quality-signals.md): The handful of things dragging your project down, ranked by density rather than raw count.
- [Inline Diagnostics: Squiggles and Problems Panel Entries](https://docs.iriscode.co/features/inline-diagnostics.md): Put selected Iris Code findings in the editor as squiggles and in the Problems panel. Off by default, on purpose.
- [Dependents Table: Audit npm, Go, Python, RubyGems, NuGet, Cargo, and Maven Packages](https://docs.iriscode.co/features/dependents-table.md): Open the Dependents Table in VS Code to audit every package for outdated versions and CVEs from the OSV.dev database. No token or rate-limit setup. Requires Iris Code Pro.
- [Supported Languages: TypeScript, JavaScript, Vue, Svelte, Go, Python, Ruby, C#, Java, Rust](https://docs.iriscode.co/features/language-support.md): Iris Code natively parses and scores TypeScript, JavaScript, Vue, Svelte, Go, Python, Ruby, C#, Java, and Rust with per-language function detection, import tracking, and debug-print flagging.
- [Gate Preview: Check Your Enforcement Posture for Free](https://docs.iriscode.co/enforcement/gate-preview.md): See how your project scores against all five presets before you install anything. Read-only, free, changes nothing.
- [Git Hook: Block Weak Code Before It Leaves Your Machine](https://docs.iriscode.co/enforcement/git-hook.md): A pre-push hook that checks your project before every push and blocks the ones that fall below your threshold.
- [Build Gate: Block Builds That Fall Below Your Threshold](https://docs.iriscode.co/enforcement/build-gate.md): Run an Iris Code health check before the compiler starts, so a failing build stops early instead of shipping.
- [GitHub Actions: Block Merges With Iris Code CI Enforcement](https://docs.iriscode.co/enforcement/github-actions.md): Run Iris Code on every push and pull request. Failing lines get annotated on the diff and the merge is blocked.
- [Slack Notifications for Gate Runs](https://docs.iriscode.co/enforcement/slack-notifications.md): Send Iris Code gate results to a Slack channel. Your CI builds the message and sends it, so your file paths never touch our servers.
- [Inline Suppressions: Silence a Finding with a Documented Reason](https://docs.iriscode.co/enforcement/suppressions.md): Silence one finding on one line without switching the rule off, and write down why you did it.
- [Iris Code Cloud: Audits That Run Without Your Editor Open](https://docs.iriscode.co/cloud/overview.md): Connect a GitHub repository once and Iris Code audits it on the events you choose, keeping every report pinned to the commit that produced it.
- [Connecting GitHub: The Iris Code App, Permissions, and Revoking Access](https://docs.iriscode.co/cloud/connect-github.md): Install the Iris Code GitHub App, choose which repositories it can audit, and understand exactly what it reads and what it never sees.
- [Audit Triggers: Merges, Pull Requests, and What Each One Costs](https://docs.iriscode.co/cloud/triggers.md): Every repository chooses what it is audited on. A merge costs one audit; a pull request costs one per update. Merges are on by default and pull requests are opt-in.
- [Scan Allowances: How Many Cloud Audits You Get, and How They Are Counted](https://docs.iriscode.co/cloud/allowances.md): Pro includes 50 cloud scans a month and a Teams workspace includes 100 per seat. Every audit counts one, whoever started it, and allowances never merge between workspaces.
- [Iris Code Teams: A Shared Standard and One Place to See It Held](https://docs.iriscode.co/teams/overview.md): A Teams workspace gives everyone Pro, publishes one standard your repositories are measured against, and keeps an audit trail a reviewer can read.
- [Rolling Iris Code Out to Your Team](https://docs.iriscode.co/teams/rollout.md): One page covering what a team lead hands to procurement and what they hand to engineers: what is purchased, what is installed, what is enforced, and what leaves your machines.
- [Teams Seats and Billing: Per-Seat Pricing, Seat Changes, and Renewals](https://docs.iriscode.co/teams/seats-and-billing.md): Teams is billed per seat from three seats up, priced by your billing country. Increases are quoted before anything is charged; reductions take effect at the next renewal.
- [Team Entitlement: How a Seat Grants Pro, and What a Personal Subscription Adds](https://docs.iriscode.co/teams/entitlement.md): A team seat grants Pro in your editor. A personal subscription is the only thing that cloud-audits your own repositories. Here is exactly how the two interact.
- [Configure Iris Code with .irisconfig.json - Presets and Rules](https://docs.iriscode.co/configuration/irisconfig.md): Drop a .irisconfig.json at your project root to share thresholds across your team. Covers presets, custom thresholds, gate limits, and severity overrides.
- [File naming conventions](https://docs.iriscode.co/configuration/file-naming.md): Configure Free path-aware file naming checks with ordered role overrides, baseline-aware rollout, ignore globs, suggestions, and built-in exemptions.
- [Config Studio: Build and Sync Your Iris Code Config Visually](https://docs.iriscode.co/configuration/config-studio.md): Config Studio is a visual editor in your account dashboard. Pick a preset, tune thresholds, and sync the resulting config to VS Code, JetBrains IDEs, or any VS Code fork with a diff preview.
- [Custom Scoring Weights: Tune the Health Score for Your Team](https://docs.iriscode.co/configuration/scoring-weights.md): Control how much each finding deducts from the health score via healthScoreWeights in .irisconfig.json. Amplify secrets, zero out noise. Requires Iris Code Pro.
- [Iris Code VS Code Settings Reference - All iris.* Options](https://docs.iriscode.co/configuration/vscode-settings.md): All iris.* settings available in VS Code's settings UI (Ctrl+,). Configure thresholds, detection toggles, and display options per machine.
- [Project Rules for AI Agents: Generate AGENTS.md from Your Config](https://docs.iriscode.co/agents/project-rules.md): iris rules writes your project's limits, naming convention and gate rules into AGENTS.md, CLAUDE.md, Cursor rules or Copilot instructions, so your coding agent follows your standards while it writes rather than after review.
- [MCP Server: Give Your AI Agent Your Real Code-Health Rules](https://docs.iriscode.co/agents/mcp.md): iris mcp serves Iris Code's analysis to Claude Code, Codex, Cursor, Windsurf, Copilot agent mode, Zed and JetBrains AI Assistant over the Model Context Protocol, so an agent works against your committed thresholds and gate rules instead of inferring a standard.
- [Editors: What Each One Supports](https://docs.iriscode.co/editors/overview.md): Iris Code runs in VS Code, its forks, JetBrains IDEs and the CLI. This page states exactly what each host supports and what it does not.
- [Iris Code in VS Code](https://docs.iriscode.co/editors/vscode.md): Install Iris Code in VS Code, sign in, and use the sidebar, Code Lens, status bar and detached panel.
- [Iris Code in Cursor, Windsurf, VSCodium, Trae and Positron](https://docs.iriscode.co/editors/forks.md): Iris Code installs into every VS Code fork from Open VSX and behaves identically, including sign-in.
- [Iris Code in JetBrains IDEs](https://docs.iriscode.co/editors/jetbrains.md): Install and use the Iris Code plugin in IntelliJ IDEA, WebStorm, GoLand, PyCharm and the rest of the JetBrains family, including the two install traps worth knowing about.
- [Neovim, Helix and Other LSP Editors](https://docs.iriscode.co/editors/lsp.md): Install iris-lsp, the standalone Iris Code language server, and get diagnostics, hover scores and quick fixes in any editor that speaks LSP.
- [Iris Code CLI: Code Health Enforcement from the Terminal](https://docs.iriscode.co/cli/overview.md): The @iris-code/cli package brings Iris Code health analysis to any terminal, build script, or CI pipeline. Fourteen commands cover scanning, gating, secrets, security smells, dependencies, CVEs, SBOMs, agent rules, Slack notifications, and hooks.
- [Iris Code CLI Command Reference](https://docs.iriscode.co/cli/commands.md): Full reference for all fifteen Iris Code CLI commands: iris check, iris secrets, iris security, iris deps, iris cve, iris sbom, iris todos, iris gate, iris slack, iris rules, iris mcp, iris report, iris hook, iris auth, and iris config.
- [Authenticate the Iris Code CLI with Browser or Token](https://docs.iriscode.co/cli/auth.md): Sign in to Iris Code CLI via browser OAuth for local development, or use IRIS_LICENCE_TOKEN for non-interactive CI runners. Credentials stored in ~/.iris/credentials.
- [Use Iris Code in CI Pipelines: GitHub Actions, GitLab, and Shell](https://docs.iriscode.co/cli/ci.md): Run iris gate as a CI enforcement step in GitHub Actions, GitLab CI, or any shell pipeline. Pass your licence via IRIS_LICENCE_TOKEN and fail builds that miss the threshold.
- [Iris Code VS Code Command Palette and Context Menu Reference](https://docs.iriscode.co/reference/commands.md): All Iris Code commands available via the VS Code command palette (Ctrl+Shift+P) and right-click context menus in the Explorer and editor.
- [Health Score and Complexity: How Iris Code Scores Your Code](https://docs.iriscode.co/reference/scoring.md): Iris Code calculates a 0–100 health score and a 1–10 complexity score per file. Health starts at 100 with points deducted per finding type.
- [Accuracy Benchmark: How Iris Code Measures Its Own Rules](https://docs.iriscode.co/trust/accuracy-benchmark.md): Iris Code measures every analysis rule against a labelled corpus and reports per-rule, per-language precision and recall. No single global accuracy number - just honest, checked-in measurements and a CI tripwire that blocks accuracy regressions.
- [Iris Code Security, Privacy, and Support](https://docs.iriscode.co/trust/security-and-support.md): Understand Iris Code's local-analysis boundary, network requests, workspace writes, credential storage, and private vulnerability-reporting process.
- [Iris Code Changelog: VS Code, JetBrains, and CLI Release Notes](https://docs.iriscode.co/changelog.md): Full release notes for the Iris Code VS Code extension, the JetBrains plugin, and the @iris-code/cli npm package. Updates ship automatically through the VS Code Marketplace, Open VSX, and the JetBrains Marketplace.