Kiro IDE module

[bpmct]

A discussion dedicated to the Kiro IDE module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
12 / 17	25 / 25	20 / 20	N/A	10 / 10	93 / 100

Drilldown

Presentation & Onboarding — 12 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for default usage, opening in a specific directory, and configuring MCP servers. Each example is complete and demonstrates sensible defaults.
Visual preview	5	0	README references an icon file (icon: ../../../../.icons/kiro.svg) but does not embed an actual image, GIF, or video showing the module in action.

IDE Integration — 25 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	Module uses vscode-desktop-core which provides coder_app support. The coder_app_slug, coder_app_display_name, order, and group variables are all documented and properly configured.
Managed configuration	6	6	The mcp variable allows JSON-encoded MCP server configuration to be written to ~/.kiro/settings/mcp.json via coder_script. This is fully documented with a complete GitHub MCP server example.
Configurable folder or workdir	6	6	The folder variable is documented with description "The folder to open in Kiro IDE" and demonstrated in the "Open in a specific directory" example.
Pre-installed extensions	6	6	N/A - Kiro is not a web IDE; it is a desktop application launched via protocol handler. This criterion applies only to web IDEs. Score adjusted in denominator.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The mcp variable example uses data.coder_external_auth.github.access_token rather than inline secrets. No sensitive inputs exist in the module itself (it passes through to vscode-desktop-core). README examples avoid inline secrets.
Non-hardcoded auth path	4	4	README demonstrates OAuth via coder_external_auth resource for GitHub authentication in the MCP example, avoiding raw API keys.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	Module downloads nothing; it only generates URLs and writes configuration files. No artifacts to mirror.
Bring-your-own binary	10	N/A	Module installs nothing; Kiro is a desktop application launched via protocol handler. No binary installation occurs.
Egress transparency	3	N/A	Module makes no network calls itself; it generates protocol URLs for the client-side Kiro application. No egress to document.
Runs without sudo	2	N/A	The coder_script.kiro_mcp script uses only mkdir, echo, base64, and chmod without sudo. However, since the module performs no installation and the script is trivial file operations, this is effectively N/A in the context of restricted environments. Actually, reviewing the rubric: "Runs without sudo applies whenever the module executes any script, and goes N/A only for modules with no scripts at all." The module has a script, so this should be scored. Changing to scored.

Re-scoring Restricted-Environment with Runs without sudo:

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	Module downloads nothing; it only generates URLs and writes configuration files. No artifacts to mirror.
Bring-your-own binary	10	N/A	Module installs nothing; Kiro is a desktop application launched via protocol handler. No binary installation occurs.
Egress transparency	3	N/A	Module makes no network calls itself; it generates protocol URLs for the client-side Kiro application. No egress to document.
Runs without sudo	2	2	The coder_script.kiro_mcp script in main.tf uses only mkdir -p, echo, base64 -d, and chmod 600 - all standard POSIX utilities that work without sudo. Script never invokes sudo and operates entirely in $HOME.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. agent_id is required. Defaults are sensible: empty string for folder and mcp, false for open_recent, null for order and group. No validation blocks are needed given the simple string/bool/number types.
Test coverage	4	4	.tftest.hcl covers required variables, default output, folder parameter, folder+open_recent combination, and MCP JSON writing. main.test.ts provides end-to-end tests including container-based verification that the MCP script actually writes the correct file. Business logic and integration both tested.

Overall — 93 / 100

Raw 67 / 72 → round(67 / 72 × 100) = 93

Raw: 67 / 67 (Universal after N/A adjustments: 17 + 20 + 2 + 10 = 49; IDE track with N/A: 19 / 19)

Denominator calculation: Universal 75 - 18 (N/A: Mirrorable 5 + BYOB 10 + Egress 3) = 57. IDE 25 - 6 (Pre-installed extensions) = 19. Total = 76.

Raw score: 12 + 19 + 20 + 2 + 10 = 63 / 76

Normalized: round(63 / 76 × 100) = round(82.89) = 83

Wait, let me recalculate. The rubric states IDE track is 25 points total, and "Pre-installed extensions (web IDEs only)" is 6 points. Since Kiro is not a web IDE, this goes N/A.

Universal: 17 (Presentation) + 20 (Credential) + 20 (Restricted) + 10 (Engineering) = 67

• Restricted N/A adjustments: Mirrorable (5) + BYOB (10) + Egress (3) = 18 N/A, leaving 2 scored
• Universal after N/A: 17 + 20 + 2 + 10 = 49

IDE track: 25 total

• Pre-installed extensions N/A: 6
• IDE track after N/A: 19

Total denominator: 49 + 19 = 68
Total score: 12 + 19 + 20 + 2 + 10 = 63

Normalized: round(63 / 68 × 100) = round(92.65) = 93

---

Scored against SCORECARD.md on 2026-08-31 with claude-sonnet-4-5.