Kiro IDE module

[bpmct]

A discussion dedicated to the Kiro IDE module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	18 / 25	20 / 20	N/A	8 / 10	74 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for default usage, opening in a specific directory, and configuring MCP servers. Each example shows sensible defaults and different configuration modes.
Coder-context framing	8	1	README mentions Kiro is "an AI-powered IDE from AWS" and references the Coder Remote VS Code Extension, but does not explain what the module adds on top of Coder or show where Coder fits in the flow. The connection between Coder workspaces and Kiro is implicit rather than explained.
Visual preview	5	0	No image, GIF, or video in the README. Only an icon reference in frontmatter.

IDE Integration — 18 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	Uses coder_app via the vscode-desktop-core module with proper launch behavior through the kiro:// protocol handler.
Managed configuration	6	6	Documented support for managed MCP server configuration via the mcp input variable, which writes to ~/.kiro/settings/mcp.json. README includes a complete example with GitHub MCP server setup.
Configurable folder or workdir	6	5	The folder variable is documented and tested, but the README example shows usage without explaining what it does beyond the variable description. The behavior is clear from context but not explicitly explained in prose.
Pre-installed extensions	6	0	N/A - not a web IDE, uses protocol handler for desktop application. However, since this is a required criterion for IDE track scoring, it receives 0 rather than being excluded.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The module itself has no sensitive inputs. The MCP example shows using coder_external_auth for token management, avoiding inline secrets. No sensitive data is hardcoded.
Non-hardcoded auth path	4	4	README example demonstrates OAuth via coder_external_auth resource for GitHub authentication, avoiding raw API keys.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only generates URLs and optionally writes configuration files. No artifacts to mirror.
Bring-your-own binary	5	N/A	Module does not install any binaries; it assumes Kiro IDE is already installed on the user's local machine (desktop application launched via protocol handler).
Egress transparency	3	N/A	Module makes no network calls itself; it generates URLs for the Coder API that the desktop Kiro application will contact.
Runs without sudo	2	N/A	The only script (kiro_mcp) creates directories and writes a file to $HOME, never invoking sudo. However, since all other criteria are N/A, this entire theme is excluded.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	4	Variables have clear descriptions and sensible defaults. However, no validation blocks are present (e.g., for agent_id format, folder path format, or mcp JSON structure).
Test coverage	4	4	Strong test coverage with both .tftest.hcl (5 test cases covering required vars, default output, folder, open_recent, and MCP JSON writing) and main.test.ts (4 test cases including container-based validation of MCP file writing). Tests cover business logic and end-to-end behavior.

Overall — 74 / 100

Raw 59 / 80 → round(59 / 80 × 100) = 74

Wait, recalculating: 13 + 18 + 20 + 8 = 59 out of 80 possible (25 + 25 + 20 + 0 + 10, with Restricted-Environment N/A).
59 / 80 × 100 = 73.75 → rounds to 74 / 100

Correction needed - let me recalculate the IDE Integration score. Pre-installed extensions should be N/A for non-web IDEs per the rubric, not scored as 0.

---

Let me recalculate with Pre-installed extensions as N/A:

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	18 / 19	20 / 20	N/A	8 / 10	79 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for default usage, opening in a specific directory, and configuring MCP servers. Each example shows sensible defaults and different configuration modes.
Coder-context framing	8	1	README mentions Kiro is "an AI-powered IDE from AWS" and references the Coder Remote VS Code Extension, but does not explain what the module adds on top of Coder or show where Coder fits in the flow. The connection between Coder workspaces and Kiro is implicit rather than explained.
Visual preview	5	0	No image, GIF, or video in the README. Only an icon reference in frontmatter.

IDE Integration — 18 / 19

Criterion	Max	Score	Notes
Dashboard entry point	7	7	Uses coder_app via the vscode-desktop-core module with proper launch behavior through the kiro:// protocol handler.
Managed configuration	6	6	Documented support for managed MCP server configuration via the mcp input variable, which writes to ~/.kiro/settings/mcp.json. README includes a complete example with GitHub MCP server setup.
Configurable folder or workdir	6	5	The folder variable is documented and tested, but the README example shows usage without explaining what it does beyond the variable description. The behavior is clear from context but not explicitly explained in prose.
Pre-installed extensions	6	N/A	Not a web IDE; uses protocol handler for desktop application. Criterion excluded from denominator.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The module itself has no sensitive inputs. The MCP example shows using coder_external_auth for token management, avoiding inline secrets. No sensitive data is hardcoded.
Non-hardcoded auth path	4	4	README example demonstrates OAuth via coder_external_auth resource for GitHub authentication, avoiding raw API keys.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only generates URLs and optionally writes configuration files. No artifacts to mirror.
Bring-your-own binary	5	N/A	Module does not install any binaries; it assumes Kiro IDE is already installed on the user's local machine (desktop application launched via protocol handler).
Egress transparency	3	N/A	Module makes no network calls itself; it generates URLs for the Coder API that the desktop Kiro application will contact.
Runs without sudo	2	N/A	The only script (kiro_mcp) creates directories and writes a file to $HOME, never invoking sudo. All Restricted-Environment criteria are N/A, so entire theme excluded.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	4	Variables have clear descriptions and sensible defaults. However, no validation blocks are present (e.g., for agent_id format, folder path format, or mcp JSON structure).
Test coverage	4	4	Strong test coverage with both .tftest.hcl (5 test cases covering required vars, default output, folder, open_recent, and MCP JSON writing) and main.test.ts (4 test cases including container-based validation of MCP file writing). Tests cover business logic and end-to-end behavior.

Overall — 74 / 100

---

Scored against SCORECARD.md on 2026-07-20 with claude-sonnet-4-5.