AWS Kiro

Kiro is Amazon’s AI-powered IDE — the successor to Amazon Q Developer (Q is now retired for new signups). It supports remote MCP servers through a user-level mcp.json config. Perfai Cloud is a remote server and authentication is a custom Bearer header.

Amazon Q Developer’s free-tier signup is closed to new users — Kiro is currently the only viable free path in to this class of tooling.

Install Kiro

Download Kiro from kiro.dev.
Sign in with Google or GitHub — this avoids a known Amazon Builder ID account-linking bug that can affect email/password sign-in.
Open a project folder in Kiro.

Generate your Bearer token

Run this in your own terminal — substitute your Perfai email and password:

macOS / Linux
Windows (PowerShell)

echo -n "you@example.com:yourpassword" | base64

[Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes("you@example.com:yourpassword"))

Copy the resulting string — you’ll paste it into mcp.json as Bearer <base64>.

Installation

In Kiro, press Ctrl+Shift+P (Cmd+Shift+P on macOS) to open the command palette.
Run Kiro: Open User MCP Config (JSON).
Add (or merge) the following into the file that opens:

macOS / Linux
Windows

File: ~/.kiro/settings/mcp.json

{
  "mcpServers": {
    "perfai-cloud": {
      "url": "https://mcp-server.perfai.ai/mcp",
      "headers": { "Authorization": "Bearer <base64>" }
    }
  }
}

File: %USERPROFILE%\.kiro\settings\mcp.json

{
  "mcpServers": {
    "perfai-cloud": {
      "url": "https://mcp-server.perfai.ai/mcp",
      "headers": { "Authorization": "Bearer <base64>" }
    }
  }
}

Save the file. Kiro picks up MCP config changes without a restart.

Verify the server is connected

Open Kiro’s MCP panel (via the command palette or the MCP icon in the sidebar).
Look for perfai-cloud listed with 18 tools available.
If it fails to connect, re-check the Authorization header value and confirm there’s no trailing whitespace in the base64 string.

The prompts below run inside Kiro’s chat panel, not your terminal. The only file-based step is editing mcp.json.

In Kiro’s chat, type:

Login to Perfai

This calls login with no arguments, which opens a browser to Perfai’s own login page — never type your email/password directly into the chat. Confirm the session with:

What's my Perfai auth status?

Register an app and run a scan

Register https://your-app.example.com with Perfai

Check the onboarding status for that app

Run a security test on the selected app

Show me the vulnerabilities it found

Fix and verify

Generate an auto-fix plan for all critical and high findings

Mark vulnerability 3 as fixed

Give me the fix summary

Getting Started

Core Concepts

Hybrid Deployment

Changelog

Install Kiro

Generate your Bearer token

Installation

Verify the server is connected

Register an app and run a scan

Fix and verify

​Install Kiro

​Generate your Bearer token

​Installation

​Verify the server is connected

​Login

​Register an app and run a scan

​Fix and verify

Install Kiro

Generate your Bearer token

Installation

Verify the server is connected

Login

Register an app and run a scan

Fix and verify