{
  "$schema": "https://modelcontextprotocol.io/schemas/server-card/2025-09-18.json",
  "name": "hiro-architect",
  "serverInfo": {
    "name": "hiro-architect",
    "version": "1.0.0",
    "title": "Hiro Security Architect",
    "description": "Security architect MCP server for IDE-based coding agents (Claude Code, Claude Desktop, Cursor). Reviews code diffs against the organization's security policy and live infrastructure context, answers security questions, checks dependencies against OSV, and exposes vector-backed organizational memory.",
    "homepage": "https://hirosecure.com",
    "vendor": {
      "name": "Hiro",
      "url": "https://hirosecure.com"
    }
  },
  "endpoint": "https://api.hirosecure.com/mcp/architect",
  "transport": "streamable-http",
  "authentication": {
    "type": "api-key",
    "location": "header",
    "header": "X-API-Key",
    "provisioningUrl": "https://app.hirosecure.com/settings/api-keys"
  },
  "capabilities": {
    "tools": { "listChanged": false },
    "resources": { "listChanged": false, "subscribe": false },
    "prompts": { "listChanged": false }
  },
  "tools": [
    { "name": "ask", "description": "Ask Hiro any security question; grounded in the org's policy and memories." },
    { "name": "review_diff", "description": "Security-review a git diff against org policy and live infrastructure context." },
    { "name": "check_dependencies", "description": "Query OSV for known CVEs. Supports npm, PyPI, Go, cargo, Maven, NuGet, RubyGems, Packagist." },
    { "name": "get_security_policy", "description": "Return the org's security policy, optionally filtered by topic." },
    { "name": "set_org_context", "description": "Upsert the org's security profile (industry, compliance, tech stack, data sensitivity)." },
    { "name": "get_org_context", "description": "Return the current org security profile." },
    { "name": "remember", "description": "Store an organizational fact in vector memory with semantic dedup." },
    { "name": "recall", "description": "Search organizational memory by semantic similarity." },
    { "name": "forget", "description": "Delete a memory by ID." }
  ],
  "alternateServers": [
    {
      "name": "hiro-agents",
      "title": "Hiro Security Agents",
      "description": "Programmatic control plane for the Hiro security platform. Exposes the agent chat loop, task inspection, scan triggers, and plan approval gates across connected integrations.",
      "endpoint": "https://api.hirosecure.com/mcp/agents",
      "transport": "streamable-http",
      "authentication": {
        "type": "api-key",
        "location": "header",
        "header": "X-API-Key",
        "provisioningUrl": "https://app.hirosecure.com/settings/api-keys"
      },
      "tools": [
        { "name": "hiro_chat", "description": "Full agent loop with access to every connected integration." },
        { "name": "hiro_trigger_scan", "description": "Queue a security scan for a connected integration." },
        { "name": "hiro_list_tasks", "description": "List investigations, remediations, and scans." },
        { "name": "hiro_get_task", "description": "Get full details for a specific task." },
        { "name": "hiro_get_task_plan", "description": "Get the remediation plan awaiting approval on a task." },
        { "name": "hiro_chat_with_task", "description": "Iterate on a planner agent's proposed plan." },
        { "name": "hiro_approve_plan", "description": "Approve and execute a proposed action plan." },
        { "name": "hiro_decline_plan", "description": "Decline a plan with optional feedback." },
        { "name": "hiro_approve_task", "description": "Approve all pending remediation actions on a task." }
      ]
    }
  ],
  "contact": {
    "email": "hello@hiro.is",
    "url": "https://hirosecure.com"
  }
}