A.I Cyber Reasoning System

Iridium is an autonomous security research platform that combines multi-role AI reasoning with hardened runtime verification to find, prove, and package unknown vulnerabilities — not just flag scanner noise. This repository is the open-source client layer: local AST extraction, dependency graphs, CLI scanning, and MCP guardrails that feed the Iridium engine.

Most AppSec tooling stops at static findings. Bounty hunters and red teams need attacker-reachable bugs, verified under isolation, with submission-ready artifacts. Iridium treats vulnerability research as an end-to-end pipeline — code ingest → AI-guided hypotheses → sandbox execution → patch validation → bounty export.

Packages 3

Release 0.6.0

Python 3.11+

License 2.0

[05] BBS Hall Of Fame

out of box discovery / self-learning path

verified findings / training path · report links only when a .md briefing exists

App Name	Amount Of Stars	Finding	Report	PoC
LOADING ARCADE FINDINGS...

01 / Core

iridium-core

Extractors, SQLite AST cache, Tarjan SCC graphs, lockfile parsing, and payload models. No network I/O — structure only, secrets stripped client-side.

pip install iridium-core

02 / Client

iridium-client

Typer CLI plus httpx SaaS client. Zero-install demo, local payload dump, and scan . for local parsing with cloud reachability.

pip install iridium-client

03 / Mcp

iridium-mcp-server

MCP server for AI agent guardrails. Blocks vulnerable imports at generation time, fail-open on 429/5xx, with a local audit log.

pip install iridium-mcp-server

04 / Contract

Stable client API

POST /api/v1/client/scan → 202 + scan_id. GET /api/v1/client/scan/{scan_id} → poll findings. OpenAPI and JSON schema in-repo.

OpenAPI spec

[02] Quick Start

zero-install demo / local parse / cloud reach

release · iridium-client / iridium-core / iridium-mcp-server

GitHub PyPI Apache-2.0

pip install iridium-client

# Zero-install demo (<10s, no API key)
uvx iridium-client demo

# Full scan — local parsing + cloud reachability
iridium-client scan .

# Local payload dump (zero network)
iridium-client payload dump . --validate

✓ Scan complete · anonymous tier · no API key required

[03] Architecture

developer machine → Iridium SaaS API

local AST/graph · CLI scan · MCP guardrails · cloud reachability

Developer machine

iridium-core AST, graph, cache — no network

iridium-client CLI

iridium-mcp-server MCP guardrails

POST /api/v1/client/scan →

↓ POST /api/v1/client/scan

Private backend

Iridium SaaS API

Reachability analysis. Poll findings with GET /api/v1/client/scan/{scan_id}.