Twira

by TwiraHQ

393 downloads

Not rated

GitHub

About

Coding power tools for AI agents. 18 deterministic MCP tools: code-graph search, SAST, blast radius, wire-level PII redaction, signed audit chain. Works with Claude Code, Codex, Gemini, Cursor. Free tier on install.

Details

Author: TwiraHQ
Downloads: 393
Categories: AI, Security, Database, Developer Tools

- AI Compliance Proxy: wire-level PII and secret redaction before data leaves your machine.
- Ed25519-signed, Merkle-chained receipts for every agent call.
- Code Index with call graph, symbols, and dependencies across 26 languages.
- Deterministic SAST with 65 detectors across four profiles.
- Database MCP: live schema mapping and read-only queries across six engines.
- Multi-model team coordination: ask, review, and debate across 10+ frontier models.

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name Twira

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

From the repository

Install via curl, npm, or Homebrew, then run twira init inside your repo to detect your agent, write the MCP configuration, and build the first index. No signup, account, or payment is required for the free tier. Agents call Twira’s tools over MCP; you can also invoke the same tools from your terminal.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "twira": {
            "Twira": {
                "command": "twira",
                "args": [
                    "mcp"
                ]
            }
        }
    }
}

McpServers

{
    "Twira": {
        "command": "twira",
        "args": [
            "mcp"
        ]
    }
}

Coding power tools for AI agents. Deliver better code, faster and safer.

Twira is a single local binary that gives your AI coding agent deterministic, indexed access to your codebase, so it reads real code instead of guessing. Larger context windows didn't fix the hallucinations; deterministic tools did. Your agent is the operator. Twira is the power tool beneath it. You stay in control.

18 PowerTools · 26 languages · 65 deterministic detectors · wire-level PII redaction · tamper-evident audit chain.

Every tool is reachable two ways: your AI agent calls them over MCP (Claude Code, Codex, Gemini CLI, Cursor, and anything else that speaks MCP), and you call the same tools from your terminal. Deterministic, local-first, cryptographic where it matters. Your source code never leaves your machine.

Install

sh

curl (macOS / Linux)



curl -fsSL https://twira.com/install.sh | sh



npm



npm install -g @twira/cli



Homebrew (macOS / Linux)



brew install twirahq/tap/twira





Then

twira init

 inside your repo: it detects your agent, writes the MCP config for you, and builds the first index. No signup, no account, no card.



The AI Compliance Proxy






The flagship. A wire-level proxy that sits between your AI agents and the model providers they call, on your machine, so personal data and secrets are redacted before they leave it.



 your AI agent ──▶  Twira proxy  ─────────────────▶  model provider

                    │ redact PII + secrets             sees placeholder

                    │ swap in the custodied API key    tokens, never the

                    │ sign + chain every call          real values

 you see normal ◀── restore real values  ◀──────────  response

 output





- Redaction at the wire. Around 50 text patterns plus deterministic person-name detection, structured Article 9 identifiers (health, politics, religion), API keys and secrets, and OCR-driven redaction inside images: faces blurred, personal text blacked out, EXIF stripped.

- Reversible, invisibly. Each value becomes a session-scoped token on the way out and is swapped back on the way home. Your workflow never notices; the provider never sees the real data.

- Key custody. Provider API keys are stored AES-256-GCM encrypted and injected at the wire. The agent never sees the key. Rotate centrally without touching every machine.

- Signed receipts. Every call is Ed25519-signed and Merkle-chained, verifiable offline. Per-session evidence shows exactly what was redacted and exports as a signed redaction certificate.

- Compliance postures. Hospital, Bank and Government floors enforce Strict; GDPR purge removes mappings and bodies on request while keeping the chain proof intact.

- Spend visibility. Per-agent token usage across every provider, in one place.



Built for the rules teams actually face: GDPR and UK GDPR, the EU AI Act, ISO/IEC 42001, the NIST AI Risk Management Framework, Singapore's Agentic AI framework, and equivalent regimes worldwide.



The toolbelt






Look up code






| Tool | What it does |

|---|---|

| Index | Your codebase as a queryable knowledge graph: symbols, call graph, dependencies, references and optional embeddings across 26 languages, kept fresh on every commit. |

| Code Search | Five modes in one interface: symbol, path, content, regex and semantic (vector + keyword + call-graph, fused). |

| Code Read | A symbol slice, a file overview, or the whole file, without burning tokens re-reading what the index already knows. |

| Impact | Know what would break before you ship: references, dependency direction and blast radius from the call graph, risk-rated. |

| Database MCP | Code and database on one interface. Maps every table, FK, index, view and RLS policy live across 6 engines; read-only queries; finds every place code touches a table across 17 ORM patterns. |



Find bugs and risks






| Tool | What it does |

|---|---|

| Diagnose (SAST) | 65 deterministic detectors across 4 profiles, locally, in the millisecond range. Baselines, suppressions that survive renames and refactors, output as JSON or SARIF 2.1.0. |

| Dependency Vulnerabilities (SCA) | OSV-backed and reachability-filtered (installed AND imported, so the noise drops). Local cache means air-gapped runs still work. |

| Risk | Triage what changed: RED, YELLOW, GREEN per commit, at a glance. |



Data protection and evidence






| Tool | What it does |

|---|---|

| AI Compliance Proxy | The wire-level redaction, custody and receipts engine described above. |

| Audit | A tamper-evident, cryptographically signed, append-only record of every meaningful action the agent takes. RFC 3161 time-stamped, verifiable offline. |



Coordinate the work






| Tool | What it does |

|---|---|

| Team | Ask, review, brainstorm and debate across 10+ frontier models from 6+ providers, synthesised into one peer-reviewed answer. |

| Code Review | Type

/code-review

 in your agent: multiple frontier models review the commit, each with a different lens. |

| Plan Review | Type

/plan-review

: multiple models review the implementation plan before any code gets written. |

| Masterplan | One shared task graph that every agent in every session works from. Atomic claims, no duplicated work. |

| Relay | Parallel agent sessions on the same repo without collisions, coordinated by file claims. |

| Lore | Institutional memory across agents: save the lesson once, and every future session checks it before touching the file. |

| Port | Cross-language migration with structural matching. Port a 200,000-line legacy codebase without losing a function. |



Defensibility and ergonomics






| Tool | What it does |

|---|---|

| Localhost Dashboard | The visual control panel on 127.0.0.1: redaction evidence, sessions, spend, audit, toggles, instructions. |

| Notifications | Desktop toasts, a chime, optional spoken alerts when an agent finishes, asks, or needs permission. |



Free vs Pro






Free, for ever, personal use. Index, Code Search and Code Read. No signup, no email, no card. One binary, no runtime dependencies, on macOS, Linux and Windows.



Pro, the full toolbelt. $29.99/month with a 14-day trial, no card required. Free for students who verify with an institutional email.



Get started

sh

twira init       # set up Twira in your repo: wires your AI agent (MCP) and builds the index

twira login      # link this machine to your Twira account (Pro and trials)

twira dashboard  # open the local dashboard in your browser

``

From there your AI agent does the work. Ask it to search, read, check impact, or diagnose, and it reaches for Twira's tools by itself.

Links

- Website: https://twira.com
- Pricing: https://twira.com/pricing
- Contact: https://twira.com/contact
- Releases: https://github.com/TwiraHQ/twira/releases

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

Claude Desktop / Cursor

McpServers

Install

curl (macOS / Linux)

npm

Homebrew (macOS / Linux)

The AI Compliance Proxy

The toolbelt

Look up code

Find bugs and risks

Data protection and evidence

Coordinate the work

Defensibility and ergonomics

Free vs Pro

Get started

Links

Install

More like this

Redis

Sqlite

PostgreSQL

Context 7

1Panel

🔎 GPT Researcher