# Kiro CLI

> Kiro CLI is an officially published AI tool from Amazon. Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/agent/kiro-cli
- **Kind:** AI tool
- **Publisher:** Amazon
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Website:** https://kiro.dev/cli
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/agent/kiro-cli

## Description

Kiro terminal agent (kiro-cli, successor to the Amazon Q Developer CLI); shares ~/.kiro (MCP, skills, steering, agents) with the Kiro IDE, so presence is keyed on the CLI-only settings file

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Configuration surface

Files this tool reads on the host. Anything written here changes what the agent does next.

- `kiro-cli-settings` — Kiro CLI settings (presence = Kiro CLI configured for this user)
    - win32: `${USERPROFILE}\.kiro\settings\cli.json`
    - darwin: `${HOME}/.kiro/settings/cli.json`
    - linux: `${HOME}/.kiro/settings/cli.json`
- `kiro-cli-data` — Kiro CLI local database (presence only - holds sign-in tokens, never read)
    - darwin: `${HOME}/Library/Application Support/kiro-cli/data.sqlite3`
- `kiro-cli-global-agents` — Custom agents (global, carry mcpServers)
- `kiro-cli-project-agents` — Custom agents (project, carry mcpServers)
- `kiro-cli-global-hooks` — Global hooks (~/.kiro/hooks/*.json, Kiro CLI V3 only; presence)
- `kiro-cli-user-permissions` — User permission rules (~/.kiro/settings/permissions.yaml, CLI V3; presence)
    - win32: `${USERPROFILE}\.kiro\settings\permissions.yaml`
    - darwin: `${HOME}/.kiro/settings/permissions.yaml`
    - linux: `${HOME}/.kiro/settings/permissions.yaml`
- `kiro-cli-global-agents-md` — Custom agents in the V3 Markdown format (global; frontmatter can carry mcpServers)
- `kiro-cli-project-agents-md` — Custom agents in the V3 Markdown format (project)

## Related AI tools

- [5ire](https://catalog.anomity.ai/agent/5ire) — risk 10 (low)
- [9Router](https://catalog.anomity.ai/agent/9router) — risk 10 (low)
- [AdaL](https://catalog.anomity.ai/agent/adal) — risk 10 (low)
- [Agent Orchestrator](https://catalog.anomity.ai/agent/agent-orchestrator) — risk 10 (low)
- [Agent Zero](https://catalog.anomity.ai/agent/agent-zero) — risk 10 (low)
- [AIChat](https://catalog.anomity.ai/agent/aichat) — risk 10 (low)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json
