Installation

Install the STAR Plugin in your AI coding tool

Prerequisites

Before installing the plugin for any tool, make sure you have:

  1. A Bright API token — create one in Bright under Organization → API Keys or Project → API Keys. See Personal API Key Scopes.
  2. Your Bright cluster hostname — typically app.brightsec.com (EU cluster: eu.brightsec.com).

Export both as environment variables so the plugin and the Bright Repeater can read them:

export BRIGHT_HOSTNAME="app.brightsec.com"
export BRIGHT_TOKEN="your-bright-api-token"
📘

Persist these in your shell profile (~/.zshrc, ~/.bashrc) so every session has them.

Install for your tool

Each tool has its own native install steps. Follow the README for your tool:

ToolInstall guideNotes
Cursorcursor/README.md → InstallMarketplace install or local clone; supports Cursor Cloud Agents
Claude Codeclaude-code/README.md → InstallCLI marketplace install; supports --agent mode
Codexcodex/README.md → InstallAgents ship as skills (no separate agent type in Codex)
GitHub Copilotgithub-copilot/README.md → InstallAgents carry an mcp-servers block in frontmatter
Antigravity CLIantigravity/README.md → InstallAgents ship as skills (no separate agent type)
DevinDevin (Desktop & CLI)No dedicated package — reuses claude-code/ via Claude-manifest compatibility

All packages use the same Bright MCP server under the hood — the only differences are tool-specific plugin mechanics and frontmatter.

Verify the installation

After installing, confirm:

  1. The Bright MCP server (brightsec) is connected and active in your tool's MCP settings.
  2. The Bright agents appear in the agent list (or as available skills, depending on the tool) — see Agents & Skills for what to expect.
  3. Environment variables are accessible — run echo $BRIGHT_HOSTNAME and echo $BRIGHT_TOKEN in the same shell.

Update & uninstall

Each package README includes tool-specific update and uninstall instructions. The general pattern:

  • Update: refresh the marketplace catalog, then update the plugin (or git pull for clone-based setups).
  • Uninstall: disable or remove the plugin from the tool's settings, then optionally remove the marketplace source.

See the per-tool README linked above for exact commands.

Troubleshooting

SymptomFix
Bright tools missing from the AI assistantReload the IDE / restart the CLI session; confirm the MCP server is enabled
Auth fails (401 from MCP)Replace the API token and restart
Repeater won't connectTest manually: npx @brightsec/cli repeater --id <ID> --hostname "$BRIGHT_HOSTNAME" --token "$BRIGHT_TOKEN"
Cloud Agents can't reach BrightConfirm BRIGHT_HOSTNAME and BRIGHT_TOKEN exist in cloud agent secrets

For deeper troubleshooting, see the Advanced usage section in each tool's README.


Did this page help you?