Installation
Install the STAR Plugin in your AI coding tool
Prerequisites
Before installing the plugin for any tool, make sure you have:
- A Bright API token — create one in Bright under Organization → API Keys or Project → API Keys. See Personal API Key Scopes.
- Your Bright cluster hostname — typically
app.brightsec.com(EU cluster:eu.brightsec.com).
Export both as environment variables so the plugin and the Bright Repeater can read them:
export BRIGHT_HOSTNAME="app.brightsec.com"
export BRIGHT_TOKEN="your-bright-api-token"
Persist these in your shell profile (~/.zshrc,~/.bashrc) so every session has them.
Install for your tool
Each tool has its own native install steps. Follow the README for your tool:
| Tool | Install guide | Notes |
|---|---|---|
| Cursor | cursor/README.md → Install | Marketplace install or local clone; supports Cursor Cloud Agents |
| Claude Code | claude-code/README.md → Install | CLI marketplace install; supports --agent mode |
| Codex | codex/README.md → Install | Agents ship as skills (no separate agent type in Codex) |
| GitHub Copilot | github-copilot/README.md → Install | Agents carry an mcp-servers block in frontmatter |
| Antigravity CLI | antigravity/README.md → Install | Agents ship as skills (no separate agent type) |
| Devin | Devin (Desktop & CLI) | No dedicated package — reuses claude-code/ via Claude-manifest compatibility |
All packages use the same Bright MCP server under the hood — the only differences are tool-specific plugin mechanics and frontmatter.
Verify the installation
After installing, confirm:
- The Bright MCP server (
brightsec) is connected and active in your tool's MCP settings. - The Bright agents appear in the agent list (or as available skills, depending on the tool) — see Agents & Skills for what to expect.
- Environment variables are accessible — run
echo $BRIGHT_HOSTNAMEandecho $BRIGHT_TOKENin the same shell.
Update & uninstall
Each package README includes tool-specific update and uninstall instructions. The general pattern:
- Update: refresh the marketplace catalog, then update the plugin (or
git pullfor clone-based setups). - Uninstall: disable or remove the plugin from the tool's settings, then optionally remove the marketplace source.
See the per-tool README linked above for exact commands.
Troubleshooting
| Symptom | Fix |
|---|---|
| Bright tools missing from the AI assistant | Reload the IDE / restart the CLI session; confirm the MCP server is enabled |
Auth fails (401 from MCP) | Replace the API token and restart |
| Repeater won't connect | Test manually: npx @brightsec/cli repeater --id <ID> --hostname "$BRIGHT_HOSTNAME" --token "$BRIGHT_TOKEN" |
| Cloud Agents can't reach Bright | Confirm BRIGHT_HOSTNAME and BRIGHT_TOKEN exist in cloud agent secrets |
For deeper troubleshooting, see the Advanced usage section in each tool's README.
Updated about 2 hours ago
What’s Next
Did this page help you?