rigour

Overview

Rigour acts as an immune system for AI coding agents, preventing dangerous code commits in real-time. It analyzes code across multiple languages (TypeScript, JavaScript, Python, Go, Ruby, C#, Java, Kotlin, Rust) using AST-based detection rather than heuristics. The system learns from each scan, creating patterns specific to your codebase that strengthen over time. When violations are detected, Rigour provides precise fix instructions in JSON format that AI agents can consume to self-heal issues without human intervention.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• rigour_check

  Performs security and structural analysis of code files

  Try:Check this code for security vulnerabilitiesTry:Analyze the current file for AI drift patternsTry:Run a governance check on the codebase
• fix_packet

  Provides JSON-formatted instructions for fixing code violations

  Try:Generate fix instructions for these violationsTry:Show me exactly how to fix these security issuesTry:Provide actionable fixes for the code problems found
• list_violations

  Lists all detected violations in the codebase

  Try:Show me all violations in the projectTry:List security issues in the codeTry:What structural problems were found?
• check_security

  Specifically checks for security vulnerabilities and hardcoded secrets

  Try:Check for AWS secrets in the codeTry:Look for SQL injection vulnerabilitiesTry:Scan for hardcoded credentials
• check_ast

  Performs AST-based analysis of code structure

  Try:Analyze the code structure for complexity issuesTry:Check for high cyclomatic complexityTry:Find methods with too many parameters
• check_ai_drift

  Detects AI-related issues like hallucinated imports and context drift

  Try:Check for phantom APIs in the codeTry:Look for hallucinated importsTry:Detect any AI drift patterns
• get_dashboard_data

  Provides real-time governance dashboard data

  Try:Show me the current dashboard scoreTry:Get recent governance metricsTry:What's the current AI health score?
• get_patterns

  Retrieves patterns learned by the Rigour Brain

  Try:Show me the patterns the system has learnedTry:What are the strongest patterns detected?Try:List all learned patterns

Comparable tools

Installation

npm install -g @rigour-labs/mcp

{ "mcpServers": { "rigour": { "command": "npx", "args": ["-y", "@rigour-labs/mcp"] } } }

npx rigour-scan

FAQ

How does Rigour differ from traditional linters like ESLint?

Rigour is AI-native, learns your codebase patterns, provides self-healing fix packets directly to agents, and detects AI-specific issues like hallucinated imports and context drift that traditional linters miss.

What programming languages does Rigour support?

Rigour supports TypeScript, JavaScript, Python, Go, Ruby, C#, Java, Kotlin, and Rust through AST-based analysis rather than pattern matching.

Compare rigour with