edamame-security

EDAMAME for Claude Code

Runtime behavioral monitoring for Claude Code on developer workstations.

This plugin bridges Claude Code transcripts (reasoning plane) to the EDAMAME Security system-plane observer, enabling two-plane divergence detection on developer machines.

How It Works

1. Claude Code produces session transcripts while you code.
2. This plugin parses transcripts and forwards them to EDAMAME via MCP.
3. EDAMAME evaluates behavioral intent against live system telemetry.
4. Divergence verdicts surface through the control center or health checks.

Prerequisites

• Node.js 18+
• EDAMAME Security running on the same machine:
  • macOS / Windows: EDAMAME Security app
  • Linux: edamame_posture CLI

Installation

Option A: Claude Code Marketplace (Recommended)

Add the EDAMAME marketplace and install the plugin:

/plugin marketplace add edamametechnologies/edamame_claude_code
/plugin install edamame@edamame-security

The plugin automatically registers the MCP server, skills, agents, and commands. After installation, run /edamame:healthcheck to verify the connection.

Option B: Local Plugin (Development)

Load the plugin directly from the repo for testing:

claude --plugin-dir ./edamame_claude_code

Option C: Manual Install (From Source)

For environments where the marketplace is not available:

1. Clone the repo and run the installer:

git clone https://github.com/edamametechnologies/edamame_claude_code.git
cd edamame_claude_code
bash setup/install.sh [/path/to/your/workspace]

The workspace argument is optional. It seeds transcript_project_hints and agent_instance_id. When omitted, the plugin monitors transcripts from all workspaces. The install is global per-user -- no need to reinstall when switching projects.

2. Restart Claude Code, then run /edamame:healthcheck to verify.

The installer automatically registers the edamame MCP server entry in Claude Code's global configuration (~/.claude.json). When installing via the EDAMAME app or edamame-posture install-agent-plugin claude_code, the same automatic registration is performed by the provisioning engine. If the global config already contains other servers, they are preserved.

See Setup Guide for detailed config paths per platform.

Pairing

• macOS / Windows: Start the EDAMAME Security app, enable MCP on port 3000. Use the control center to request pairing from the app, or paste a PSK.
• Linux: Run edamame-posture mcp-generate-psk then edamame-posture mcp-start 3000 "<PSK>", and paste the PSK into the control center. Or run edamame_claude_code_control_center and use "Generate, start, and pair automatically".

Troubleshooting: env: node: No such file or directory

Claude Code may not inherit your shell's PATH. If node is installed via Homebrew or nvm and the MCP server fails to start, ensure node is on the system PATH or configure the MCP entry with the absolute path to node. The manual installer resolves this automatically.

Health Check

bash setup/healthcheck.sh --strict --json

What the Plugin Provides

Component	Contents
MCP Server	stdio bridge forwarding EDAMAME tools (posture, divergence, sessions, remediation) to Claude Code
Skills	Security posture assessment (/edamame:security-posture), divergence monitoring (/edamame:divergence-monitor)
Agents	Security-monitor agent for safety-aware coding
Commands	Health check (/edamame:healthcheck), behavioral model export (/edamame:export-intent)

Layout

Directory	Purpose
.claude-plugin/	Plugin manifest and marketplace catalog
.mcp.json	Plugin MCP server definition
skills/	Agent skills (security-posture, divergence-monitor)
agents/	Custom agent definitions (security-monitor)
commands/	Agent-executable commands (healthcheck, export-intent)
assets/	Plugin logo and static assets
bridge/	Local stdio MCP bridge, control center, forwarding surface
adapters/	Transcript parsing and RawReasoningSessionPayload assembly
service/	Control center, extrapolator, posture facade, verdict reader, health checks
setup/	Install and health-check scripts plus config templates
prompts/	Prompt contract used by EDAMAME-side raw-session ingest
docs/	Architecture, setup, operator guidance
tests/	Unit tests and E2E intent injection

Shared components