Loading image...Kiro

Product

  • About Kiro
  • Agents
  • IDE
  • CLI
  • Web
  • Mobile
  • Crew
  • Pricing
  • Downloads

For

  • Enterprise
  • Startups
  • Students

Community

  • Overview
  • Ambassadors
  • Case studies
  • Discord
  • Events
  • Powers
  • Shop
  • Showcase

Resources

  • Docs
  • Blog
  • Changelog
  • FAQs
  • Videos
  • Report a bug
  • Suggest an idea
  • Billing support

Social

Site TermsLicenseResponsible AI PolicyLegalPrivacy PolicyCookie Preferences
Kiro
  • Agents
  • Enterprise
  • Pricing
  • Docs
SIGN INDOWNLOADS
Kiro

Get Started

InstallationAuthenticationYour first project

Models

OverviewAvailable modelsReasoning effortAWS GovCloud (US) models

Features

How Kiro worksLocal command sandboxACP integrations
Specs
Steering
Hooks
MCP
Permissions
Custom agents
Workflows
Agent Skills
Powers
Cloud sessionsMemoryCompactionKiroignoreCheckpoints and rewind
Built-in tools
Configuration scopes

IDE 1.x

What's new in 1.0
Setup & First Run
Editor
Chat
Experimental
Troubleshooting0.x reference

CLI

What's new in V3
Setup & First Run
Terminal UI
Chat
Fullscreen modeVoice modeHeadless modeACPAuto complete
Experimental
2.x reference

Crew

Quick startInstallationRunning 24/7
Chat
Agent Capabilities
Features
Interfaces
Apps
System & storageConfigurationSecurityTroubleshooting

Web

Setup & First RunIdentity Center
Connect your repositories
Working with the agent
Autonomous modeScheduleConfiguration Sync
Sandbox

Mobile - Preview

Overview

Commands and Reference

CLI commandsSlash commandsBuilt-in toolsExit codesSettings

Billing

OverviewManaging your subscriptionUpgrading your planDowngrading your planCancelling your planPurchasing add-on creditsManaging your paymentsManaging usage notificationsManaging your taxesContacting billing supportDeleting your accountRelated questions

Enterprise

ConceptsOnboarding quickstart
Connecting your identity provider
Deployment optionsSubscribe your teamManage subscriptions
Governance
Monitor and track
SettingsManaged updatesTLS inspection compatibilityBillingIAMSupported regions
AWS GovCloud (US)

Privacy and Security

OverviewData protectionCode referencesCompliance validationInfrastructure securityIAM permissionsFirewalls, proxies, and data perimetersVPC endpoints (AWS PrivateLink)

Guides

OverviewRunning Kiro in the cloud
Language support
Learn by playing

Migration

Migrating from Q DeveloperMigrating from VSCodeUpgrading from Q CLI
  1. Docs
  2. Features
  3. Configuration scopes
View as Markdown

Configuration scopes

View as Markdown

Kiro uses a layered configuration system with three scopes. Configuration closer to your current context takes priority over broader settings.

CapabilityIDECLIWebMobile
Global scope (~/.kiro/)✓✓——
Cloud configurationOpt-inOpt-in✓—
Project scope (.kiro/)✓✓✓✓
Agent scope (.kiro/agents/ or ~/.kiro/agents/)✓✓——

Scopes

  1. Global — applies across all projects. Stored in ~/.kiro/.
  2. Project — specific to a workspace. Stored in <project-root>/.kiro/.
  3. Agent — defined per agent in ~/.kiro/agents/ (global) or .kiro/agents/ (project).
Override the global directory with KIRO_HOME

Set KIRO_HOME to an absolute path to keep separate Kiro profiles, such as work and personal. In V3, Kiro stores its global configuration, sign-ins, sessions, and agent state there. Existing MCP sign-ins are copied there once when you first use the path.

Kiro ignores a relative path, a filesystem root, your home directory, or one of its ancestors and uses ~/.kiro instead.

Inspect configuration in V3

In a local or cloud V3 session, run /config to review the configuration used by that session:

bash
# Open the category summary /config # Open a category directly /config steering

The summary covers agents, MCP servers, Powers, Steering, Skills, and Hooks. It shows the number or status of configured items and lets you open each category. /config is not available in V1 or V2.

Source labels

When Kiro has configuration-origin information, the Source column identifies items as local, cloud, or local + cloud. If a local session has no source information for any item, Kiro omits the column instead of labeling every item by guesswork. In a cloud session, the session's configuration is shown as cloud-sourced.

A cloud label reports where the active configuration came from. Opening /config does not upload your local files or synchronize them with cloud configuration. If cloud configuration is not enabled for your account, the panel remains available and shows local configuration without cloud-backed items.

Apply cloud configuration to local sessions

Use Configuration Sync in Kiro Web to upload supported folders from your personal .kiro directory. The uploaded configuration applies to cloud sessions automatically.

To use the cloud copy in local work, enable Apply your cloud configuration to local sessions on the Configuration Sync page. New local CLI sessions then load your cloud Steering files, custom agents, Skills, Powers, and Hooks. This option does not write cloud content to your local .kiro directory or replace existing local files.

Read-only and routed views

The category summary and the in-panel Powers, Steering, and Skills lists are read-only. Selecting Agents opens the existing agent picker, where you can switch agents. MCP servers and Hooks open their existing panels. /config does not edit or upload configuration files itself, but some linked views are interactive.

File paths

ConfigurationGlobal scopeProject scope
MCP servers~/.kiro/settings/mcp.json.kiro/settings/mcp.json
Permissions~/.kiro/settings/permissions.yaml~/.kiro/workspace-roots/<hash>/permissions.yaml (per-user, outside the repo)
Local command sandbox~/.kiro/settings/sandbox.json.kiro/settings/sandbox.json
Custom agents~/.kiro/agents/.kiro/agents/
Steering~/.kiro/steering/.kiro/steering/
Skills~/.kiro/skills/.kiro/skills/
Hooks~/.kiro/hooks/.kiro/hooks/
Powers~/.kiro/powers/—
Specs—.kiro/specs/
Workflows~/.kiro/workflows/.kiro/workflows/
Settings (CLI)~/.kiro/settings/cli.json—

What each scope supports

Not every feature is available at every scope. The table below shows where each configuration can be defined and whether it can be embedded in an agent profile.

ConfigurationGlobalProjectAgent scope
MCP servers✓✓✓ (mcpServers field or includeMcpJson)
Permissions✓✓✓ (permissions field)
Local command sandbox✓✓—
Custom agents✓✓N/A
Steering✓✓✓ (resources field)
Skills✓✓✓ (resources field)
Hooks✓✓✓ (CLI only, hooks field)
Powers✓—✓ (includePowers field)
Specs—✓—
Workflows✓✓—
Settings✓——

Resolving conflicts

When the same configuration exists in multiple scopes, the scope closest to your current context wins:

ConfigurationPriority (highest → lowest)
MCP serversAgent > Project > Global
Permissionsdeny wins regardless of scope (deny-overrides algorithm)
Local command sandboxAn active global policy is the floor; a project can turn it on or tighten it, but cannot weaken it
Custom agentsProject > Global (same-name: project wins with warning)
SteeringAll scopes merged (not overridden)
SkillsAll scopes merged
HooksAll scopes merged
WorkflowsProject > Global > synchronized account recipes > bundled recipes

An invalid higher-priority workflow recipe does not hide a valid lower-priority recipe with the same name. Available synchronized and bundled recipes can vary by account and client version.

Tip

Permissions use a deny-overrides algorithm — a deny rule in any scope blocks the action regardless of allow rules elsewhere. See Permissions for details.

Since MCP servers can be configured in three scopes and agents have an includeMcpJson setting, MCP server resolution has additional rules. See MCP server loading priority for details.

Web and Mobile

Web and Mobile read the project configuration listed below from cloned repositories, but their coverage differs. Mobile reads project Steering and Skills, while Kiro Web additionally reads project MCP servers, custom agents, and Hooks. Neither surface reads global ~/.kiro/ configuration, since there is no local filesystem.

ConfigurationWebMobile
Project steering (.kiro/steering/)✓✓
Project skills (.kiro/skills/)✓✓
Project MCP servers (.kiro/settings/mcp.json)✓—
Project custom agents (.kiro/agents/, sub-agent delegation)✓—
Project Hooks (.kiro/hooks/)✓—
Sandbox MCP (configured via Web settings)✓—
Permissions YAML and interactive approvals——

Account-uploaded workflows

Workflows use a separate account-upload path in Kiro Web:

MethodWebMobile
Upload one recipe through Agent Config > Workflows✓Not documented
Import .kiro/workflows/ through Configuration Sync✓Not documented

For cloud sessions, open Agent Config > Cloud Config in Kiro Web to upload personal Steering, custom agents, Hooks, Skills, Powers, MCP settings, or a complete .kiro/workflows/ folder. Manage the uploaded items from their feature-specific settings pages. This managed cloud configuration is separate from the ~/.kiro/ directory on your computer and does not modify your local files.

See Custom agents: surface behavior for details on Web and Mobile limitations.

Next steps

  • Workflows — orchestrate reusable multi-step agent work
  • Configuration Sync - upload personal configuration for cloud sessions
  • Custom agents — create and configure specialized agents
  • Steering — project context and conventions
  • Permissions — capability-based access control
  • MCP configuration — connect external tools
  • Hooks — automate workflows with event-driven actions
  • Skills — reusable instruction packages
  • Powers — extend with packaged MCP servers and docs
Page updated: October 21, 2026
Code intelligence
IDE 1.x