OpenMoat

crocodile-labs/openmoat

Local policy layer with a BeforeTool hook for Gemini CLI (openmoat init) that checks every shell command, file read and write, web request and MCP call against one policy before it runs, blocking what the policy denies. Adds an egress proxy, MCP server pinning and a hash-chained audit log, and the same policy covers Claude Code, Codex, Cursor and other agents. Rust, MIT OR Apache-2.0

Rust MIT

View on GitHub → Find it in the atlas

Install

brew install crocodile-labs/tap/openmoat # macOS and Linux

Repository reader

Explore before you clone

Read the project’s README, skills and supporting Markdown here. Rendered view is shown first; source is one click away when you need the exact text.

Fetched from GitHub
Open on GitHub
Loading the project’s README…

Public files are loaded on demand from the repository. The atlas does not copy or modify them.

Screenshot

Screenshot or social card for OpenMoat
GitHub's social card — no screenshot was found for this project, fetched from source rather than copied into this repository.

Platform support

Derived from the project's own README, install route, CI configuration and release assets — not from running it.
PlatformRuns hereOn what evidence
WindowsYesStated in the project's own README, install route, CI config or release assets.
WSL2YesStated in the project's own README, install route, CI config or release assets.
macOSYesStated in the project's own README, install route, CI config or release assets.
LinuxYesStated in the project's own README, install route, CI config or release assets.
DockerNoNo evidence of support anywhere in the project.

Where it came from

Named by 1 of the 39 lists the atlas merges.

  • Gemini CLI Ecosystem

How it is classified

One topic, 7 harnesses. Each link is a prerendered page of everything else in that slice.

Harnesses & Runtime InfraClaude CodeClaude / AnthropicMCPCodex / OpenAIGemini / GoogleGitHub CopilotCursor

Related in Harnesses & Runtime Infra

Closest first — projects that plug into the same harnesses, then the ones the most lists agreed on.

  • kunal12203/GrapeRootkunal12203/GrapeRootPersistent context and a code knowledge graph for coding agents, with a Codex CLI launcher
  • skilletBrattlof/skilletZero-dependency Go CLI / package manager that installs Agent Skills and MCP servers into Gemini CLI (and other tools), plus Claude Code slash…
  • ccmanagerkbwo/ccmanagerCoding agent session manager supporting Claude Code, Gemini CLI, Codex, Cursor, Copilot, Cline, OpenCode, Kimi CLI. Smart auto-approval via Haiku…
  • AgentWatchmishanefedov/agentwatchLocal-only TUI + web dashboard that tails Gemini CLI sessions alongside Claude Code, Codex, Cursor, Hermes, and OpenClaw on one unified timeline…
  • 9routerdecolua/9router(23.7k ⭐) - Routes Claude Code, Codex, Cursor, Cline, and other coding agents to dozens of model providers with automatic fallback
  • Devie AI Quota Trackermathdevie/devie-ai-quota-trackerDashboard and macOS menu bar for tracking AI subscription quotas in one place (Claude Code, Codex, Gemini CLI, GitHub Copilot, and Cursor). Supports…
  • Dicklesworthstone/coding_agent_session_searchDicklesworthstone/coding_agent_session_searchUnified TUI and CLI to index and search local coding agent session history across 11+ providers including Codex
  • FlueSFKislev/Flueby S.F. Kislev - A tiny bridge that lets Claude Code drive desktop software — Photoshop, Premiere, Blender, Unity, InDesign, Office, 13 apps total…