nimblegate

What it is

nimblegate is a self-hosted git gateway that sits between your AI coding agents and your real repository. Agents (Claude Code, Codex, Cursor, Aider or your own scripts) push to the gateway instead of GitHub, GitLab or Gitea. Every push is checked before anything reaches your repo.

The checks are deterministic pattern rules, with no AI involved: the same push always gets the same answer.

What it catches

• Leaked secrets: API keys from AWS, GitHub, OpenAI, Anthropic, Stripe, Slack and others, private keys, .env files, kubeconfig credentials
• Dangerous git moves: force-pushes to protected branches, --no-verify, amending pushed commits
• Agent shortcuts: skipped or placeholder tests, CI told to ignore failures, linters switched off for a whole file
• Risky commands and config: curl | sh, rm -rf of protected paths, database schema drift
• Your own rules: add regex checks from the dashboard with a live preview

50+ built-in rules, grouped into one-click kits.

How it works

1. Your computer pushes only to the gateway, over SSH.
2. Only the gateway holds the token for your real git host, so there is no way around it.
3. Clean pushes are forwarded byte for byte (same SHAs, same signatures).
4. Rejected pushes report the rule, file and line, so the agent can fix the problem and push again.

Every decision is recorded on a dashboard. Optional extras: PR comments and webhooks when a push is rejected (Auto-PR), alerts when two agents edit the same files, and a read-only MCP endpoint so agents can ask about their own pushes.

Try it

curl -O https://raw.githubusercontent.com/nimblegate/nimblegate/main/compose.yaml
docker compose up -d

The 10-minute quick start ends with the gateway blocking a fake leaked key. Or click around the live demo first.

Details

• One Docker container, or a bare-metal install for production
• No telemetry, nothing phones home
• Free for non-commercial use; commercial use needs a per-company licence (pricing)
• Docs · Source