Ccgate

ccgate

A PermissionRequest hook for AI coding tools. It delegates each tool-execution permission decision to an LLM (Claude Haiku) using rules written in a jsonnet configuration file.

ccgate ships with built-in default rules, so it works out of the box without any configuration.

Supported targets:

- Claude Code
- OpenAI Codex CLI
- Devin CLI

日本語ドキュメント

Install

mise (recommended)

Requires mise 2026.4.20 or later.

To try ccgate without installing it globally (similar to npx / uvx):

aqua

Via the aqua standard registry (requires registry v4.498.0 or later). In an aqua-managed project (run aqua init first if you don't have an aqua.yaml yet):

For a global aqua config, follow aqua's own tutorial.

go install

GitHub Releases

Download a binary from Releases and place it on your PATH.

Homebrew

Quick start — Claude Code

1. Register as a Claude Code hook

~/.claude/settings.json:

"command": "ccgate" (no subcommand) is the canonical Claude Code hook invocation; ccgate claude is the explicit form.

If ccgate is not on your PATH (e.g. when relying on mise exec instead of a global install), set the hook command to the equivalent invocation, or use an absolute path to the binary.

2. API key

ccgate calls Anthropic's Claude Haiku by default. Export CCGATE_ANTHROPIC_API_KEY (or ANTHROPIC_API_KEY as fallback). For OpenAI / Gemini and the resolution order, see docs/providers.md#api-keys.

Switching providers has a copy-pasteable block for OpenAI with gpt-6-luna.

That's it — ccgate is now running with its embedded defaults. To customize what is allowed or denied, see docs/rule-tuning.md; for background on how rules work, see Concepts.

Quick start — Codex CLI

Codex hooks require [features] hooks = true in ~/.codex/config.toml. See docs/codex-cli.md for details.

1.…