shim-cli
shim-cli is a free, Apache-2.0 command-line tool that hooks into Claude Code, Codex, Copilot CLI and VS Code to find secrets and personal data in what an agent sends, mask it where the client allows, and report session tokens and cost.
About shim-cli
What is shim-cli?
A free, open-source (Apache-2.0) CLI that shows what your coding agent sends to the model and masks secrets and personal data where the client allows it.
Supported agents
- Claude Code: native hook; files and tool results masked before the model reads them
- Copilot CLI: prompt replaced with a redacted version
- Codex and VS Code: report, and block in enforce mode
What it detects
Emails, phone numbers, cards, IBANs, API keys and secrets, passwords, database URIs, IP and MAC addresses, US SSNs, Turkish IDs and custom patterns.
Visibility
shim watch -- claude: tokens, spend and sensitive values per sessionshim audit: counts across past sessions without printing values
Pricing
Free, no account, no telemetry. macOS and Linux. The company also offers an AI Gateway with a free Developer tier and an Enterprise plan.
Value & Audience
Value Proposition
Gives developers a local, account-free way to see what their coding agent leaks to the model and to mask secrets and personal data before it leaves the machine, where the client supports it.
Problem Solved
Coding agents read files, configs and command output and send them to a model provider, which can include API keys, database URLs and customer data. shim-cli detects those values, masks or blocks them, and shows what each session sent and cost.
Target Audience
Tech Stack
Other
Social & Links
Additional Links
Loading ratings...
Loading comments...
Gallery
Feedback & Roadmap
shim-cli FAQ
Common questions about shim-cli's features, pricing, and use cases
What does shim-cli do?
See and mask what your coding agent sends to the model Gives developers a local, account-free way to see what their coding agent leaks to the model and to mask secrets and personal data before it leaves the machine, where the client supports it.
Is shim-cli free to use?
shim-cli is open source and free to use, in the Security & Privacy category.
What problem does shim-cli solve?
Coding agents read files, configs and command output and send them to a model provider, which can include API keys, database URLs and customer data. shim-cli detects those values, masks or blocks them, and shows what each session sent and cost.
Who is shim-cli built for?
shim-cli is built for Developers, Security Engineers, DevOps & SRE, Startups, Enterprises.
What tech stack does shim-cli use?
shim-cli is built with Python.
What category is shim-cli listed under?
shim-cli is listed in the Security & Privacy category on TechLogHub, alongside curated alternatives with community ratings and pricing comparisons.
shim-cli appears in
You May Also Like
View all alternatives to shim-cli
Free Online Secret Message Encoder/Decoder
Encrypt and decrypt secret messages and files with AES-256 encryption in your browser.
View Product
SAM - Chrome Web Store
A powerful open-source adblocker featuring fingerprint protection and YouTube ad skipping.
View Product
LLM API Security Testing for Prompt Injection and Data Leaks | PromptBrake
Security test LLM-powered API endpoints for prompt injection, jailbreaks, data leaks, tool abuse, and unsafe behavior. Get evidence-backed findings in minutes.
View Product
SafeSteps AI
A smart, private online protection system that monitors dangerous content on home computers in real time without invading privacy.
View ProductOne email a week
TechLogHub tracks 588 tools and 529 open-source projects. Get the week's new launches, release roundups and open-source picks — nothing else.
Get the TechLogHub digest
One email a week: new and trending developer tools, fresh comparisons, and what shipped. Unsubscribe in one click.