ccgate
A permission-request hook for AI coding tools that hands each tool-execution approval decision to a language model, judged against rules written in a configuration file, with working defaults out of the box.
ccgate is a PermissionRequest hook for AI coding tools such as Claude Code, OpenAI Codex CLI and Devin CLI. Instead of a developer approving or denying every tool call by hand, it delegates each permission decision to a large language model, by default Claude Haiku, evaluated against rules written in a jsonnet configuration file.
It ships with built-in default rules, so it works without any configuration once it is registered as a hook, and those rules can be tuned further through its own documentation. Providers other than Anthropic, such as OpenAI or Gemini, can also be configured, with a documented environment variable resolution order for API keys.
It is written in Go and installable through several package managers, a direct source install, prebuilt release binaries, or Homebrew.