Every agent gets a name. Every commit gets a human.
One gateway between your coding agents and your git host. Each agent signs in as itself, with a key that dies in an hour, and every commit carries the chain back to whoever launched it. The proof lives in the code, not in one vendor's log.
Set up githug for owner/repo: run `curl -fsSL https://githug.ai/install | sh`, then `hug init --repo owner/repo --json`. Show me any code or link it prints and wait for it to finish.
works with claude code · codex · cursor · your own loop
github today · gitlab and gitea next · open source · self-host free, or we host it
Accountable: ana
Agent-Chain: ana › orbit › orbit-w2
Run: loop-0412
Your agents stop hiding behind your account.
Keys that expire in an hour
One token per agent, one repo, a subset of your permissions. A leaked key is dead by lunch.
A name on every PR
orbit-githug[bot], with its own avatar and rate limit. Two clicks on GitHub. GitLab and Gitea next.
Your graph, your call
The agent writes it. You're accountable for it. Count its commits on your GitHub graph, or keep your graph human-only.
One call. One hour. One repo.
Your agent trades its key for a short-lived GitHub token and gets back the author and trailers to sign its commits with.
$ curl -s https://githug.ai/v1/token \ -H "Authorization: Bearer $AGENT_KEY" \ -d '{"repo":"acme/api","run":"loop-0412"}' { "agent": { "id": "orbit", "name": "orbit" }, "repo": "acme/api", "expires_at": "2026-10-05T15:12:09Z", "accountable": "ana", "author": { "name": "orbit", "email": "orbit@agents.githug.ai" }, "trailers": [ "Accountable: ana", "Agent: orbit" ], "token": "ghs_••••••••••••" }
Don't take our word for it. Check a commit.
Paste a GitHub commit or PR link. See which agent made it, the key it pushed with, and the human who answers for it.
- claude pushed it with its own key, 2026-10-11
- 1-hour key, this repo only
- a named human answers for it
5 keys minted · 6 PRs merged by this agent so far · see the checks →
Agent work you can trust, end to end.
Every agent gets a name
- its own bot and avatar
- 1-hour, one-repo keys
- sub-agents under a parent
Anyone can check who answers for a commit
- verify any commit or PR
- pushes attested by the agent's own key
- free verify Action for maintainers
Your repo decides what agents may do
- require the chain on every commit
- human sign-off on sensitive paths
- activity limits: open PRs, pushes, PR size
The same chain on every forge
- GitLab and Gitea / Forgejo
- evidence export for audits
- a public Agent Merge Index
Full roadmap · built in the open: github.com/githug-ai/githug
Free to run yourself. Pay us to run it.
The core is open source (AGPL-3.0) and stays that way. githug.ai runs the same code for you and adds the parts that need us running them. What you pay funds githug.
hosted is free during the beta · these prices start after it, and beta accounts keep them- agent identity, 1h repo keys
- push attestation, verify
- policy at push
- one container, your App
- self-hosting guide →
- unlimited agents
- every public repo
- verify page
- 7-day audit
- private repos
- 5 agent-repo grants
- 30-day audit
- run tracing
- 25 agent-repo grants
- evidence export
- 1-year audit
Hosting means no GitHub App to register, and keys, backups and updates handled for you. Nothing moves from open source to paid. More grants, later: $1 per agent-repo a month. pricing.md for agents.
Give your first agent a name.
Paste this to your coding agent. You approve one code on GitHub; it does the rest.
Set up githug for owner/repo: run `curl -fsSL https://githug.ai/install | sh`, then `hug init --repo owner/repo --json`. Show me any code or link it prints and wait for it to finish.
quickstart · set it up yourself · free during the beta
How agents reach GitHub today.
- Agent-ready forge compare
- GitHub Copilot coding agent
- OpenAI Codex (cloud)
- Claude Code (cloud and GitHub Actions)
- Google Jules
- Cursor cloud agents
- Devin
Is githug Gateway a new place to host code?
No. It is a layer that sits between your coding agents and the remote you already use (GitHub, GitLab, Gitea, or bare git). Your repository, issues and review UI stay where they are. The gateway adds what those hosts do not give agents: their own identity and budget, enforced policy at push time, and provenance stored with every commit.
Which coding agents does it work with?
Any agent that speaks MCP or pushes over git-over-HTTPS: Claude Code, OpenAI Codex, Cursor, GitHub Copilot's coding agent, Devin, Jules, and agents you build yourself. Each one gets its own credential rather than sharing a person's token.
Can I run it myself?
Yes. The service is open source under AGPL-3.0: run it as one container next to your own remote, or on your own Cloudflare account, with the full open-source core (identity, scoped tokens, attestation, verify, policy at push) and no billing. Guide: https://github.com/githug-ai/githug/blob/main/docs/SELF_HOSTING.md. The hug CLI and the verify Action are open source too (Apache-2.0).
What does it cost?
The beta is free. Planned pricing: free on public repositories, with unlimited agents. Private repositories start at $5 a month (Solo, 5 agent-repo grants) or $25 a month (Team, 25 grants, evidence export), then $1 per extra agent-repo grant a month. Self-hosting is free forever; the hosted plans pay for running it and fund githug. Nothing moves from open source to paid. Early accounts keep their price.
GitHub already labels its own agents. Why use githug?
GitHub records agent activity in its own audit log, inside GitHub. githug writes the chain, from the accountable human to the agent to the run, into the commit itself, so the evidence travels with the code and anyone can check it. It covers any agent you run, not only the ones GitHub hosts, and it is built to work the same way on GitLab and Gitea (planned).
What is it built on?
Cloudflare Workers, D1, KV and R2 for the hosted service, written in TypeScript; the CLI is Go. The same code runs self-hosted as one container. Source: https://github.com/githug-ai/githug (AGPL-3.0). githug also runs an agentic Q&A service on this stack.