whereismyai
shim-cli
shim-cli is an open source command line tool that finds and masks secrets and personal data in AI coding agent traffic.
Shim-cli is an open source command line tool designed to run locally alongside coding agents like Claude Code, Codex, Copilot CLI, and VS Code. It finds secrets and personal data in the information your agent sends, masks them where the client allows it, and shows what each session sent and cost. The tool detects email addresses, phone numbers, credit cards, API keys, passwords, database URIs, and other sensitive items using local checks. It requires Python 3.10 or newer and runs on macOS and Linux. It operates entirely on your machine without requiring an account, API key, or network call.
shim-cli at a glance
- Best for: Software engineer
- Runs on: macOS, Linux, CLI, VS Code
- Pricing: Free, open source under Apache-2.0
- Released: October 2026
- Category: AI coding tool
- Website: getshim.tech
Key features
- Finds secrets and personal data in agent traffic
- Masks sensitive data with placeholders
- Tracks token usage and session costs
- Audits past sessions from local history
- Runs local proxy for command monitoring
- Verifies structured numbers by checksum
- Supports custom detection patterns
Use it for
- Masking sensitive data in coding agent sessions
- Auditing what data previous sessions sent to models
- Tracking token spend and session costs
- Detecting API keys and personal data before sending
Alternatives to shim-cli
- jevgrep — Reduces coding agent costs by providing targeted, relevant repository context.
- Cline — Open source, any model, with approval on every step
- OpenCode — Works with 75+ model providers, local models, and existing subscriptions
- CLI Manager — Manage multiple AI coding agents and watch visible sessions from a single interface.
- Command Code — Repairs open model tool calls and learns developer patterns automatically.
- StackEngine — It automatically redacts and restores sensitive credentials during live LLM workflows.
- Vne — Blocks agent access to secrets while letting it manage env files safely.
- SIwithin — Enforces strict budget caps and folder fences for AI agent CLIs.
- Stroq — Scans recorded sessions and guards future actions with local hooks.
- Claude Scrub — Removes exposed API keys, passwords, and tokens from local AI session history.
- Clai — Query twelve models and local Ollama directly from your terminal using unix pipes.
- ccusage — Tracks token usage and costs locally across multiple coding agent CLIs.
All shim-cli alternatives