ranwhat

What is ranwhat?

ranwhat is an open-source command-line tool that reviews what AI coding agents have already done on a developer's machine. It reads the history that Claude Code, Codex, Gemini CLI, GitHub Copilot CLI and eight other agents write to disk, and picks out the irreversible actions worth knowing about, such as reading private keys, recursive deletions and publishing packages. A clean command finds credentials left in plaintext in agent transcripts, says which to rotate and masks them on request, and a scan command scores the authority an agent's credentials carry, including permissions that were granted but never used. It works after the fact rather than blocking actions as the agent runs, and the site points to the agents' own permission rules, hooks and sandboxes for that. The tool is written in Python, MIT-licensed and published on PyPI, and the site states that it sends no telemetry and needs no account. A paid Plus plan adds a capability catalogue feed now, with shared reporting, retention and alerts listed as still being built. It was first released in September 2026 by Matija Mikulinec.

Best for: Developers and teams using Claude Code, Codex or similar agents who want a record of what the agent ran and which secrets it exposed

Key Features

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

• ranwhat: official websitePrimary source
• ranwhat: AI coding agent security for Claude Code
  ranwhat
• ranwhat commands: check, watch, clean, scan
  ranwhat
• ranwhat pricing
  ranwhat
• MatijaMiki/ranwhat (MIT)
  GitHub
• ranwhat on PyPI (first release 23 September 2026)
  PyPI

Spot an error, or do you represent ranwhat? Request a correction.