for claude code users

Claude Code writes the code. You approve its Git operations.

Claude Code submits Git proposals over MCP. FluxGit shows the operation-specific impact, risk and recovery context, then runs the operation only after you approve.

Download FluxGit Free read-only shell on GitHub

macOS, Windows and Linux · free for public repos · compatible with local stdio MCP hosts

Real interface · synthetic demo data

The three-step setup.

Three steps using the commands shipped in the open-source MCP server README.

Using Cursor or Codex instead? Same three-step setup.

step 1install

Install FluxGit

Download the desktop app from the download page, which lists the platforms that have a build. This is where the approval cards appear. If you only want the free read-only shell without the app, one command puts fluxgit-mcp-sidecar on your PATH:

cargo install fluxgit-mcp-sidecar --locked

step 2connect

Connect Claude Code over MCP

Paste this block into Claude Code's MCP config. FluxGit pre-fills the sidecar path and gateway address under Settings, Agents / MCP, Quick Connect:

{
  "mcpServers": {
    "fluxgit": {
      "command": "/absolute/path/to/fluxgit-mcp-sidecar",
      "env": {
        "FLUXGIT_MCP_HANDSHAKE_ADDR": "127.0.0.1:59647",
        "FLUXGIT_MCP_AUDIT_LOG": "/optional/path/to/audit.jsonl"
      }
    }
  }
}

FLUXGIT_MCP_HANDSHAKE_ADDR unlocks the FluxGit-powered tools and the approval loop; without it, the free read-only tier still works. FLUXGIT_MCP_AUDIT_LOG is optional and writes an append-only audit file.

step 3first approval

Submit the first Git proposal

Ask Claude Code to "commit what you changed." It calls repo.brief, submits operation.preview.commit with its reason and files, then FluxGit shows the Approve or Reject card.

What changes for you.

no surprisespropose

It asks first

Every Git operation Claude submits through FluxGit arrives as a proposal with a clear reason, operation-specific impact, risk and available recovery context.

recoveryrestore

Restore the branch

For a completed plan, the guarded action restores branch HEAD plus tracked files to the pre-plan commit. It does not reconstruct the old index, working tree or untracked files; step snapshots and Safety Timeline keep those recovery paths separate.

contextrepo.brief

Fewer orientation commands

repo.brief returns branch, status, recent history and worktree context in one typed response, reducing the number of separate orientation commands Claude needs before it starts the actual task.

Common questions.

pricing

Is it free?

Free mode works with verified public repositories, without remote control. Buy FluxGit Full: A perpetual desktop license for one person, on up to 3 of your computers: macOS, Windows or Linux. Includes 12 months of remote control and updates. After the included year, automatic renewal is 9.99 USD per year. Cancel future renewals in Paddle. The MCP shell itself is open source under Apache-2.0.

other agents

Does it only work with Claude Code?

No. FluxGit connects through a local stdio MCP sidecar. Compatible hosts can launch it with the same JSON shape; permissions and config locations vary.

security

Can the agent bypass approval?

FluxGit MCP has no direct Git mutation endpoint. Twelve operation tools submit proposals, and FluxGit runs one only after your approval. A separate shell granted by the host remains outside this boundary.

git skills

What if I don't know Git well?

The card explains the operation, risk and available recovery context before you approve.

Explore the complete tool surface and protocol contract on the MCP feature page.