Local-first AI tooling infrastructure. Audit, manage, and secure MCPs, agents, skills, hooks, and commands across Claude Code, Cursor, and more from your machine, with no cloud dependency.

Free to use. grekt is free for personal and commercial use. The source is available under BSL 1.1, which means you can't use this code to build something that competes with grekt. Each version converts to MIT after two years.

Why grekt?

You are running AI tools you have never checked. Every time you install a skill from a registry, add an MCP server, or pull an agent config you are trusting code that has direct access to your editor, your files, and your workflow.

No sandbox. No review. No audit. 20% of skills in public registries have been flagged as malicious. 84% of developers use AI tools daily, but only 29% trust what they're running. The gap between adoption and trust is growing. grekt closes it.

grekt gives you three things:

• Visibility. See every AI artifact in your projects. What it does, what it touches, whether anyone has actually checked it.
• Verification. Every artifact scanned for security risks and evaluated for quality. PASS, FAIL, or WARN -- no ambiguity.
• Control. Lock versions. Pin hashes. Sync verified configurations across your team. Your tools, your machine, your rules.

Installation

Linux / macOS

curl -fsSL https://cli.grekt.com/install.sh | sh

macOS (Homebrew)

brew install grekt-labs/tap/grekt

npm

npm install -g @grekt/cli

Quick Start

grekt init                        # Initialize a project
grekt add @scope/artifact-name    # Add an artifact
grekt install                     # Install from lockfile
grekt sync                        # Sync to your AI tools

Verify your stack

grekt scan                        # Scan artifacts for security risks
grekt eval                        # Evaluate artifact quality and behavior
grekt check                       # Check lockfile integrity and drift

Manage artifacts

grekt list                        # List installed artifacts
grekt outdated                    # Check for available updates
grekt upgrade                     # Upgrade artifacts
grekt trust @scope/artifact       # Mark an artifact as trusted

Artifacts can come from:

• Your self-hosted registry on GitHub or GitLab
• The public registry (@scope/name)
• Official repos on GitHub (github:user/repo) or GitLab (gitlab:host/user/repo)
• A local path on your machine (./path)

Supported tools

grekt syncs to Claude Code, Cursor, Windsurf, Cline, GitHub Copilot, Aider, Continue, OpenCode, Amazon Q, and any tool following the agentskills.io standard.

For the full command reference and guides, visit the documentation.

Contributing

See CONTRIBUTING.md. Feature requests and bug reports are welcome.

License

BSL 1.1 -- What does this mean?