Early access
CodeMarine Dev · Claude

Independent security around Claude.

Continuous workspace security for Claude-written code, plus provider-specific hook and MCP paths.

Claude coverage
INTEGRATION PROFILE Beta
Provider
Claude Code and Claude Desktop
Primary transport
Workspace watcher, Claude Code hooks and CodeMarine MCP
Workspace scanning
Available
Blanket runtime protection
Not claimed

What the integration can see and where it stops.

Workspace observation and pre-execution control are shown separately.

OBSERVE

Evidence CodeMarine can inspect

  • Workspace changes and resulting source files
  • Dependencies, lockfiles, rules and skills
  • CodeMarine-mediated MCP tool activity
PREVENTIVE PATH

Defined blocking potential

  • Supported Claude Code shell and write operations after setup
  • Defined catastrophic command classes through the local guard
LIMITS

What you should not assume

  • Live host proof is not available yet, so hook surfaces remain Setup needed
  • Claude Desktop native connectors and UI actions are not covered
  • Cowork and computer-use actions are not intercepted by local hooks

Native controls protect Claude. CodeMarine protects the shared environment.

Keep provider permissions and sandboxes. Add one deterministic policy around the workspace and the rest of your stack.

NATIVE LAYERProvider permissions and containment

Controls the surfaces and execution modes owned by the provider.

CODEMARINE LAYERCross-provider workspace policy

Secures resulting code, software supply chain and supported actions under one control model.

Install the CodeMarine skills for Claude Code.

Install the CodeMarine app first, then add the skills to Claude Code from the local CodeMarine package.

codemarine agents install claude_code --skills
Get CodeMarine app

The app supplies the scanner. The provider skill or adapter connects it to Claude.

  1. 01

    InstallPlace the supported adapter and configuration.

  2. 02

    VerifyCheck version, integrity and workspace binding.

  3. 03

    ProveRun a harmless nonce-bound canary through the real host.

  4. 04

    MaintainExpire proof when the host, policy or configuration changes.

← All integrationsRead the coverage contract →

Evaluate CodeMarine with Claude.

Map the current workspace, provider paths and limits before deciding which controls to rely on.

Request early access Read the current docs
Sarge, the CodeMarine guardian