Fida logoFidav0.1.10
Guides

Agent Integrations

Wire Fida into Codex, Claude Code, Cursor, OpenCode, Copilot, Windsurf, and MCP clients.

Run one command to wire every supported agent it detects and verify redaction:

fida

Fida detects agents by home-directory config, project marker files, CLI binaries on PATH, and macOS application bundles. Setup records the artifacts it actually installed, so later status checks can tell whether protection is still intact.

Set up agents

Wire agents globally or per project, then see exactly what each integration touches.

Scriptable setup

fida --yes                       # protect every detected agent, no prompt
fida on opencode cursor          # protect specific agents
fida on                          # protect every detected agent
fida off opencode                # remove protection from one agent

Setup is global — one install guards every repository.

Integration surfaces

AgentGateway MCPSkill or rulesHook
Codexconfig.toml~/.codex/AGENTS.md~/.codex/hooks.json hard block.
Claude Code~/.claude.json~/.claude/CLAUDE.md~/.claude/settings.json hard block.
Antigravity~/.gemini/config/mcp_config.jsonAGENTS.md (project) · ~/.gemini/GEMINI.md (global)None.
OpenCode~/.config/opencode/opencode.json~/.config/opencode/OPENCODE.mdNone.
Cursor~/.cursor/mcp.json.cursor/rules/fida.mdc project fileNone.
GitHub Copilot.vscode/mcp.json project file.github/copilot-instructions.md project fileNone.
Windsurf~/.codeium/windsurf/mcp_config.json~/.codeium/windsurf/memories/global_rules.mdNone.

Protection levels

The three layers are not equally strong on every agent, and Fida is explicit about it. fida, fida on, and fida status use the same protection model:

LevelMeaning
enforcedA hard-block hook is installed and Fida's synthetic-secret self-test passed.
best_effortGateway and steering are installed, but the agent has no hard-block hook.
incompleteRequired artifacts are missing or verification failed.
inactiveThe agent is detected but has no active Fida integration.

Codex and Claude Code can be enforced because they support a pre-tool hook that hard-blocks native reads containing detected secrets. Cursor, OpenCode, GitHub Copilot, Windsurf, and Antigravity are normally best_effort: the gateway tools and assertive steering apply, but there is no hard hook to force every native read through Fida.

Run fida status for the day-to-day report, including how many secrets have been protected. For best-effort agents, add OS-level controls when you need containment that does not depend on the agent following steering. See the security model for how the layers stack.

Managed blocks

Files shared with you, such as CLAUDE.md, AGENTS.md, ~/.gemini/GEMINI.md, and Windsurf global rules, are edited through managed blocks. Your own content is preserved when protection is added or removed.

Remove integrations

fida off                         # remove protection from all agents
fida off cursor                  # remove protection from one agent

fida off removes Fida-managed blocks and setup metadata. It does not delete unrelated agent configuration.

On this page