GitPin

Prove agent answers. Then verify them.

Not another repo-context MCP. GitPin is index-free multi-repo evidence: path, line, full SHA, then pin.verify / git show. No database, embeddings, or write tools. Dirty worktrees are never evidence.

Start with npx View on GitHub

No database. No embeddings. No write tools. No local reindex lag.

gitpin READ-ONLY · PIN.* TOOLS
1
Agent question

Where is bearer authentication enforced?

2
GitPin

Reading committed evidence at Git HEAD…

docs/architecture.md:42 990c830d58cc68d63901985e5234ed3137819802
42HTTP requests require bearer authentication.
Known fact
Directly supported by committed source.
Inference
Authentication is part of the remote trust boundary.
Gap
Production endpoint ownership is not registered.

Evidence set 8e44b735…be61

How it works in three steps

Product loop: candidates → prove → verify.

Search hits are candidates, not claims. pin.prove builds an evidence pack; pin.verify re-checks path@SHA with git show. Git HEAD is the only truth source.

1 Register Git roots

repositories:
  - name: storefront
    path: ../storefront
    branches: [main]
  - name: api
    path: ../api
    branches: [main]
Git HEAD Prove · Verify

2 Prove a claim

pin.prove → evidence pack

3 Verify independently

docs/architecture.md:42 990c830d58cc68d63901985e5234ed3137819802

A deliberately narrow trust boundary.

Read the architecture
Read-only tools
GitPin never writes, commits, or changes repository state.
Sensitive paths blocked
Environment files, credentials, keys, tokens, and secrets fail closed.
Dirty work excluded
Local answers come from committed HEAD, with stale documentation signaled.
Documentation-only HTTP
Remote images contain a generated docs and manifest snapshot, not source code.

From install to cited answer.

Run init to create an external registry, verify a cited result, and print your MCP client handoff.

npx -y @shmindmaster/gitpin@latest init --client codex

✓ Registry: ~/.gitpin/repositories.yaml
✓ Readiness: ready
✓ First evidence: README.md:1 at a full Git commit SHA

Works with Claude Code, Codex, Cursor, Windsurf, Zed, and Continue.

Ten read-only pin.* tools

  • pin.catalog
  • pin.search_docs
  • pin.search_code
  • pin.prove
  • pin.verify
  • pin.get_doc
  • pin.read
  • pin.analyze
  • pin.inspect
  • pin.compare

MIT licensed. Built in public.
Contributions backed by repeatable validation.

View on GitHub → Contributing guide →