Who it is forA security-minded developer or team lead who must approve sending source code from a repository to an external AI provider.
The problemWithout a clear review, it is unclear which files and fragments would be disclosed to a remote provider and how much work a search would do.
The outcomeA written review of eligible files, excluded files, search cost and provider settings that can be approved before the first live search.
What you need first
- Node.js 24
- npm
- An API key for TypeSafe AI, Vercel AI Gateway or OpenRouter
- Permission to send eligible source excerpts from the target repository to the chosen provider
Steps
- Run
npm install -g @nassim-arifette/jevgrep - Run
jevgrep init --globaland thenjevgrep initfrom the repository root, leaving remote evaluation disabled if approval is pending - Run
jevgrep doctorto check the provider, credential state, authorized root, limits and cache without a network request - Run
jevgrep inspectto list eligible files, fragments and exclusions - Add repository-specific exclusions to
.jevgrepignorewhere needed, then runjevgrep inspectagain
Prompt for your agent
In the repository at <repo path>, run `jevgrep doctor` and `jevgrep inspect` and summarize the eligible file count, the exclusions and the provider in use. Verify that no search command has been run and that remote evaluation is disabled until a person approves it.
Caveat. The README notes that credential filters cannot detect every secret, so the inspect review does not guarantee that no sensitive content is eligible.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for nassim-arifette/jevgrep and "Review what leaves the machine before a first search"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer