A small program, a web app, and one connection.
Patchkin has three parts: a program on each machine, the Patchkin service that connects everything, and the web app you use. This is the whole picture, live.
- Machines connect out. Nothing connects in
- Your browser and phone talk to Patchkin
- Your pipeline asks Patchkin one question

Four lanes between your machine and Patchkin.
What goes each way, and what never does.
From nothing to a running agent.
Create your organization
Sign in to the web app and create an organization and a team. Invite people, or connect single sign-on.
Pair a machine
In Machines, choose Pair machine. The app gives you a one-time code and the command to run on the machine. The program connects out and appears in your list.
Launch an agent
Choose the machine, the tool and a folder, and start. Open the live terminal to watch or take over.
Add standards
Write a rule once in Team standards. It reaches each tool on each paired machine within moments.
Turn on governance
Switch it on in observe mode. Look at sessions, findings and cost. When you are ready, connect your git host and make the merge check required.

The program on your machine does
- Open one encrypted connection out to Patchkin
- Start agents and terminals when you ask
- Apply your standards in each tool’s own files, inside a marked block
- Install git hooks, only when governance is on
- Report small events: a session started, a commit finished, a check passed
- Update itself when you click Update in the web app
It does not
- Accept inbound connections
- Read or upload your files or prompts
- Overwrite your own rules files
- Run governance hooks when governance is off
Short list.
Machines
macOS (Apple Silicon or Intel), Linux or Windows, with outbound HTTPS. An HTTP proxy is fine.
Agents
Whichever tools you already use, installed the way you normally install them.
Git host and pipeline
Optional, for the review rule and the required check. GitHub, GitLab, Bitbucket, Azure DevOps and Jenkins are supported.