What is stepwarden?
stepwarden is a Claude Code mod by getexcited that every tool call your agent makes, checked before it runs. Verifies each pending tool call against the session's plan using TypeSafe AI's Jev model, then allows it, asks you, or blocks it. It is listed under Agents & automation and has 1 GitHub stars.
| Type | Claude code mod |
|---|---|
| Author | getexcited |
| Repository | getexcited/stepwarden |
| Popularity | 1 GitHub stars |
| Category | Agents & automation |
| Security | High risk (52/100) |
| Rank | #1,802 of 5,272 Claude Code mods; #139 in Agents & automation |
| License | Apache-2.0 |
| Last commit | 2026-09-18 |
| Hooks | 4 events |
| Sees | every prompt, every tool call |
| Draws on | nothing |
Is stepwarden safe to install?
stepwarden scores 52/100 on the MCPMods security check: High risk. Things to review: sends data over the network; writes files or config; reads environment variables; watches every prompt or event. It passed 4 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| Sends data over the network | Review |
| Starts no processes | Pass |
| Writes files or config | Review |
| Reads environment variables | Review |
| Watches every prompt or event | Review |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| Has an open-source license | Pass |
API calls in its code
| Call | What it means |
|---|---|
$.clock.now | |
$.clock.sleep | |
$.command.register | |
$.config.set | changes config |
$.env.get | reads env vars |
$.fs.exists | reads files |
$.fs.read | reads files |
$.fs.write | writes files |
$.http.fetch | network requests |
$.session.id | |
$.store.delete | keeps its own state |
$.store.get | keeps its own state |
$.store.keys | keeps its own state |
$.store.set | keeps its own state |
$.ui.ask | draws interface |
$.ui.log | draws interface |
$.ui.toast | draws interface |
How do I install stepwarden?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/getexcited/stepwarden claude plugin validate ./stepwarden/.
- Install it. Run this in your terminal, then /reload-plugins in an open session.
git clone https://github.com/getexcited/stepwarden && claude --plugin-dir ./stepwarden/.
Or ask Claude to set it up
Paste this into Claude Code and it installs stepwarden for you:
Install the "stepwarden" Claude Code mod from https://github.com/getexcited/stepwarden. Run claude plugin validate on it first and show me what it can access before you enable it.