- Overreach
Overreach
Overreach audits AI-agent code diffs against the prompt that authorized them. Give it the prompt you gave your coding agent and the diff it produced — it tells you exactly what the agent added that wasn't in scope.
Catches: unauthorized dependencies, env vars, endpoints, cron jobs, out-of-scope files, features the prompt never mentioned.
3-stage pipeline:
- Scope extraction (LLM) — one cheap call reads your prompt into structured JSON
- Diff parsing (deterministic) — regex-parses what the diff actually adds
- Comparison (deterministic) — set arithmetic: actual - authorized = findings
No API key required. Falls back to deterministic regex extraction without a key.
Try it: npx -y -p overreach overreach-cli demo
Also coordinates multiple AI agents on the same repo — file claims, conflict detection, scope declarations, check-in heartbeats. Works across Claude Code, Cursor, and Codex simultaneously. Just JSON files committed to git, no server.
Server Config
{
"mcpServers": {
"overreach": {
"command": "npx",
"args": [
"-y",
"-p",
"overreach",
"overreach"
]
}
}
}