# Editors and coding agents

How much zn-gate can protect in each editor and coding agent, and the two-minute setup for each one.

Source: https://usezn.com/docs/integrations/editors/

zn-gate protects most where an agent lets it hook into its own tools: there it can block reads of secret files and remove secrets from what the model sees. Where an editor only supports MCP servers, zn-gate offers its checks to the agent and can check your other MCP servers, but it cannot see the agent's own file reads or shell commands.

| Editor or agent | Setup | Blocks reads of `.env` and credential files | Removes secrets from shell output and files | Removes secrets from MCP results | Blocks a secret pasted into the chat | Tested by us |
| - | - | - | - | - | - | - |
| Claude Code | Plugin: `claude plugin install zn-gate@usezn` ([Quickstart](https://usezn.com/docs/quickstart/)) | Yes | Yes | Yes | Yes | Yes, end to end |
| Codex CLI | `zn hooks install codex`, then trust it in `/hooks` | Yes | Yes (replaces the result) | Yes | Yes | Yes, end to end |
| OpenCode | `zn hooks install opencode` | Yes | Yes | Yes | Yes | Yes, end to end |
| [Cursor](https://usezn.com/docs/integrations/cursor/) | `zn hooks install cursor` | Yes | **No** (Cursor does not allow it) | Yes | Yes | Formats checked; no end-to-end run |
| [VS Code (GitHub Copilot)](https://usezn.com/docs/integrations/vscode/) | MCP server | No | No | Only servers you wrap | No | Not yet verified |
| [Google Antigravity](https://usezn.com/docs/integrations/antigravity/) | MCP server | No | No | Only servers you wrap | No | Not yet verified |
| [Windsurf (Devin Desktop)](https://usezn.com/docs/integrations/windsurf/) | MCP server | No | No | Only servers you wrap | No | Not yet verified |
| [Cline](https://usezn.com/docs/integrations/cline/) | MCP server | No | No | Only servers you wrap | No | Not yet verified |
| [Zed](https://usezn.com/docs/integrations/zed/) | MCP server | No | No | Only servers you wrap | No | Not yet verified |
| [JetBrains AI Assistant](https://usezn.com/docs/integrations/jetbrains/) | MCP server | No | No | Only servers you wrap | No | Not yet verified |
| [Continue](https://usezn.com/docs/integrations/continue/) | MCP server | No | No | Only servers you wrap | No | Not yet verified |

"Only servers you wrap" means that the results of the MCP servers you start through `zn-gate shield` are checked; each page shows how. The hooks need zn-gate 1.5 or later from npm (`npm install -g zn-gate`). Per-agent details for the hooks: [compat.md](https://github.com/usezn/zn/blob/main/docs/compat.md).

VS Code, Antigravity and Windsurf have their own agent hooks, but zn-gate does not install hooks for them yet.