If you are juggling Claude Code, Codex CLI, Gemini CLI, and random API keys across different providers, the setup gets ugly fast. Different protocols. Different auth flows. Different config files. Different model names. Different rate…

Sichere Programmierung dev.to 09.04.2026, 09:08 Uhr 4 Min. Lesezeit

↗ Quelle (dev.to)

Reagiere als Erste:r — dein Feedback zählt!

STANDARD — Regulärer Patch-Zyklus ~4 Min. (757 W.)

Deep Tech

I Stopped Paying for AI CLI Chaos: This Local Gateway Makes Claude Code, Codex, and Gemini Work as One

Angriffsfläche

Enterprise IT / Cloud Infrastruktur

Exploit-Status

⚠️ Öffentlicher Exploit-PoC verfügbar

Sofortmaßnahme

Asset-Inventar prüfen & Upstream-Advisory überwachen

If you are juggling Claude Code, Codex CLI, Gemini CLI, and random API keys across different providers, the setup gets ugly fast.

Different protocols. Different auth flows. Different config files. Different model names. Different rate limits.

So I built CliGate: a local multi-protocol AI gateway that sits on localhost and turns that mess into one controllable entry point.

Instead of wiring every tool separately, you point them at CliGate once and get:

multi-account pooling

API key failover

protocol translation

app-level routing

free-model fallback

a visual dashboard for everything

What CliGate actually does

CliGate is an open-source local proxy for AI coding tools and model APIs.

It currently supports:

Claude Code via Anthropic Messages API

Codex CLI via OpenAI Responses API, Chat Completions, and the Codex internal endpoint

Gemini CLI via Gemini API compatibility

OpenClaw via provider injection

That means one local service can sit between your tools and multiple upstream providers like OpenAI, Anthropic, Google Gemini, Vertex AI, and even free-model routes.

The real problem it solves

Most people do not have one clean AI stack.

They have:

a few accounts with different limits

some paid API keys

a CLI tool that only speaks one protocol

another tool that expects a completely different endpoint

no decent visibility into cost, usage, or failures

CliGate fixes that by separating the client protocol from the upstream provider.

Your tool can keep speaking the protocol it expects, while CliGate decides where the request should actually go.

The killer features

1. One gateway for multiple AI coding tools

You can run Claude Code, Codex CLI, Gemini CLI, and OpenClaw through the same local server.

No more maintaining a fragile pile of per-tool environment variables and scattered config files.

2. Account pools, not just API keys

CliGate is not just another API proxy.

It can manage:

ChatGPT account pools

Claude account pools

Antigravity accounts

provider API key pools

It supports OAuth login, token refresh, rotation strategies, quota tracking, and per-account management from the dashboard.

3. Smart routing instead of manual switching

You can choose:

account-pool-first

API-key-first

automatic routing

manual app assignment

So Claude Code can use one credential source, Codex can use another, and fallback behavior stays under your control.

4. Free-model routing for cheap or zero-cost workflows

One of my favorite parts is the ability to route lightweight requests such as claude-haiku to free models through Kilo AI.

That gives you a practical low-cost path for lightweight coding, testing, and background tasks without burning premium quota for everything.

CliGate ships with a web UI where you can manage:

accounts

API keys

model mapping

per-app routing

request logs

usage and cost stats

pricing overrides

local tool installation and one-click configuration

This matters because most proxy tools become painful the moment you need to debug token expiry, failed routing, or mismatched models.

Why I think the protocol translation matters

This is the part that makes CliGate more than a credential switcher.

It exposes compatible endpoints for:

POST /v1/messages

POST /v1/chat/completions

POST /v1/responses

POST /backend-api/codex/responses

POST /v1beta/models/*

So tools that were never designed to share the same backend can still be managed through one local layer.

That unlocks a cleaner workflow:

Keep your preferred client.

Route it however you want.

Change upstream providers without rebuilding your whole local setup.

Local-first is the point

CliGate runs on localhost.

That means:

no third-party relay server

no hosted control plane

no forced telemetry layer

direct connections to official upstream APIs

For people who care about privacy, local control, or just not introducing another external dependency into their dev workflow, this is the right architecture.

Quick start

You can start it with:

npx cligate@latest start

Or install globally:

npm install -g cligate

cligate start

Then open:

http://localhost:8081

From there you can add accounts or API keys, map models, and configure your CLI tools to hit the local gateway.

Who this is for

CliGate is especially useful if you:

use more than one AI coding CLI

switch between Claude, OpenAI, Gemini, and other providers

want fallback behavior when limits or keys fail

want usage visibility across accounts and models

want a local control plane instead of ad hoc shell config

Repo

GitHub: https://github.com/codeking-ai/cligate

If you are building serious local AI coding workflows, this project is designed to remove a surprising amount of friction.

It is the difference between “a pile of disconnected AI tools” and “one local gateway that actually behaves like infrastructure.”

1. Sofort-Triage & Abwehrmaßnahmen

IR-PLAYBOOK-RCEHIGH

Schritte anzeigen

SOC Incident Playbook: Remote Code Execution (RCE) Defense

WAF MitigationSofort

Virtuelles Patchen am Reverse Proxy / WAF für gefährdete URL-Pfade und Payloads aktivieren.

SecRule REQUEST_URI "@rx ..." "id:1001,phase:1,deny,status:403"

Web Shell ScanSofort

Web-Root auf neu angelegte Scripts, anomal modifizierte Dateien und Persistence scannen.

find /var/www -type f -name "*.php" -mmin -120

Outbound FilteringSofort

Ausgehenden Datenverkehr (Reverse Shells zu unbekannten IPs/Ports) blockieren.

ss -tunp | grep -E ":(4444|1337|8080|9001)"

Vendor Patching

Hersteller-Update in Staging validieren und schnellstmöglich in Produktion ausrollen.

apt update && apt --only-upgrade install <pkg>

1-Click Detection Engineering: Multi-Dialect SIEM Rules5 Formate

Regeln anzeigen

Syntax validiert (0 Fehler)

title: Detect Exploitation - I Stopped Paying for AI CLI Chaos: This Local Gateway Makes Claude Code, Codex, and Gemini Work as One
id: f0525b6d-5f38-4f9a-8638-b168ce5a250d
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

Syntax validiert (0 Fehler)

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "I Stopped Paying for AI CLI Ch" ascii wide
    condition:
        any of them
}

Syntax validiert (0 Fehler)

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("I Stopped Paying for AI CLI Chaos This L")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

Syntax validiert (0 Fehler)

message: "*I Stopped Paying for AI CLI Chaos This L*"

Syntax validiert (0 Fehler)

CommonSecurityLog
| where Message has "I Stopped Paying for AI CLI Chaos This L"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph2 Knoten / 1 Relationen

CVE / Incident Software MITRE ATT&CK CWE Weakness IoC

🎯

MITRE ATT&CK Matrix Navigator 14 Taktiken

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

💡 Tipp: Klicken Sie auf eine TTP, um Gegenmaßnahmen und SIEM-Erkennungsregeln anzuzeigen.Enterprise Matrix v14.1

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 1 Min

Anyone tried Little Snitch yet?

Linux Tipps & Hardening

NÄCHSTER BEITRAG 1 Min

Amazon's Older Kindle Models Will Lose Support Including Kindle Store Access Starting May 20

IT NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich I Stopped Paying for AI CLI Chaos: This .... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen

1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.

🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC

Schnell-Prompts für Analysten

⚠️ DEFANGED SANDBOX VIEW (tsecurity.de): Alle Netzwerkindikatoren und URLs wurden neutralisiert (2 Indikatoren entschärft). Nur zur defensiven Analyse!

Format: python

#!/usr/bin/env python3
# Exploit Title: PoC for Target
import socket, sys
target = '192[.]168[.]1[.]10'
url = 'hxxp://target[.]local/vuln'
s = socket.socket()
s.connect((target, 80))
s.send(b'GET / HTTP/1.1\r\nHost: target.local\r\n\r\n')

Auch interessante Nachrichten I Stopped Paying for AI CLI Chaos: This Local Gateway Makes Claude Code, Codex, and Gemini Work as One

Thematisch verwandte Begriffe: Stopped, Paying, Chaos, This · 6 Treffer

Sichere Programmierung DEV Community

Orca: The Agent Development Environment for Running AI Coding Agents in Parallel

vor 5 Tagen 📆 20.09.2026 um 08:00 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

Gemini Hacked Three Companies Using the Dumbest Trick in the Book

vor 5 Tagen 📆 20.09.2026 um 07:50 Uhr

Weiterlesen ↗

IT Security Downloads GitHub · google-gemini/gemin

GitHub Release: google-gemini/gemini-cli v0.62.0-nightly.20260920.gcfbcaa8df (20.09.2026)

Release v0.62.0-nightly.20260920.gcfbcaa8df von google-gemini/gemini-cli auf GitHub: Full Changelog…

vor 5 Tagen 📆 20.09.2026 um 03:25 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

Hermes Agent Bot Mode vs Standalone Claude Chats: Which AI Setup Actually Saves You Time (2026)

vor 5 Tagen 📆 20.09.2026 um 05:43 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

Will Claude Code call your skill on its own? 38 runs, one skill, seven ways to describe it

vor 5 Tagen 📆 20.09.2026 um 04:17 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

I'm an architect. I built an AI agent that draws - and outputs IFC models

vor 5 Tagen 📆 20.09.2026 um 00:41 Uhr

Weiterlesen ↗

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

🚀 Auf tsecurity.de entdecken

Kommentare über I Stopped Paying for AI CLI Chaos: This Local Gateway Makes Claude Code, Codex, and Gemini Work as One

💬 Social News Network

Community Debatte 0 Beiträge

Tags:Noch keine Tags.

Noch keine Diskussion eröffnet

Sei der Erste, der seine Einschätzung oder PoC zu diesem Thema teilt.

🚀 Auf tsecurity.de entdecken

Echtzeit-Radar & Feeds

👥 Community & Social

🕒 tsecurity.de Such-Trends & Chronologie

I Stopped Paying for AI CLI Chaos: This Local Gateway Makes Claude Code, Codex, and Gemini Work as One

What CliGate actually does

The real problem it solves

The killer features

1. One gateway for multiple AI coding tools

2. Account pools, not just API keys

3. Smart routing instead of manual switching

4. Free-model routing for cheap or zero-cost workflows

5. A real dashboard instead of blind debugging

Why I think the protocol translation matters

Local-first is the point

Quick start

Who this is for

Repo

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense

2. Cyber Threat Intelligence & Forensik

MITRE ATT&CK Matrix Navigator 14 Taktiken

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten I Stopped Paying for AI CLI Chaos: This Local Gateway Makes Claude Code, Codex, and Gemini Work as One

Orca: The Agent Development Environment for Running AI Coding Agents in Parallel

Gemini Hacked Three Companies Using the Dumbest Trick in the Book

GitHub Release: google-gemini/gemini-cli v0.62.0-nightly.20260920.gcfbcaa8df (20.09.2026)

Hermes Agent Bot Mode vs Standalone Claude Chats: Which AI Setup Actually Saves You Time (2026)

Will Claude Code call your skill on its own? 38 runs, one skill, seven ways to describe it

I'm an architect. I built an AI agent that draws - and outputs IFC models

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

I Stopped Paying for AI CLI Chaos: This Local Gateway Makes Claude Code, Codex, and Gemini Work as One

What CliGate actually does

The real problem it solves

The killer features

1. One gateway for multiple AI coding tools

2. Account pools, not just API keys

3. Smart routing instead of manual switching

4. Free-model routing for cheap or zero-cost workflows

5. A real dashboard instead of blind debugging

Why I think the protocol translation matters

Local-first is the point

Quick start

Who this is for

Repo

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense

2. Cyber Threat Intelligence & Forensik

MITRE ATT&CK Matrix Navigator 14 Taktiken

Mehr aus dieser Kategorie

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten I Stopped Paying for AI CLI Chaos: This Local Gateway Makes Claude Code, Codex, and Gemini Work as One

Orca: The Agent Development Environment for Running AI Coding Agents in Parallel

Gemini Hacked Three Companies Using the Dumbest Trick in the Book

GitHub Release: google-gemini/gemini-cli v0.62.0-nightly.20260920.gcfbcaa8df (20.09.2026)

Hermes Agent Bot Mode vs Standalone Claude Chats: Which AI Setup Actually Saves You Time (2026)

Will Claude Code call your skill on its own? 38 runs, one skill, seven ways to describe it

I'm an architect. I built an AI agent that draws - and outputs IFC models

tsecurity.de App