AGENT COVERAGE
Twelve agents, and how deeply each is governed
"Works with your agent" is not one thing. node9 sees every tool call from eight of these. For the other four the editor exposes no hook, so node9 governs what goes through their MCP servers and nothing they do on their own. Both are here, because the second half is what you need before you tell your team an agent is covered.
| Agent | How node9 is wired | Sees every tool call | Prompt scanning | Cost tracking |
|---|---|---|---|---|
| Claude Code | hooks + MCP | yes | yes | yes |
| Codex CLI | hooks + MCP | yes | yes | no |
| GitHub Copilot CLI | hooks + MCP | yes | yes | no |
| Gemini CLI | hooks + MCP | yes | no | no |
| Antigravity | hooks + MCP | yes | no | no |
| Hermes Agent | hooks | yes | no | no |
| OpenCode | plugin | yes | yes | no |
| Pi | extension | yes | yes | no |
| Cursor | MCP only | MCP tools only | no | no |
| Windsurf | MCP only | MCP tools only | no | no |
| VS Code | MCP only | MCP tools only | no | no |
| Claude Desktop | MCP only | MCP tools only | no | no |
Verify any of this on your own machine: node9 doctor shows what is wired, and node9 explain Bash 'cat ~/.ssh/id_rsa' shows the verdict the live hook enforces.