OpenCode

Govern every OpenCode tool call with the Intertrace plugin.

Connect

itr connect opencode
itr doctor

itr writes its own plugin, ~/.config/opencode/plugins/intertrace.js (or under $XDG_CONFIG_HOME). Before every tool call, whatever OpenCode's own permission config says, it runs itr permission-hook --source opencode and blocks unless the answer is allow. A crash, a timeout, a missing binary or an unreadable answer all block. tool.execute.after records that the call ran. Restart OpenCode after connecting.

OpenCode cannot show a hook's ask, so an ask is a deny until a person approves it in Intertrace. MCP servers and model routing are configured by hand (opencode.json).

Project plugins