Which Macs can run Muzzle?

Apple Silicon Macs with macOS 12 or later. There is no Intel download.

Do I need an account?

No. Free needs no account. Pro through the Threat Feed needs a confirmed email address, and a paid key needs a purchase.

Mac: Apple Silicon (M1 or later). No Intel build.
macOS: 12 Monterey or later
Shell: zsh. Muzzle also adds its Codex wrapper to an existing .bashrc.
Network: Needed for updates, the daily Threat Feed rules and Pro licence checks. Checks on your Mac run offline.

Tool	Plan	How Muzzle finds it
Claude Code	Free	A `~/.claude` folder, or `claude` in your PATH or a common install folder
Codex	Pro	A `~/.codex` folder, or `codex` in your PATH or a common install folder
git	Free	A working `git`. The stub in `/usr/bin` counts only once the Command Line Tools or Xcode are installed.

Muzzle checks that a tool is present, not which version. Cursor and Copilot are not set up by Muzzle.

Not sure whether your setup is picked up? See Muzzle does not detect my agent.

A local proxy listens on 127.0.0.1, normally port 8899.
A certificate is added to your login keychain so Muzzle can inspect HTTPS requests from agent commands.
Commands that already use their own proxy are left on it and are not inspected.
Code scans project folders under your home folder, such as Dev, Projects, code, src, repos and GitHub.