Self-hosted Git forge built in Rust gives coding agents their own accounts
Barmazoid · reddit · 2026-10-30
Two devs built Plombir Git, a self-hosted Gitea/Forgejo alternative in Rust with a built-in MCP server where coding agents are first-class participants with scoped bot accounts instead of running on human PATs.
- Origin: they forked IronForge (114k lines of unfamiliar Rust/Svelte/TS), indexed it, and let agents navigate via MCP semantic search and call graphs — first fixes landed the next day.
- "Recursive sweep" workflow: an agent fixing a bug must hunt the same mistake everywhere, then close the class with a lint/contract check; every fix ships with a test that fails if the fix is removed. About half of 1,167 closed bugs were found this way, including silent nasties: an OCI push returning 201 without writing the blob, a DB-path typo making the first registrant admin, and revoked users' approvals still leaking CI secrets to fork PRs.
- Agent accounts: no-password bot accounts, tokens scoped to specific repos and even specific MCP tools, kept off protected branches (PRs only, humans merge), every tool call audit-logged with out-of-scope calls logged as 403.
MCP is a Streamable HTTP endpoint (POST /api/v1/mcp) plus a stdio binary. Docker one-liner to try; AGPL, v0.3, early.
More from coding & agent
- Claude API docs reveal beta Agents, Sessions and Environments APIs with managed sandboxes — aigclink · 2026-10-30
- Graph embeddings in one line: FastRP by default, GraphSAGE for attributes — JeremyCMorgan · 2026-10-30
- CodeRabbit CEO: $8M seed rounds no longer enough as 'software factories' need tokens; Garry Tan pushes back — garrytan · 2026-10-30
- GBrain Cloud launches a CLI: one command spins up a cloud AI workspace — garrytan · 2026-10-30
- Designing a multi-bot AI automation system to run one person's life and three businesses — Xeriphy · 2026-10-30
- "The agents of the internet of things" — a catchy frame for device-side agents — sull · 2026-10-30