llms.txt
# shim
> shim masks personal data and secrets in AI traffic and shows what every call carried and cost.
shim has three products, and a fourth on the way:
- **shim-cli**: Open source CLI for Claude Code, Codex, Copilot CLI and VS Code. Finds secrets and personal data in what your agent sends, masks them where the client allows it, and shows what each Claude Code session sent and cost. Free and open source, no account. Current version 1.2.1.
- **AI Gateway**: One base URL in front of OpenAI, Anthropic and Gemini. Your SDK stays, and every call is checked for personal data and secrets, metered and recorded. Hosted at `https://api.getshim.tech`. shim's AI Gateway is an SDK-native governance gateway for OpenAI Responses and Chat Completions, Anthropic Messages, and the Gemini Developer API, with tenant isolation, PII controls, quotas, spend limits, usage accounting, and audit evidence.
- **Enterprise**: the AI Gateway on your own servers. A gateway in front of OpenAI, Anthropic and Gemini that masks personal data, controls spend and keeps a tamper-evident audit trail, without rewriting your requests.
- **shim** (early access, https://security.getshim.tech): Checks what your team types into ChatGPT, Claude, Gemini, Grok and Perplexity, and masks or stops credentials, email addresses, card numbers and IBANs in the browser.
The gateway's core is open source under Apache-2.0. Tenancy, durable accounting, stored audit evidence, roles and budgets are in the enterprise layer, source-available under the Elastic License 2.0 and verified with an offline licence key.
Plans:
- **Developer**: free on the hosted AI Gateway, 1M tokens / month and 1,000 requests / month
- **Enterprise**: the AI Gateway on your own servers, scoped with you. Contact sales.
- **shim-cli**: free and open source, no account
## shim-cli
- [shim-cli](https://getshim.tech/products/shim-cli): Open source CLI for Claude Code, Codex, Copilot CLI and VS Code. Finds secrets and personal data in what your agent sends, masks them where the client allows it, and shows what each Claude Code session sent and cost.
- [shim-cli in markdown](https://getshim.tech/products/shim-cli.md): install lines, per-client behaviour and limits
- [Instructions for your coding agent](https://getshim.tech/agent/shim-cli/1.2.1.md): a text to paste into Claude Code, Codex or Copilot CLI that sets shim-cli up step by step, asking before each command
- [Source code](https://github.com/GetSHIM/shim-cli): Apache-2.0
- [PyPI package](https://pypi.org/project/shim/): `uv tool install --python 3.12 --compile-bytecode shim`
- [Commands](https://github.com/GetSHIM/shim-cli/blob/main/docs/commands.md): every command and setting
- [Privacy](https://github.com/GetSHIM/shim-cli/blob/main/docs/privacy.md): what stays on the machine
- [llms.txt of the repository](https://github.com/GetSHIM/shim-cli/blob/v1.2.1/llms.txt): the docs an agent should read, with the rules it should not get wrong
## AI Gateway and Enterprise
- [Enterprise](https://getshim.tech/products/enterprise): A gateway in front of OpenAI, Anthropic and Gemini that masks personal data, controls spend and keeps a tamper-evident audit trail, without rewriting your requests.
- [Enterprise in markdown](https://getshim.tech/products/enterprise.md)
- [Getting started](https://getshim.tech/how-to-start): first governed request through the hosted gateway, or shim-cli in three commands
- [API documentation](https://getshim.tech/docs): endpoints, SDK setup and response headers
- [OpenAPI spec](https://api.getshim.tech/openapi.json): the hosted gateway's contract
- [Agent authentication](https://getshim.tech/auth.md): API keys, provider credentials and rate limits
- [Security](https://getshim.tech/security): architecture, key handling and isolation
- [Playground](https://getshim.tech/playground): try PII masking without signing up
- [Sign up](https://getshim.tech/register): free Developer access
- [Source code](https://github.com/GetSHIM/shim): Apache-2.0 core and Elastic License 2.0 enterprise layer
- [Architecture](https://github.com/GetSHIM/shim/blob/main/docs/CURRENT_ARCHITECTURE.md): how a request moves through the gateway
- [Enterprise deployment](https://github.com/GetSHIM/shim/blob/main/ee/deploy/README.md): customer-operated installation and recovery
## Solutions
- [Finance](https://getshim.tech/solutions/finance): shim masks card numbers, IBANs and Turkish IDs before a request reaches the model, and keeps a tamper-evident record for your auditors.
- [Technology](https://getshim.tech/solutions/technology): shim masks secrets and personal data in product traffic and coding agents, and shows spend per team and feature.
- [Legal](https://getshim.tech/solutions/legal): shim masks ID numbers, tax numbers and contact details in drafts and case notes, and records who sent what.
- [Healthcare](https://getshim.tech/solutions/healthcare): shim masks national IDs and contact details in clinical text, runs on-prem and maps AI usage to KVKK and GDPR controls.
## Switching to shim
- [Switch from LiteLLM to shim](https://getshim.tech/switch/litellm): What shim does that LiteLLM does not, the migration step by step, and the code diff for OpenAI and Claude calls.
- [Switch from Portkey to shim](https://getshim.tech/switch/portkey): Portkey and shim compared on governance depth, data residency and Turkish PII coverage: plus the migration diff and where Portkey remains the better fit.
- [Switch from Cloudflare AI Gateway to shim](https://getshim.tech/switch/cloudflare-ai-gateway): Cloudflare AI Gateway gives you edge caching and analytics. This page covers what it does not give you, the migration diff, and when staying on Cloudflare is correct.
- [Switch from calling provider APIs directly to shim](https://getshim.tech/switch/direct-api): What changes when you put a gateway in front of OpenAI, Anthropic or Gemini: the two-line diff, what you gain, what it costs, and when calling directly is still right.
## For agents
- [Homepage in markdown](https://getshim.tech/index.md): the products, supported APIs and models, pricing and FAQ
- [shim-cli in markdown](https://getshim.tech/products/shim-cli.md)
- [Enterprise in markdown](https://getshim.tech/products/enterprise.md)
- [Agent instructions for shim-cli](https://getshim.tech/agent/shim-cli.md): always the latest version
- [Agent authentication](https://getshim.tech/auth.md)
- [Agent skills](https://getshim.tech/.well-known/agent-skills/index.json)
- [API catalog](https://getshim.tech/.well-known/api-catalog)
- [Service health](https://api.getshim.tech/health)
## Optional
- [Blog](https://getshim.tech/blogs): analysis and field notes
- [shim wiki](https://getshim.tech/wiki): AI privacy words in plain language
- [About](https://getshim.tech/about)
- [Privacy policy](https://getshim.tech/privacy)
- [Terms](https://getshim.tech/terms)
