Hand your coding agent a swarm

{
  "id": "review-redaction",
  "prompt": "Review zswarm/redaction.py for bugs a user
    could hit. Report only real problems, each with its
    line, the exact code on that line, and one sentence
    saying what goes wrong. If there are none, return
    an empty list.",
  "cwd": "/path/to/ZergSwarm",
  "tools": "read",
  "schema": {
    "type": "object", "required": ["findings"],
    "properties": { "findings": {
      "type": "array", "items": {
        "type": "object",
        "required": ["line", "code", "problem"],
        "properties": {
          "line": { "type": "integer" },
          "code": { "type": "string" },
          "problem": { "type": "string" } } } } }
  }
}

{
  "id": "review-redaction", "status": "ok",
  "model": "rank:qwen3-8-27b:groq", "seconds": 40.1, "cost_usd": 0.0378,
  "data": { "findings": [
    { "line": 159, "problem": "A task pattern named like a built-in detector ('secret')
      replaces that detector instead of adding to it, so real keys go out unredacted." },
    { "line": 49, "problem": "conf['password'] = '012345678901' is not caught, while
      password = '012345678901' is: the same password leaks in one form." },
    { "line": 52, "problem": "The card pattern lets 19 digits through, so a 19-digit
      order number is masked as a card." }
  ] }
}

No agent? Run the same batch from a terminal with zswarm run tasks.json, or send it from your own code to the local HTTP API (docs).

The server listens only on 127.0.0.1 and refuses requests whose Host is not your machine, so a web page cannot drive it.

A key you add is saved in ~/.zswarm/providers/<name>.toml, like most command-line tools' keys, or read from an environment variable. On macOS and Linux the file is owner-only; on Windows it sits in your user folder. It is never logged, printed or returned; the console shows a short fingerprint.

Each task sends its prompt, and any files it reads, to one outside AI provider: only ones you added a key for. Switch off any provider you do not want your code sent to. A provider's free tier may keep what it is sent, under its own terms: set the environment variable ZSWARM_REDACT_FREE_TIER=on to mask secrets, email addresses and card numbers sent to free tiers, or use a paid key for private code.

With edit, a worker changes files only inside its task's folder; all also gives it a shell, which can reach anything your account can. The optional Claude Code backend needs an extra confirm_write switch and is not held to the folder, so treat it like all.