AI governance native to JetBrains IDEs.

A plugin for IntelliJ IDEA, PyCharm, WebStorm, GoLand, RubyMine, and AppCode that runs governance analysis locally by default. Inline inspections, intention actions, and a tool window surface findings without sending file content anywhere unless cloud checks are explicitly enabled. Currently in Preview; the JetBrains Marketplace listing follows.

Capabilities

What the plugin surfaces today

Local-only by default

Governance analysis runs on your machine using bundled rules. Inline inspections, intention actions, and the KoraSafe tool window all work without sending file content to any server.

Cloud checks when you want them

Opt in to cloud checks for deeper analysis. File content is sent to the KoraSafe API only after an explicit confirmation dialog. Files in untrusted projects, files above the size limit, and unsupported languages are skipped.

Credentials in PasswordSafe

The API key sits in IntelliJ PasswordSafe, which uses your operating system's credential store (Keychain on macOS, Credential Manager on Windows, libsecret on Linux). Never written to a project settings file that could land in source control.

Local MCP server

The plugin can run a local MCP server bound to 127.0.0.1, exposing the same scan and finding endpoints to agent clients. Use KoraSafe: Copy MCP auth token to retrieve a bearer token. No remote connections accepted.

Install

Install the plugin while it's in Preview

The plugin is in Preview and ships through the JetBrains Marketplace once the publisher hub registration and channel-token setup complete. To install today:

  1. Open the korasafe/jetbrains-extension releases page and download the latest plugin .zip artifact.
  2. In your JetBrains IDE, open Settings, then Plugins.
  3. Click the gear icon and choose Install Plugin from Disk...
  4. Select the downloaded .zip file and restart the IDE when prompted.
  5. Run the KoraSafe: Set API key action to authenticate.

Supports IntelliJ IDEA Community + Ultimate, PyCharm Community + Professional, WebStorm, GoLand, RubyMine, and AppCode. Verified across IDE builds 2023.1 and later. See the privacy policy for the full data inventory and the cloud-checks consent flow.

Marketplace publish, then continuous IDE coverage

The JetBrains Marketplace listing follows the publisher-hub registration and channel-token setup. After publish, the plugin updates ship through the marketplace channel like any other JetBrains plugin. Email Contact-us@korasafe.ai to join the Preview cohort or to request enterprise pre-release access.