Nexus sits between your coding agents and your services. It sends each agent to its own project's account, so an agent working on one project can't touch another's. Alpha for Linux, macOS and Windows. This page needs JavaScript for the interactive parts; this is the same content in short.
The agent asks Nexus for a service. Nexus works out which project the agent is in, finds the account and resource linked to that project, and makes the call with that account's login. The agent never sees the key. If Nexus can't tell the project, or the project isn't registered, it refuses.
Supabase and GitHub built in, 24 more services through their own sign-in (Notion, Linear, Sentry, Stripe, Neon and others), and any service with a public MCP address. Only actions a service marks read-only go through unless you allow safe writes for a binding. Claude Code, Codex and OpenCode connect to one local Nexus. Nexus is not a password manager or a file sandbox, and it can't protect anything an agent does without going through it.
Short version for machines: llms.txt.