Nerve is a self-hosted runtime for AI agents built around the Claude Agent SDK, providing persistent memory, scheduled execution, task management, skills, and communication channels. It supports personal assistants for individuals and autonomous workers for tasks such as CI monitoring, pull request review, and flaky-test fixes. The catalogue skills extend its agent workflows.
Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/ClickHouse/nervenpx agentmods add skills/clickhouse/nerve/nerve-devWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/clickhouse/nerve/nerve-dev)<a href="https://agentmods.dev/skills/clickhouse/nerve/nerve-dev"><img src="https://agentmods.dev/badge/skills/clickhouse/nerve/nerve-dev/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/clickhouse/nerve/nerve-dev"><img src="https://agentmods.dev/badge/skills/clickhouse/nerve/nerve-dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 126 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00101 | $0.05522 |
| Opus 5.5 | $0.00040 | $0.02209 |
| Sonnet 5.5 | $0.00020 | $0.01104 |
| Haiku 4.5 | $0.00010 | $0.00552 |
Grade B, and why
Nerve Development scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
systemd respawns it; `sudo systemctl restart nerve` is equivalent. How it starts
The opening of the file, as written. The whole thing — 392 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Nerve Development Skill
Changing your own config (skills, cron, settings), not the app code? Use the
nerve-workspaceskill instead — that covers the workspace, and which of a pull request or a direct edit applies to this instance. This skill is for developing the Nerve application codebase.
Repository
- Upstream: https://github.com/ClickHouse/nerve (
[email protected]:ClickHouse/nerve.git) - Issues & PRs: https://github.com/ClickHouse/nerve/pulls
All changes go through PRs — never push directly to main. The repo is public; see the security section before every commit.
Getting Started (Contributors)
Prerequisites: Python 3.13+ (pyproject.toml pins requires-python = ">=3.13"),
uv, Node.js 22.12+, git, gh.
# 1. Fork on GitHub, then clone your fork
git clone [email protected]:<your-username>/nerve.git
cd nerve
# 2. Add upstream remote
git remote add upstream [email protected]:ClickHouse/nerve.git
# 3. Python environment — same resolution as CI (fails if uv.lock is stale)
uv sync --locked --extra test
source .venv/bin/activate
# 4. Frontend
cd web && npm ci --strict-peer-deps && cd ..
# 5. Verify
.venv/bin/pytest tests/ -v
cd web && npm run build && npm test && npm run lint && cd ..
Run the commands below from the repository root (wherever you cloned it).
Project Layout
<repo>/
├── nerve/ # Python backend (FastAPI + agent backends)
│ ├── cli.py # Click CLI: init/start/stop/restart/status/logs/doctor/upgrade/reload/backup/
│ │ # restore/pair/sync/cron/migrate/migrate-openclaw/backfill-timestamps/setup-telegram
│ │ # + groups `config`, `codex`, `db`, `workflow`
│ ├── config.py # Config dataclasses + three-layer loader, ${VAR} interpolation
│ ├── config_validate.py # `nerve config validate` (also used by sync and config PRs)
│ ├── config_reload.py # hot reload (`nerve reload`, POST /api/config/reload)
│ ├── config_pr.py # propose_config_change — PR against the workspace repo
│ ├── config_repo.py # `nerve config init-repo` scaffold
│ ├── sync_service.py # git-backed workspace sync, lockdown clean-tree checks
│ ├── paths.py # ~/.nerve (NERVE_HOME) state-dir resolver — never hardcode ~/.nerve
│ ├── identity.py # Actor (human / system) attribution model
│ ├── setup_token.py # first-start claim token pairing.py — Telegram pairing codes
│ ├── bootstrap.py # `nerve init` wizard, CORE_CRONS, template installation
│ ├── workspace.py # workspace templates (MANIFEST), bundled skills
│ ├── backup.py # `nerve backup` / `nerve restore` bundles
│ ├── migrate.py # legacy config layout migration
│ ├── models_catalog.py # model picker discovery ollama.py, coerce.py, _env.py
│ ├── db/ # SQLite (aiosqlite): Database = base.py + domain mixins
│ │ ├── base.py # connection, pragmas, write lock, migrations, FTS health
│ │ ├── migrations/ # vNNN_*.py + runner.py (SCHEMA_VERSION = highest file number); fork/ = a fork's own track
│ │ └── sessions.py messages.py tasks.py task_statuses.py plans.py notifications.py
│ │ sources.py cron.py skills.py mcp.py audit.py accounts.py files.py usage.py
│ │ wakeups.py workflow_runs.py review_loops.py observations.py maintenance.py
│ ├── agent/ # engine.py, prompts.py, sessions.py, streaming.py, interactive.py,
│ │ │ # plan_service.py, cache_policy.py
│ │ ├── backends/ # AgentBackend protocol: claude.py (Claude Agent SDK), codex/ (app-server), events.py
│ │ └── tools/ # registry.py (ToolSpec/ToolContext/ToolResult), schemas.py, claude_sdk_adapter.py
│ │ └── handlers/ # one handler module per tool domain
│ ├── gateway/ # server.py (app factory, lifespan, WS, static), auth.py (JWT, require_auth), diff.py
│ │ └── routes/ # one module per API domain, assembled by register_all_routes()
│ ├── channels/ # web.py, telegram.py, slack*.py, router.py, access.py,
│ │ # observation.py, archives.py, stream_adapter.py, base.py
│ ├── sources/ # inbox sources: telegram, gmail, imap, github, github_events, github_repos,
│ │ # channel (observed chats), codex_threads/; runner.py, filters.py, registry.py
│ ├── cron/ # APScheduler service, jobs.py, gates.py, gate_plugins.py
│ ├── memory/ # files.py, memu_bridge.py (memU), loom.py (Loom), xmemory_bridge.py
│ ├── skills/ # SkillManager — filesystem skills + DB index
│ ├── tasks/ # task markdown files + manager
│ ├── notifications/ # NotificationService, silences, approval dispatch
│ ├── workflows/ # workflow runs (service.py) and review loops (review_loop.py)
│ ├── mcp_server/ # external MCP endpoint (/mcp/v1) + Codex loopback listener
│ ├── external_agents/ # Codex / Claude Code bootstrap, memory-bundle renderers, sync service
│ ├── observability/ # Langfuse tracing, usage rewrite
│ ├── proxy/ # CLIProxyAPI daemon (subscription auth, no API key)
│ ├── utils/ # aio.py, fs.py, time.py
│ └── templates/ # personal/, worker/ (+ MANIFEST), config/settings.yaml,
│ # config-repo/, skills/ (bundled: nerve-dev, nerve-workspace)
├── web/ # React + TypeScript + Vite frontend
│ ├── src/api/ # REST client, WebSocket client
│ ├── src/components/ # Auth, Chat, Cron, ExternalAgents, Files, Layout, Memory, Notifications, Sources, Tasks, ui
│ ├── src/pages/ # route pages (ChatPage, TasksPage, PlansPage, WorkflowRunsPage, ...)
│ ├── src/stores/ # Zustand stores; chatStore + handlers/ (WS dispatch) + helpers/
│ ├── src/hooks/ src/utils/ src/types/
│ ├── src/test/setup.ts # vitest setup (jsdom + Testing Library)
│ └── eslint.config.js, vite.config.ts, package.json, package-lock.json
├── tests/ # pytest suite; conftest.py isolates NERVE_HOME per test
├── scripts/ # check_migration_numbers.py, check_codex_schema.py, codex_smoke.py, backtest_cache_ttl.py
├── docs/ # architecture, config, api, cron, memory, ... — update alongside code
├── .github/workflows/ # ci.yml (backend tests, migration check, frontend build + vitest, Node floor), slack-live.yml
├── config.example.yaml # committed example; config.yaml and config.local.yaml are gitignored
├── install.sh
├── pyproject.toml, uv.lock # commit uv.lock together with pyproject.toml
└── README.md
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed 0c1d5230a476
- 4d ago Changed b8a587402320
- 14d ago Changed · +86 lines · +5 tokens per session scan A → B a099dd632cd4
- 25d ago Changed b878d01ec5c6
- 28d ago Changed · +6 lines 838f5ac26a2d
- 1mo ago First seen · 300 lines · 96 tokens per session scan A c60a3e6280e8
Nerve Development is a skill published in the GitHub repository ClickHouse/nerve (93 stars, last pushed today), licensed Apache-2.0. It adds 101 tokens to every session and 5,522 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
proxy-config-skill
Configure residential proxy providers and make proxied HTTP requests with geo-targeting.
http-request-skill
Make HTTP requests to external APIs and web services. Supports GET, POST, PUT, DELETE, PATCH methods with headers and JSON body.
geocoding-skill
Convert addresses to coordinates (geocoding) or coordinates to addresses (reverse geocoding) using Google Maps API.
agent-crdt-synchronizer
Agent skill for crdt-synchronizer - invoke with $agent-crdt-synchronizer.
nextjs-pages-router
Set up tRPC in Next.js Pages Router with createNextApiHandler, createTRPCNext, withTRPC HOC, SSR via ssr option and ssrPrepass, SSG via createServerSideHelpers with getStaticProps, and server-side helpers for getServerSideProps prefetching.
resume-builder
Generate professional resumes that conform to the Reactive Resume schema. Use when the user wants to create, build, or generate a resume through conversational AI, or asks about resume structure, sections, or content. This skill guides the agent to ask clarifying questions, avoid hallucination, and produce valid JSON…