xAI open-sources Grok Build's full code, days after a Git-leak report
xAI published the complete source code of its coding agent Grok Build on GitHub. This is not just released model weights or a stripped-down SDK, it includes the entire agent: the core agent loop, file read/edit tools, the terminal UI, and the full extension system covering skills, plugins, hooks, and MCP (a protocol that lets AI agents connect to external tools and data), which people use for things like AI-assisted s.
Anyone can now compile the agent from source, point it at their own server instead of xAI's API, and configure everything through a single config.toml file. This puts Grok Build in direct competition with Anthropic's Claude Code and OpenAI's Codex, with the added pitch that its behavior can actually be inspected.
The timing stands out: according to The Hacker News, a named security researcher had disclosed that Grok Build was uploading entire Git repositories, full commit history included, to a bucket. Not just the files being worked on, but the complete .git history, which can contain old API keys thought to be rotated away, internal URLs, and s deleted years ago.
Key points
- xAI released Grok Build's full source code on GitHub, not just weights or a limited SDK
- Includes the agent loop, file tools, terminal UI, and the full extension system (skills, plugins, hooks, MCP)
- Users can now self-host inference and manage settings via a single config.toml
- Just before this, a researcher disclosed Grok Build was uploading full Git repos, including commit history, to a GCS bucket
- Old commits can contain leftover API keys, internal URLs, and other sensitive data