Ultra Mod is free and open source under the MIT license.
Ten mods in one install: your usage limits and context HUD, a guard with undo for destructive commands, .env and secret protection, and a receipt under every answer.
You need Claude Code 2.1.287 or later (the first release with mods).
Ultra Mod installs from its own marketplace on GitHub. Inside Claude Code, one command adds the marketplace and installs the plugin:
/plugin install ultramod --marketplace mertkayacs/ultramod
From your shell, the same in one line:
claude plugin install ultramod --marketplace mertkayacs/ultramodOr in two steps, which also works on older 2.1.28x releases:
claude plugin marketplace add mertkayacs/ultramod
claude plugin install ultramod@ultramodThe npm installer checks your Claude Code version and runs those steps for you:
npx ultramodOpen Claude Code and type /ultra. The defaults work as they are; /plugin configure ultramod@ultramod changes the default set, the notification delay and the sound.
Plugin "ultramod" not found in any configured marketplace? Claude Code searches only the marketplaces you have added, and Ultra Mod is not in Anthropic's built-in directory yet. Add the marketplace with one of the commands above and install again.
A Claude Code setup can accumulate a status line script for usage limits, a hook or two against rm -rf, something to keep .env out of reach, and the habit of scrolling back to check whether the tests really ran. Ultra Mod puts those controls in one plugin, built on the mods API that Claude Code shipped in 2.1.287. You can switch any mod off from the /ultra pane.
| Mod | What you get | On by default |
|---|---|---|
| hud | One line above the prompt: context bar, 5-hour and 7-day limits with reset times, turn timer, cost, model | yes |
| receipts | A line under each answer with what really happened: files changed, commands run, tests passed or failed, time, cost. It flags "tests pass" claims when no passing test ran after the last edit. A test piped into another command or followed by ; or || does not count, because the exit code can hide a failure |
yes |
| guard | Holds rm -rf, git reset --hard, force pushes, DROP TABLE, terraform destroy and similar until you say yes. Before a destructive git or rm command in a git work tree it tries to save a snapshot, so /ultra undo has something to restore. Snapshots are best effort: a failed one is logged and does not block the command |
yes |
| secrets | Refuses reads of .env, keys and credential files, and redacts tokens (GitHub, Anthropic, OpenAI, AWS, Stripe and more) from tool output before Claude sees them |
yes |
| tests | Asks before Claude skips a test, adds .only, deletes a test file or removes assertions |
yes |
| notify | A desktop notification when a long turn ends or Claude is waiting for you | yes |
| compact | Warns at 70% context, offers a one-key compaction at 85%, and keeps the files, failures and open claims in the summary | yes |
| loops | Spots the same command failing three times with the same error and tells Claude to stop and rethink | yes |
| pins | Keeps the rules in .claude/pins.md in the system prompt, so they survive long sessions and compaction |
when the file exists; a project file after you approve its exact text for this session |
| tidy | Asks before Claude writes new summary or notes files you did not ask for | strict set |
Ultra Mod calls no model itself, and claude plugin details ultramod reports about 0 always-on tokens. It still adds some text to what Claude reads: the lines of ~/.claude/pins.md, and of the project's .claude/pins.md once you approve it with /ultra pins approve (at most 30 lines and 3,000 characters), go into the system prompt of every request. That project approval applies only to the exact file text in the current session; editing the file requires approval again. A refusal or a loop nudge is a short message in the conversation. Compaction runs the normal /compact, from the Compact now button or, in the marathon set, by itself at 88%.
One real session, start to finish:
 HUD and receipts. Limits with reset times above the prompt, and what really ran under every answer. |
 Guard and undo. git reset --hard waits for your yes, and /ultra undo brings the work back from the snapshot taken first. |
 Secrets. A read of .env is refused, and Claude is told what to do instead. |
 Sets. The /ultra pane switches the whole pack, here from essentials to strict. |
A set is a combination of mods tuned for one way of working. Switch with /ultra set <name>; Ultra Mod remembers the choice for each project folder.
- essentials: the default. Everything above except tidy.
- strict: for team repos and production code. Also asks before pushes to main,
npm publishand production deploys, refuses environment dumps, and asks before new summary files. - flow: fewest interruptions. A compact HUD, receipts only when something failed, no test prompts.
- marathon: for long unattended runs. Risky commands are refused instead of asked, you get a notification, and compaction runs by itself at 88%.
- quiet: safety only. Guard and secrets stay on, nothing is drawn.
Flip any single mod in the /ultra pane. A changed set shows as essentials*; /ultra reset puts it back.
| Command | |
|---|---|
/ultra |
Control pane: sets, mods, last receipts, snapshots |
/ultra set <name> |
Switch set for this project |
/ultra undo [n] |
List snapshots, or restore one |
/ultra allow <risk or path> |
Allow one guarded command type or one secret file for this session |
/ultra pin <text>, /ultra pins and /ultra pins approve |
Add a pinned rule, list them, approve the project's pin file |
/ultra doctor |
Version, notifier, git and the active set |
Ultra Mod makes no network requests, sends no telemetry and has no dependencies. It starts only git, rm -f for the temporary index a snapshot uses (on Windows the PowerShell script plugin/scripts/remove-index.ps1), uname and which, and your system notifier (notify-send, or the osascript and PowerShell scripts shipped in plugin/scripts/, with wslpath under WSL). It has no permission hook and never answers allow for a tool call. The full list with every argument is in plugin/README.md. Guards fail closed: if a check breaks, the command is refused. Everything else fails open: a broken HUD never blocks a tool call.
Mods run inside Claude Code with your permissions, so read before you install. claude plugin validate lists every event a mod hooks and every call it makes, without running it. docs/security.md has the same list per mod.
The terminal CLI and the Desktop app's Code tab show everything. The VS Code chat panel, claude -p and the Agent SDK run the guards and receipts without drawing. Ultra Mod works alongside other mods, and its row above the prompt leaves their rows intact.
npx ultramod uninstallor claude plugin uninstall ultramod@ultramod.
@software{kaya2026ultramod,
author = {Mert Kaya},
title = {Ultra Mod: All-in-one mod pack for Claude Code},
year = {2026},
license = {MIT},
url = {https://github.com/mertkayacs/ultramod},
version = {1.0.13}
}All mods in detail · Sets · Security · FAQ · Contributing · ultramod.mertkayacs.com · Mert Kaya
MIT license. Built by Mert Kaya.
