btw. why do I need to give my git name/pass to run it if I serve an agent from local?

The main idea is that you can run the agent in any machine (local, cloud) and all should be done out of the box.

If your code is running as part of a git repository, the clearml agent will have to clone it, and for doing so it will use credentials.
Git name and pass are one way for it, but you can also use ssh - if you dont have the git name and password in the configuration, the clearml-agent will try cloning the repo with ssh (it should be printed in the log too), you can also enforce it with agent.force_git_ssh_protocol: true in your clearml.conf file.