by AThevon
Native macOS app to monitor AI usage limits and watch your coding sessions live
# Add to your Claude Code skills
git clone https://github.com/AThevon/TokenEaterGuides for using cli tools skills like TokenEater.
Last scanned: 5/30/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-05-30T14:59:56.085Z",
"npmAuditRan": true,
"pipAuditRan": true
}See how TokenEater compares with popular alternatives.
TokenEater is an open-source cli tools skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by AThevon. Native macOS app to monitor AI usage limits and watch your coding sessions live. It has 516 GitHub stars.
Yes. TokenEater passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/AThevon/TokenEater" and add it to your Claude Code skills directory (see the Installation section above).
TokenEater is primarily written in Swift. It is open-source under AThevon on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other CLI Tools skills you can browse and compare side by side. Open the CLI Tools category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh TokenEater against similar tools.
No comments yet. Be the first to share your thoughts!
Top skills in this category by stars
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
Requires a Claude Pro, Max, or Team plan, or the Codex CLI signed in with ChatGPT. Either one is enough. Claude's free plan does not expose usage data, and Codex API-key accounts have no usage windows to track.
A native menu bar app, desktop widgets, and a floating overlay that track your Claude and OpenAI Codex usage in real time, side by side or one at a time.
Everything in detail on the website.
Open the DMG, drag TokenEater to Applications, and launch it. The DMG is signed with a Developer ID and notarized by Apple, so Gatekeeper lets it run on first launch without any extra steps.
brew tap AThevon/tokeneater
brew trust AThevon/tokeneater
brew install --cask tokeneater
brew trustis required on Homebrew 6.0+, which no longer loads a third-party tap until you trust it.
Prerequisites: at least one of Claude Code signed in on a Pro, Max, or Team plan (claude then /login), or the Codex CLI signed in with your ChatGPT account (codex login).
TokenEater checks for updates automatically. When a new version is available, a modal lets you download and install it in-app; macOS will ask for your admin password to replace the app in /Applications.
If you installed via Homebrew: brew update && brew upgrade --cask tokeneater
Delete TokenEater.app from Applications, then optionally clean up shared data:
rm -rf /Applications/TokenEater.app
rm -rf ~/Library/Application\ Support/com.tokeneater.shared
If you installed via Homebrew: brew uninstall --cask tokeneater. For a complete wipe, caches and widget state included, use the clean reset in the troubleshooting guide.
git clone https://github.com/AThevon/TokenEater.git
cd TokenEater
./build.sh
The script checks Xcode, installs XcodeGen if needed, and assembles the app. Local builds are not notarized, so Gatekeeper blocks the first launch (right-click > Open, or System Settings > Privacy & Security > Open Anyway). The step-by-step walkthrough is in SETUP.md.
TokenEater reads the OAuth access token Claude Code already keeps in your macOS Keychain, the same token Claude Code itself uses. At first launch, macOS asks you to allow that access: click Always Allow once. The prompt is standard macOS behavior for any app reading a keychain item it did not create, and since the read goes through Apple's own security tool, whose signature never changes, the prompt does not come back on updates.
Everything the app does with the token:
GET api.anthropic.com/api/oauth/usage, your current usage statsGET api.anthropic.com/api/oauth/profile, your plan infoWhen Codex tracking is enabled, the app also reads the Codex CLI access token from ~/.codex/auth.json (or CODEX_HOME) and makes one additional authenticated call:
GET chatgpt.com/backend-api/wham/usage, your Codex usage windows and creditsThese usage and profile calls are read-only. TokenEater does not send messages, read conversations, or modify either account. Each access token is sent only to its own provider. TokenEater never writes to either provider's credentials and never refreshes their tokens: if one expires, open Claude Code or Codex (or run codex login) and it picks the new one up. API-key and keyring-only Codex logins are not supported in this version.
Widgets read local JSON files with no network or Keychain access. The Codex widget reads codex.json for usage and shared.json for theme preferences; its cache contains no token, email, or account ID. History reads Claude Code and Codex local session logs without uploading them; Agent Watchers reads Claude Code sessions.
Anthropic does not offer a third-party OAuth flow or scoped tokens yet, so reading the existing token is the only way an app like this can exist. If scoped tokens become available, TokenEater will adopt them immediately. The relevant code is short and auditable: keychain access in SecurityCLIReader.swift and TokenProvider.swift, the Claude calls in APIClient.swift, and Codex access in CodexAuthReader.swift and CodexAPIClient.swift.
Sign in to the Codex CLI with your ChatGPT account. TokenEater enables Codex tracking automatically on the first launch that detects that login. If you sign in later, turn it on under Settings > Providers, where each provider has its own tracking switch and the coverage matrix shows what each feature does on each one. Agent Watchers stay a Claude Code feature: they read Claude Code's own session processes, which Codex has no equivalent of. The onboarding wizard sets up either provider or both, and you can finish it with OpenAI alone.
History includes local sessions from both providers, independently of quota authentication. It reads Codex sessions/ and archived_sessions/ under CODEX_HOME (default ~/.codex). All sums uncached input, cache writes, and output tokens for both providers. Only cache reads count as reused tokens in the cache breakdown. Guardian / auto-review s