
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@tokeneyez/mcp
Advanced tools
TokenEyez MCP server + CLI -- bring your AI spend dashboard into Claude Desktop, Cursor, and any MCP-compatible client. Includes a `tokeneyez` CLI for terminal-based stats, quota checks, and Claude Code/Cursor wrapping.
Bring your TokenEyez AI-spend dashboard into Claude Desktop, Cursor, and any other MCP-compatible client.
TokenEyez tracks your token spend across Claude, ChatGPT, Gemini, and Perplexity. This MCP server lets you query that data — and log new events — straight from inside your AI client.
The MCP server is available to Pro and Teams subscribers ($9/mo). Free-tier users can sign in and run who_am_i to verify their account, but other tools return a friendly upgrade message. See the full feature comparison and upgrade at https://tokeneyez.tre-lab.com/upgrade.
Once installed, ask Claude Desktop / Cursor:
"How much have I spent on AI this month?" "What's my biggest cost driver?" "How many Rephrase analyses do I have left today?" "Log this terminal session — I just used 2,400 tokens on Sonnet."
Claude calls our MCP server, which pulls real numbers from your TokenEyez account.
npm install -g @tokeneyez/mcp
Use the same email + password as your TokenEyez Chrome extension:
tokeneyez login
Your session is saved to ~/.tokeneyez/session.json (mode 0600, owner-readable only).
Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"tokeneyez": {
"command": "npx",
"args": ["-y", "@tokeneyez/mcp"]
}
}
}
Restart Claude Desktop. You should see the 🔧 icon appear when the MCP connection is healthy.
Edit ~/.cursor/mcp.json (or use Settings → MCP):
{
"mcpServers": {
"tokeneyez": {
"command": "npx",
"args": ["-y", "@tokeneyez/mcp"]
}
}
}
Tools (callable by the AI):
| Tool | What it does |
|---|---|
get_dashboard_summary | Tokens / cost / messages, last N days, broken down by platform |
get_savings_summary | Tokens & cost saved by Rephrase + Analyze |
get_quota_status | Tier, daily limit, today's usage, top-up credits |
record_manual_event | Log a usage event from a tool we don't auto-track yet |
who_am_i | Returns the signed-in email + tier |
Resources (read-only context):
tokeneyez://dashboard — last 30 days of usage (JSON)tokeneyez://savings — savings summary (JSON)Prompts (slash commands):
/tokeneyez:analyze_my_spend [period] — full breakdown + cost-cutting suggestions/tokeneyez:show_savings — quick "how much am I saving" replytokeneyez login # sign in (saves JWT)
tokeneyez status # who am I, tier, today's quota
tokeneyez logout # clear local session
tokeneyez help # this help
MIT
FAQs
TokenEyez MCP server + CLI -- bring your AI spend dashboard into Claude Desktop, Cursor, and any MCP-compatible client. Includes a `tokeneyez` CLI for terminal-based stats, quota checks, and Claude Code/Cursor wrapping.
The npm package @tokeneyez/mcp receives a total of 25 weekly downloads. As such, @tokeneyez/mcp popularity was classified as not popular.
We found that @tokeneyez/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.