
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
tokentracker-cli
Advanced tools
Token usage tracker for AI agent CLIs (Claude Code, Codex, Cursor, Kiro, Gemini, OpenCode, OpenClaw)
Download TokenTrackerBar.dmg from the latest release, drag to Applications, done.
npx tokentracker-cli
One command does everything: first-time setup → hook installation → data sync → open dashboard at http://localhost:7890.
Install globally for shorter commands:
npm i -g tokentracker-cli
tokentracker # Open dashboard
tokentracker sync # Manual sync
tokentracker status # Check hook status
tokentracker doctor # Health check
Compare your token usage with developers worldwide. Sign in to join the ranking.
| CLI Tool | Auto-Detection |
|---|---|
| Claude Code | ✅ |
| Codex CLI | ✅ |
| Cursor | ✅ (via API) |
| Kiro | ✅ |
| Gemini CLI | ✅ |
| OpenCode | ✅ |
| OpenClaw | ✅ |
| Every Code | ✅ |
AI CLI Tools (Claude, Codex, Cursor, Kiro, Gemini, OpenCode, ...)
│
│ hooks auto-trigger on usage
▼
Token Tracker (local parsing + aggregation)
│
│ 30-minute UTC buckets
▼
Dashboard (Menu Bar App or localhost:7890)
| Protection | Description |
|---|---|
| No Content Upload | Never uploads prompts or responses — only token counts |
| Local Only | All data stays on your machine, all analysis local |
| Transparent | Audit the sync logic in src/lib/rollout.js — only numbers and timestamps |
| Variable | Description | Default |
|---|---|---|
TOKENTRACKER_DEBUG | Enable debug output (1 to enable) | - |
TOKENTRACKER_HTTP_TIMEOUT_MS | HTTP timeout (ms) | 20000 |
CODEX_HOME | Codex CLI directory override | ~/.codex |
GEMINI_HOME | Gemini CLI directory override | ~/.gemini |
git clone https://github.com/mm7894215/tokentracker.git
cd tokentracker
npm install
# Build and run web dashboard
cd dashboard && npm install && npm run build && cd ..
node bin/tracker.js
# Run tests
npm test
cd TokenTrackerBar
npm run dashboard:build # Build dashboard (from repo root)
./scripts/bundle-node.sh # Download Node.js + bundle tokentracker
xcodegen generate # Generate Xcode project
ruby scripts/patch-pbxproj-icon.rb # Patch Icon Composer support
xcodebuild -scheme TokenTrackerBar -configuration Release clean build
./scripts/create-dmg.sh # Create distributable DMG
Requires: Xcode 16+, XcodeGen
Clawd pixel art inspired by Clawd-on-Desk by @marciogranzotto. Clawd character design belongs to Anthropic. This is a community project with no official affiliation with Anthropic.
FAQs
Token usage tracker for AI agent CLIs (Claude Code, Codex, Cursor, Gemini, Kiro, OpenCode, OpenClaw, Every Code, Hermes, GitHub Copilot, Kimi Code, CodeBuddy, Grok Build, oh-my-pi, pi, Craft Agents, Kilo CLI, Kilo Code, Roo Code, Zed Agent, Goose)
The npm package tokentracker-cli receives a total of 1,895 weekly downloads. As such, tokentracker-cli popularity was classified as popular.
We found that tokentracker-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.