Track your AI coding subscriptions from the macOS menu bar.
OpenUsage shows how much of each AI plan you have used: session and weekly limits, credits, and balances, in one panel. Star the metrics you watch most and they appear in the menu bar.
You add each account in the app. OpenUsage reads nothing that belongs to other tools: no Keychain items, auth files, logs, databases, or environment variables. It shows only the limits and dollar values that the provider's own API reports, except ChatGPT's credits, which also show their dollar value at 4¢ a credit.
Homebrew:
brew install --cask openusageDirect download: download the latest universal DMG from the releases page, open it, and drag OpenUsage to your Applications folder.
Either way, the app updates itself in place through signed, notarized Sparkle updates. Requires macOS 15 (Sequoia) or later.
Open Accounts from the panel's Options menu (or press Return), click +, and click a provider to start its sign-in. Browser sign-in opens your browser; Open Browser opens it again and Copy Link lets you pick another browser. Device-code sign-in shows the code to enter. API-key sign-in links to the page where you create the key. You can add several accounts for the same provider. See Accounts for renaming and removing accounts.
Account names and settings live in the app's own preferences. OAuth tokens and API keys live in the app's own Keychain service.
After an update from 0.7.x, the OpenRouter and Z.ai keys you typed into 0.7.x are added as accounts once, and the first account you add for each provider takes that provider's 0.7.x stars, hidden metrics, and order. OpenUsage never changes 0.7.x's saved layout, so going back to 0.7.x finds its stars and order as you left them. See Upgrading from 0.7.x.
Claude, ChatGPT, Cursor, Antigravity, Copilot, Devin, Grok, Ollama, OpenCode, OpenRouter, and Z.ai. Claude, ChatGPT, Cursor, Antigravity, Copilot, and Grok sign in with OAuth. Devin signs in on Windsurf's site, which shows a token to paste into the app. Ollama, OpenCode, OpenRouter, and Z.ai use API keys. OpenRouter's balance and account-wide spend need a Management key. Providers lists what each one shows and what each sign-in grants.
- Menu bar stars. Star up to two metrics per provider. When more than one account of a provider is starred, each mark carries the account name's initials.
- Dashboard. A header and a card per provider. The header shows the provider's logo and name, and inside the card every account, even when it is the only one, has a caption with its name and plan above its rows. One row per metric: label, bar, value, and reset. With a reset window the bar's colour is where your pace lands at the reset: blue on course, orange inside the last 10%, red with a flame before the value when you would run out first; without one, blue, orange once 75% is used, red once 90% is. Click a value to flip every row between used and left, a reset between countdown and exact time. Rest the pointer on a bar to read where your pace lands at the reset, on a value to read its other side, on a reset to read the other format, and on the warning or clock after an account's name to read why it is there. Right-click a header, a card, an account, or a row for its actions. Drag to reorder.
- Resets. Claude and ChatGPT accounts show a Limit Resets row with the number of available rate-limit resets. Rest the pointer on the count to see when each expires, and spend one from there.
- Share. Rest the pointer on a provider's header and click the copy button at its right, or right-click the provider and choose Share Screenshot, to copy a PNG of its header and card, with every account, to the clipboard; from an account's right-click, that account alone. The picture uses the account's name when you have set one and leaves an email out.
- Notifications. Optional alerts when a limit falls under 10% or your pace changes.
- Global shortcut. Toggle the panel from anywhere.
- Command line. Install the
openusagecommand from Settings; it prints the usage the app last fetched as JSON, for scripts and agents. - Automatic updates. Signed, notarized in-app updates, with an optional beta channel.
- Proxy. Send provider requests through a SOCKS5, HTTP, or HTTPS proxy set in
~/.openusage/config.json.
Behaviour docs live in docs/: the dashboard, accounts, the menu bar, settings, the command line, refreshing, providers, updates, the proxy, and privacy.
For working on the code, see architecture, adding a provider, and debugging.
- macOS 15 (Sequoia) or later
- Universal binary, for Apple Silicon and Intel Macs
swift build # debug build
script/test_quiet.sh # run the test suite without it taking the keyboard or the screen
./script/build_and_run.sh # build and launch the dev app from dist/ (no install)script/test_quiet.sh takes swift test arguments such as --filter.
The dev app is staged as dist/OpenUsage.app with the bundle identifier
com.robinebers.openusage.dev, so it runs beside an installed OpenUsage and never checks for updates.
SwiftPM package, SwiftUI content hosted in an AppKit-owned NSStatusItem and a key-capable
NSPanel, Swift 6 strict concurrency. AccountStore persists accounts, CredentialVault stores
their credentials, ProviderLogin signs in, and one AccountProviderRuntime per account fetches
usage and maps it to metric lines. See the architecture overview and
AGENTS.md for conventions.
Releases are automated: pushing a v* tag on main builds, signs, notarizes, and publishes a new
version. A plain tag (v0.8.0) ships to everyone; a pre-release suffix (v0.8.0-beta.1) ships to
the beta channel. The pipeline lives in
.github/workflows/release.yml, and the step-by-step is in the
release-swift skill.
The release workflow needs these repository secrets (Settings → Secrets and variables → Actions):
| Secret | What it is |
|---|---|
APPLE_CERTIFICATE |
base64 of your Developer ID Application .p12 |
APPLE_CERTIFICATE_PASSWORD |
the password set when exporting that .p12 |
APPLE_ID |
the Apple ID email used for notarization |
APPLE_PASSWORD |
an app-specific password for that Apple ID |
APPLE_TEAM_ID |
your Apple Developer team ID |
SPARKLE_PUBLIC_KEY |
base64 EdDSA public key, baked into the build as SUPublicEDKey |
SPARKLE_PRIVATE_KEY |
base64 EdDSA private key used to sign the DMG |
POSTHOG_CLI_API_KEY |
PostHog personal API key used to upload dSYMs for crash symbolication |
POSTHOG_CLI_PROJECT_ID |
numeric PostHog project ID the dSYMs upload to |
Export the Developer ID Application cert (with its private key) from Keychain Access as a .p12,
then base64 -i DeveloperID.p12 | pbcopy. App-specific passwords come from appleid.apple.com →
Sign-In and Security → App-Specific Passwords. Generate the Sparkle EdDSA key pair once with Sparkle's
generate_keys tool; the public and private values must be a matching pair or signing is silently
skipped.
The two POSTHOG_CLI_* secrets only upload debug symbols (dSYMs) so PostHog can symbolicate crash
reports. POSTHOG_CLI_API_KEY is a PostHog personal API key (PostHog → Settings → Personal API keys)
and POSTHOG_CLI_PROJECT_ID is the numeric ID from your project URL. The upload host is hardcoded in
the workflow (https://us.i.posthog.com). These two do not block a release: if POSTHOG_CLI_API_KEY
is unset the workflow skips the upload with a warning, and crash reports for that version show raw
addresses instead of symbolicated stack traces.
The repository must be public (Sparkle fetches the DMG and appcast anonymously), and the appcast is
served from GitHub Pages. Confirm Settings → Pages points at the gh-pages branch after the first
release.
Issues are welcome. Pull requests are strict and issue-first: comment on an issue, wait for a
maintainer to add the approved label and assign it to you, then reference it in your PR with
Fixes #123. Automation closes external PRs without an approved issue assigned to their author, and
warns when an accepted PR adds more than 1,000 lines. Read CONTRIBUTING.md before
opening one. Report security issues privately per SECURITY.md. The OpenUsage name and
logo are covered by the trademark policy.