claude-usage-monitor

skill
Security Audit
Warn
Health Warn
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Warn
  • Code scan incomplete — No supported source files were scanned during light audit
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
A lightweight macOS menu bar application that tracks and displays your Claude AI usage limits and quotas in real time, relying entirely on existing Claude Code OAuth credentials.

Security Assessment
The tool accesses highly sensitive data—specifically, it reads and modifies your Claude Code OAuth token directly from the macOS Keychain. It makes outbound network requests to the Anthropic API to fetch usage data and checks GitHub for software updates. The README requires users to bypass macOS security protections by running `xattr -cr`, which removes Apple's built-in malware quarantine checks for the downloaded app. While no hardcoded secrets were found and no dangerous system permissions are requested, the requirement to disable Gatekeeper defenses combined with direct Keychain token manipulation is a notable security concern. Overall risk: Medium.

Quality Assessment
The project is actively maintained, with repository activity as recent as today. It uses the standard, permissive MIT license. However, community trust and visibility are currently very low, with only 5 GitHub stars. Additionally, the automated code scan was unable to analyze the Swift source files, meaning no independent static security review of the actual codebase was completed for this audit.

Verdict
Use with caution — while convenient, the app requires bypassing macOS security boundaries to handle OAuth tokens; users should review the source code before installing.
SUMMARY

Track your Claude usage limits from the macOS menu bar — powered by Claude Code OAuth

README.md

Claude Usage Monitor

한국어

image

A lightweight macOS menu bar app that shows your Claude (claude.ai) usage in real time.

macOS Swift

Install

Step 1. Download

Homebrew (Recommended)

brew tap Dann1y/tap
brew install --cask claude-usage-monitor

Or manually

git clone https://github.com/Dann1y/claude-usage-monitor.git
cd claude-usage-monitor
make install

Step 2. Allow app to run

Since this app is not notarized with Apple, macOS will block it on first launch. Run this once:

xattr -cr "/Applications/Claude Usage Monitor.app"

Then open the app. It appears in your menu bar — enable Launch at login in Settings to keep it running permanently.

Update

The app checks for new versions automatically every 24 hours and shows a notification badge when an update is available.

Homebrew

brew upgrade --cask claude-usage-monitor

If brew upgrade doesn't detect new versions, run this once to fix it:

git -C "$(brew --repository dann1y/tap)" config homebrew.forceautoupdate true

Or manually

cd claude-usage-monitor
git pull
make install

Uninstall

brew uninstall claude-usage-monitor
# or
make uninstall

How It Works

  1. Reads your Claude Code OAuth token from the macOS Keychain (Claude Code-credentials) — usage data from claude.ai/Desktop/CLI is all aggregated server-side, so any Claude Code session counts
  2. Fetches usage data from the Anthropic API on-demand when you open the popover, with a background refresh every 30 minutes
  3. Auto-refreshes the OAuth token when it expires using the stored refresh token, so you don't need to keep claude running in a terminal — the Keychain entry is updated atomically (security add-generic-password -U) so the CLI stays logged in
  4. Caches usage data locally so the app stays responsive even when the API is unavailable

No API keys or manual configuration required! — it uses the same credentials that Claude Code CLI stores automatically.

Features

  • Live usage percentage in the menu bar with color-coded icon (green / orange / red)
  • 5-hour sliding window utilization with reset countdown
  • 7-day weekly utilization with per-model breakdown (Opus, Sonnet)
  • On-demand refresh when opening the popover (30s cooldown)
  • Background polling every 30 minutes to stay up-to-date
  • Automatic OAuth token refresh — works even if you only use Claude Desktop and never open a terminal
  • Local disk cache for persistent data across app restarts
  • Launch at login support
  • Automatic update notifications via GitHub Releases (checks every 24h)

Prerequisites

  • macOS 14.0 (Sonoma) or later
  • Claude Code CLI — run claude at least once to store OAuth credentials in your macOS Keychain

License

MIT

Reviews (0)

No results found