io.github.andreisirbu91-lab/mcpspend
Query your MCPSpend usage: cost today, top tools, recent sessions, budget projections.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
@mcpspend/mcp-serverclaude mcp add mcpspend -e 'MCPSPEND_API_KEY=<your mcpspend_api_key>' -e 'MCPSPEND_ENDPOINT=https://api.mcpspend.com' -- npx -y @mcpspend/mcp-server@0.2.1{
"mcpServers": {
"mcpspend": {
"command": "npx",
"args": [
"-y",
"@mcpspend/mcp-server@0.2.1"
],
"env": {
"MCPSPEND_API_KEY": "<your mcpspend_api_key>",
"MCPSPEND_ENDPOINT": "https://api.mcpspend.com"
}
}
}
}Environment variables
MCPSPEND_API_KEYsecret Your MCPSpend API key. Create one at https://mcpspend.com/dashboard/keys. Starts with mcps_live_ or mcps_test_. Optional — the server boots and lists tools without it; only tool calls require auth.MCPSPEND_ENDPOINTOptional. Override the MCPSpend API endpoint. Defaults to https://api.mcpspend.com. Use only if you self-host MCPSpend.
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Contents
MCPSpend
Know what your AI agents really cost. Real-time cost tracking for every MCP tool call across Cursor, Claude Desktop, Windsurf, and VS Code.
mcpspend.com · Smithery · npm · Open VSX · Glama
One-command install
npx --yes @mcpspend/proxy@latest init --key mcps_live_xxxAuto-detects Claude Desktop, Cursor, Windsurf, VS Code (user + workspace), and Claude Code (user + project). Wraps every configured MCP server, leaves a .mcpspend.bak backup, and starts streaming usage to your dashboard at mcpspend.com.
Free tier: 25,000 tool calls/month, no credit card.
What's in this monorepo
| Package | What it is |
|---|---|
packages/proxy | @mcpspend/proxy — the stdio observability proxy + wrap-http bridge for remote MCP servers. Published on npm. |
packages/mcp-server | @mcpspend/mcp-server — query your MCPSpend usage from inside any MCP client. Published on npm + Smithery. |
packages/vscode-extension | mcpspend-vscode — IDE extension for Cursor, Windsurf, and VS Code. Published on Open VSX. |
apps/api | Express + Prisma + Postgres + BullMQ. The ingest endpoint, billing, and the new /api/mcp HTTP MCP server. |
apps/dashboard | Next.js dashboard at mcpspend.com. |
Three ways to query your usage
| Use case | How |
|---|---|
| Web dashboard | mcpspend.com/dashboard — overview, top tools, sessions, CSV export. |
| From any MCP client (stdio) | Add @mcpspend/mcp-server to your client config — agent gains tools like get_today_cost, list_top_tools. |
| From any MCP client (HTTP) | Point your client at https://api.mcpspend.com/api/mcp with Authorization: Bearer mcps_live_…. |
Pricing
| Plan | Calls/month | Monthly | Yearly |
|---|---|---|---|
| Free | 25,000 | $0 | $0 |
| Pro | 1,000,000 | $29 | $290 (2 months free) |
| Team | 10,000,000 | $99 | $990 |
| Enterprise | unlimited | $499 | $4,990 |
Every paid plan: 30–90 day retention, CSV/Slack export, budget alerts, role-based access.
Privacy
The proxy reports: tool name, server name, model, latency, success, approximate input/output sizes (tokens, derived from JSON length). It does not send the actual tool arguments or response bodies to MCPSpend. See Privacy Policy for the full sub-processor list (Stripe + Resend + Hostinger, all EU-hosted) and your GDPR rights.
Security
For automated scanners flagging this repo: the proxy uses
child_process.spawnto wrap the user's own MCP server — that's the whole point of an observability proxy. The spawn args come from the user's local MCP-client config (Claude Desktop / Cursor / Windsurf / VS Code), never from network input. No RCE path, no privilege escalation, no arbitrary command execution. Full threat model inSECURITY.md.
- API keys stored as SHA-256 hashes (never plaintext on the server)
- Passwords bcrypt cost 12
- Secrets at rest AES-256-GCM (
APP_ENCRYPTION_KEY) - Transport HTTPS only, HSTS enabled, helmet CSP headers
- No tool arguments or responses ever leave the user's machine
- Per-tenant isolation every query scopes by
organizationId - GDPR Art. 15 / 17 / 20 self-serve at
mcpspend.com/dashboard/account/privacy - EU-hosted (Hostinger EU region)
- SOC 2 Type I in progress with Vanta (Q4 2026)
- DPA available for Enterprise customers
Report vulnerabilities: security@mcpspend.com · Machine-readable disclosure: https://mcpspend.com/.well-known/security.txt · Full policy: SECURITY.md · Live posture: https://mcpspend.com/security
Support the project
If MCPSpend saves you money or you just want to keep the proxy MIT and the free tier alive, you can sponsor any amount via Stripe — no account required:
💖 buy.stripe.com/00w8wPbUxe1qgK36CRbbG06
Every dollar goes back into hosting, security audits, and shipping features.
License
MIT. Use it, fork it, run it self-hosted.
© NewRzs SRL · CUI RO48756557 · Bucharest, Romania · support@mcpspend.com
Frequently asked questions
What is io.github.andreisirbu91-lab/mcpspend?
Query your MCPSpend usage: cost today, top tools, recent sessions, budget projections.
How do I install io.github.andreisirbu91-lab/mcpspend?
It runs on your machine. In Claude Code: claude mcp add mcpspend -e 'MCPSPEND_API_KEY=<your mcpspend_api_key>' -e 'MCPSPEND_ENDPOINT=https://api.mcpspend.com' -- npx -y @mcpspend/mcp-server@0.2.1. For other clients, paste the JSON configuration from this page into their MCP settings.
Does io.github.andreisirbu91-lab/mcpspend need an API key?
Yes. It expects MCPSPEND_API_KEY, which you set in its configuration.
Is io.github.andreisirbu91-lab/mcpspend open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains io.github.andreisirbu91-lab/mcpspend?
It is published by andreisirbu91-lab. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.