WatchTower

Cost tracking + security scanning for AI builders

GitHub

Watchtower MCP

Cost tracking + security scanning for AI builders. An MCP server for Claude Code.

Watchtower runs alongside your AI coding agent and gives you visibility into what you're spending and whether your deployed apps are secure.

Install

npm install -g watchtower-mcp

Add to your Claude Code MCP config (~/.claude/settings.json):

{
  "mcpServers": {
    "watchtower": {
      "command": "watchtower-mcp"
    }
  }
}

Restart Claude Code. You now have 8 new tools available.

Tools

Cost Tracking

ToolWhat it does
watchtower_log_usageLog token usage from an API call to track costs
watchtower_spendView spending summary (today / week / month) with model breakdown
watchtower_budgetSet daily/weekly/monthly budget alerts

Security Scanning

ToolWhat it does
watchtower_scan_headersScan a deployed URL for missing security headers (CSP, HSTS, etc.)
watchtower_scan_secretsScan source code for hardcoded API keys and tokens
watchtower_scan_supabaseAudit Supabase tables for missing Row Level Security policies

Dashboard

ToolWhat it does
watchtower_statusQuick overview of spending + recent security findings
watchtower_scan_historyView history of past security scan results

Usage

Once installed, just ask Claude:

"What's my API spend this week?"
"Scan my project for hardcoded secrets"
"Check the security headers on https://myapp.vercel.app"
"Set a $5 daily budget alert"
"Audit my Supabase database for missing RLS policies"

How It Works

  • Cost tracking: Logs token usage to a local SQLite database at ~/.watchtower/watchtower.db. Calculates costs using current Anthropic pricing. Supports budget alerts.
  • Security scanning: Runs checks against your live URLs, source code, and databases. Findings are persisted locally so you can track them over time.
  • No external services: Everything runs locally. No data leaves your machine.

Supported Models

Claude Opus 4.6, Sonnet 4.6, Haiku 4.5, and Sonnet 3.5. Unknown models fall back to Sonnet pricing.

Requirements

  • Node.js 18+
  • Claude Code (or any MCP-compatible client)
  • psql (optional, for Supabase RLS scanning)

License

MIT

Máy chủ liên quan

NotebookLM Web Importer

Nhập trang web và video YouTube vào NotebookLM chỉ với một cú nhấp. Được tin dùng bởi hơn 200.000 người dùng.

Cài đặt tiện ích Chrome