Mcpspend

io.github.andreisirbu91-lab由 GitHub 帳號 andreisirbu91-lab 發布v0.2.1更新於 Oct 24, 2026

Query your MCPSpend usage: cost today, top tools, recent sessions, budget projections.

已驗證STDIO僅桌面開發者工具資料與分析

概覽

AI 產生的概覽

讓助理查詢 MCPSpend 用量資料，例如今日費用、常用工具、最近工作階段與預算預測。

可以做什麼
這是 MCPSpend（針對 MCP 工具呼叫的成本追蹤服務）的查詢端 MCP 伺服器。加入 MCP 用戶端後，它提供 get_today_cost、list_top_tools 等工具，讓助理從使用者的 MCPSpend 帳戶回報花費、最常用工具、最近工作階段與預算預測。它只讀取用量資料；實際記錄呼叫的是另一個代理套件。
適用情境
當你已用 MCPSpend 追蹤 MCP 工具用量，並希望不打開網頁儀表板就能向助理詢問費用與用量時使用。它本身不產生資料，只讀取 MCPSpend 代理已收集的內容，單獨安裝沒有意義。
執行需求
以 stdio 方式在本機執行，通常透過 npm 套件 @mcpspend/mcp-server。需要 Node.js 與 MCPSpend 帳戶。工具呼叫需要環境變數 MCPSPEND_API_KEY；沒有它伺服器仍可啟動並列出工具。MCPSPEND_ENDPOINT 為選用，僅在自架時需要。需要連線至 MCPSpend API 的網路存取。
安裝前請注意
工具呼叫需要 MCPSPEND_API_KEY 密鑰，應避免放入共用設定。用量資料來自第三方服務，查詢會離開本機。此伺服器本身唯讀，但整體 MCPSpend 方案包含付費方案，以及會將用量中繼資料傳送給廠商的代理。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcpspend，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

MCPSpend

Know what your AI agents really cost. Real-time cost tracking for every MCP tool call across Cursor, Claude Desktop, Windsurf, and VS Code.

[smithery badge] [npm version] [Open VSX] [license] [MCPSpend MCP server]

mcpspend.com · Smithery · npm · Open VSX · Glama

[MCPSpend MCP server card]

One-command install

sh
npx --yes @mcpspend/proxy@latest init --key mcps_live_xxx

Auto-detects Claude Desktop, Cursor, Windsurf, VS Code (user + workspace), and Claude Code (user + project). Wraps every configured MCP server, leaves a .mcpspend.bak backup, and starts streaming usage to your dashboard at mcpspend.com.

Free tier: 25,000 tool calls/month, no credit card.

What's in this monorepo

PackageWhat it is
packages/proxy@mcpspend/proxy — the stdio observability proxy + wrap-http bridge for remote MCP servers. Published on npm.
packages/mcp-server@mcpspend/mcp-server — query your MCPSpend usage from inside any MCP client. Published on npm + Smithery.
packages/vscode-extensionmcpspend-vscode — IDE extension for Cursor, Windsurf, and VS Code. Published on Open VSX.
apps/apiExpress + Prisma + Postgres + BullMQ. The ingest endpoint, billing, and the new /api/mcp HTTP MCP server.
apps/dashboardNext.js dashboard at mcpspend.com.

Three ways to query your usage

Use caseHow
Web dashboardmcpspend.com/dashboard — overview, top tools, sessions, CSV export.
From any MCP client (stdio)Add @mcpspend/mcp-server to your client config — agent gains tools like get_today_cost, list_top_tools.
From any MCP client (HTTP)Point your client at https://api.mcpspend.com/api/mcp with Authorization: Bearer mcps_live_….

Pricing

PlanCalls/monthMonthlyYearly
Free25,000$0$0
Pro1,000,000$29$290 (2 months free)
Team10,000,000$99$990
Enterpriseunlimited$499$4,990

Every paid plan: 30–90 day retention, CSV/Slack export, budget alerts, role-based access.

Privacy

The proxy reports: tool name, server name, model, latency, success, approximate input/output sizes (tokens, derived from JSON length). It does not send the actual tool arguments or response bodies to MCPSpend. See Privacy Policy for the full sub-processor list (Stripe + Resend + Hostinger, all EU-hosted) and your GDPR rights.

Security

For automated scanners flagging this repo: the proxy uses child_process.spawn to wrap the user's own MCP server — that's the whole point of an observability proxy. The spawn args come from the user's local MCP-client config (Claude Desktop / Cursor / Windsurf / VS Code), never from network input. No RCE path, no privilege escalation, no arbitrary command execution. Full threat model in SECURITY.md.

  • API keys stored as SHA-256 hashes (never plaintext on the server)
  • Passwords bcrypt cost 12
  • Secrets at rest AES-256-GCM (APP_ENCRYPTION_KEY)
  • Transport HTTPS only, HSTS enabled, helmet CSP headers
  • No tool arguments or responses ever leave the user's machine
  • Per-tenant isolation every query scopes by organizationId
  • GDPR Art. 15 / 17 / 20 self-serve at mcpspend.com/dashboard/account/privacy
  • EU-hosted (Hostinger EU region)
  • SOC 2 Type I in progress with Vanta (Q4 2026)
  • DPA available for Enterprise customers

Report vulnerabilities: [email protected] · Machine-readable disclosure: https://mcpspend.com/.well-known/security.txt · Full policy: SECURITY.md · Live posture: https://mcpspend.com/security

Support the project

If MCPSpend saves you money or you just want to keep the proxy MIT and the free tier alive, you can sponsor any amount via Stripe — no account required:

💖 buy.stripe.com/00w8wPbUxe1qgK36CRbbG06

Every dollar goes back into hosting, security audits, and shipping features.

License

MIT. Use it, fork it, run it self-hosted.

© NewRzs SRL · CUI RO48756557 · Bucharest, Romania · [email protected]

來源：README.md，提交 4c18b82

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.2.1最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分