token-station

KO | EN

gitlite — search

#rag #cli #openai #json #agents #csharp #pdf #monitoring #dotnet #deep-learning

(★ 9)

Local routing control plane for AI agents and LLM providers, with a loopback-only gateway, smart and quota-aware routing, and desktop + CLI apps.

File Explorer

ZIP Download

- - ci.yml
  - desktop-release.yml
  - full-ci.yml
  - linux-desktop.yml
  - platform.yml
  - preview-platform-artifacts.yml
  - release.yml
- CODEOWNERS
- - build.rs
  - Cargo.toml
  - claude-code-deepseek-config.json
  - claude-code-glm-config.json
  - claude-code-kimi-config.json
  - claude-code-kimi-moonshot-v1-config.json
  - claude-code-minimax-config.json
  - claude-code-minimax-m2.5-config.json
  - claude-code-qwen-config.json
  - codex-deepseek-config.json
  - example-config.json
  - glm-5.2-local-config.json
  - openclaw-deepseek-config.json
  - opencode-deepseek-config.json
- - .gitignore
  - components.json
  - index.html
  - package-lock.json
  - package.json
  - README.md
  - tsconfig.json
  - tsconfig.node.json
  - vite.config.ts
  - vitest.config.ts
- - Cargo.toml
- - Cargo.toml
- - Cargo.toml
- - Cargo.toml
- - Cargo.toml
- - Cargo.toml
- - Cargo.toml
- - Cargo.toml
- - token-station-architecture-en-mobile.svg
  - token-station-architecture-en.svg
  - token-station-architecture-zh-mobile.svg
  - token-station-architecture-zh.svg
- - azure-openai-v1-south-header-auth.md
  - claude-code-deepseek.md
  - claude-code-openai-compatible-providers.md
  - codex-deepseek.md
  - enterprise-managed-routing.md
  - hermes-agent.md
  - openclaw.md
  - opencode-deepseek.md
- - v1.2.0.md
  - v1.2.1.md
  - v1.2.2.md
  - v1.2.3.md
  - v1.2.4.md
  - v1.3.0.md
  - v1.3.2.md
  - v1.3.3.md
  - v1.3.4.md
  - v1.4.0.md
  - v2.0.0.md
  - v2.1.0.md
  - v2.1.1.md
  - v2.1.2.md
- - rustsec-exceptions.json
- agent-capabilities.md
- README.md
- reference.md
- reference.zh-CN.md
- - background.png
  - background.svg
  - configure-dmg-layout.applescript
  - README.md
- - fixture-provenance.json
  - packages.json
- audit-desktop-artifact.sh
- audit-macos-dmg.sh
- build-desktop.sh
- build-release.sh
- check-ci-msi-trigger-policy.mjs
- check-ci-scaffold-prefetch.mjs
- check-coverage-thresholds.mjs
- check-formal-release-notes.mjs
- check-integration-branch-policy.mjs
- check-macos-dmg-packaging.mjs
- check-preview-release-assets.mjs
- check-provider-fixtures.py
- check-release-assets.mjs
- check-release-inputs.mjs
- check-release-readiness.mjs
- check-rust-format.sh
- check-rustsec-exceptions.mjs
- check-windows-release-config.mjs
- cleanup-request-bodies.sh
- collect-formal-release-artifacts.sh
- com.ballastai.token-station.develop-watch.plist
- create-desktop-update-manifest.mjs
- create-release-checksums.mjs
- cursor-provider.sh
- dev-desktop.mjs
- import-macos-signing-identity.sh
- install-local-desktop.sh
- official-packages.py
- package-macos-dmg.sh
- prepare-desktop-test-plugins.sh
- prepare-formal-release.sh
- publish-formal-release.sh
- release-latest-formal.sh
- report-legacy-usage.py
- resolve-release-mode.mjs
- sign-formal-release.sh
- sync-readme-agent-icons.mjs
- test-router-core-redline.sh
- test-windows-msi.ps1
- verify-release.sh
- watch-develop.sh
- agent-sensitive-boundary.mjs
- build-desktop-verbosity.sh
- desktop-release-dependencies.mjs
- desktop-updater-release.sh
- diagram-supersession.mjs
- formal-release-artifact-collection.sh
- formal-release-finalization.mjs
- formal-release-notes.mjs
- formal-release-signing.sh
- install-local-desktop.sh
- localized-macos-installation.mjs
- macos-signing-import-policy.mjs
- package-list-line-endings.sh
- preview-platform-artifacts.mjs
- preview-release-assets.mjs
- provider-fixture-staging.sh
- release-assets.mjs
- release-mode-policy.mjs
- release-readiness.mjs
- release-script-variable-order.mjs
- report-legacy-usage.sh
- source-release-mode.mjs
- south-dependency-policy.mjs
- unsigned-test-dmg.mjs
- windows-authenticode-audit.sh
.gitattributes
.gitignore
AGENTS.md
Cargo.lock
Cargo.toml
clippy.toml
CONTEXT.md
deny.toml
LICENSE
macos-troubleshooting.md
NOTICE
README.md
README.zh-CN.md
rust-toolchain.toml
rustfmt.toml

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Version

File

Link

Example

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

**One local gateway for every AI agent.**

Connect Claude Code, Codex, Gemini CLI, Cursor, and other agents to the models you control. Pin a provider, route by task, or use quota before it resets.

[![Release](https://img.shields.io/github/v/release/ballast-ai/token-station?display_name=tag&sort=semver)](https://github.com/ballast-ai/token-station/releases/latest) [![CI](https://github.com/ballast-ai/token-station/actions/workflows/ci.yml/badge.svg)](https://github.com/ballast-ai/token-station/actions/workflows/ci.yml) [![License](https://img.shields.io/github/license/ballast-ai/token-station)](https://raw.githubusercontent.com/ballast-ai/token-station/main/LICENSE)

[Download](https://github.com/ballast-ai/token-station/releases/latest) · [Quick start](#quick-start) · [Docs](docs/README.md) · [Issues](https://github.com/ballast-ai/token-station/issues) · [简体中文](README.zh-CN.md)
</div>

## Highlights

- **Local by default.** The Rust gateway listens on `127.0.0.1:8787` and requires authentication. Agent request traffic leaves the device only when you route it to a cloud provider.
- **Three routes.** Direct pins one provider and model. Smart tiers picks High, Mid, or Low in a single decision. Quota first spends buckets that reset sooner.
- **Enterprise-managed routing.** Enter an enterprise Base URL and credential once. The enterprise service keeps control of its real models and routing policy.
- **Your providers.** Start from 40+ editable presets, add a custom OpenAI-compatible endpoint, or keep work on a local runtime such as Ollama.
- **Desktop and CLI.** Both share the same Rust core. Usage, latency, cost estimates, and request logs stay on this machine.
- **Reversible connectors.** Connect writes a bounded plan and a private snapshot. Disconnect removes only Token Station fields.
- **Sandboxed adapters.** Official WASM plugins cover Anthropic Messages, OpenAI Chat Completions, OpenAI Responses, Gemini, and OpenAI-compatible providers. They have no network, filesystem, or credential access.

## Agents

<table>
  <tr>
    <td align="center" width="16%">
      <a href="https://github.com/anthropics/claude-code"><img src="docs/assets/agents/claude-code.svg" width="28" height="28" alt=""><br>Claude Code</a>
    </td>
    <td align="center" width="16%">
      <a href="https://github.com/anthropics"><img src="docs/assets/agents/claude-desktop.svg" width="28" height="28" alt=""><br>Claude Desktop</a>
    </td>
    <td align="center" width="16%">
      <a href="https://github.com/openai/codex"><img src="docs/assets/agents/codex.svg" width="28" height="28" alt=""><br>Codex</a>
    </td>
    <td align="center" width="16%">
      <a href="https://github.com/google-gemini/gemini-cli"><img src="docs/assets/agents/gemini-cli.svg" width="28" height="28" alt=""><br>Gemini CLI</a>
    </td>
    <td align="center" width="16%">
      <a href="https://github.com/xai-org/grok-cli"><img src="docs/assets/agents/grok-build.svg" width="28" height="28" alt=""><br>Grok Build</a>
    </td>
    <td align="center" width="16%">
      <a href="https://github.com/MoonshotAI/kimi-code"><img src="docs/assets/agents/kimi-code.svg" width="28" height="28" alt=""><br>Kimi Code</a>
    </td>
  </tr>
  <tr>
    <td align="center">
      <a href="https://github.com/deepseek-ai/deepseek-harness"><img src="docs/assets/agents/deepseek-harness.svg" width="28" height="28" alt=""><br>DeepSeek Harness</a>
    </td>
    <td align="center">
      <a href="https://github.com/NousResearch/hermes-agent"><img src="apps/desktop/public/agents/hermes.png" width="28" height="28" alt=""><br>Hermes Agent</a>
    </td>
    <td align="center">
      <a href="https://github.com/openclaw/openclaw"><img src="docs/assets/agents/openclaw.svg" width="28" height="28" alt=""><br>OpenClaw</a>
    </td>
    <td align="center">
      <a href="https://www.workbuddy.ai/"><img src="apps/desktop/public/agents/workbuddy.png" width="28" height="28" alt=""><br>WorkBuddy</a>
    </td>
    <td align="center">
      <a href="https://github.com/anomalyco/opencode"><img src="docs/assets/agents/opencode.svg" width="28" height="28" alt=""><br>OpenCode</a>
    </td>
    <td align="center">
      <a href="https://github.com/cursor/cursor"><img src="docs/assets/agents/cursor.svg" width="28" height="28" alt=""><br>Cursor</a>
    </td>
  </tr>
</table>

Eleven agents use a built-in connector. Cursor's dedicated setup is currently macOS-only. See the [guides](docs/guides/) and [reference](docs/reference.md#agents) for protocols and connector notes.

## Quick start

You need a provider API key or a local model endpoint. Token Station does not import agent subscriptions or OAuth sessions.

1. Download the latest build from [Releases](https://github.com/ballast-ai/token-station/releases/latest): DMG for macOS, MSI for Windows, or AppImage/DEB/RPM for x86_64 Linux.
2. Open Token Station and add a provider. Use a preset or a custom OpenAI-compatible endpoint.
3. On **Home**, set the global route to Direct, Smart tiers, or Quota first.
4. For a built-in connector, select a detected agent and click **Connect**. Configure Cursor through its dedicated setup flow.
5. Send a request from the agent. Inspect the result in **Usage**.

The default listen address is `127.0.0.1:8787`.

On macOS, Windows, and Linux, closing the window hides the app while the gateway keeps running. Restore it from the menu-bar or system-tray icon, or launch Token Station again. Use **Quit Token Station** in the native menu to stop the process. Automatic updates remain macOS-only; Windows and Linux builds update manually from Releases.

## Install from source

Desktop development needs Rust stable (MSRV 1.96), Node.js 22.23.1, and the `wasm32-wasip2` target.

```bash
git clone https://github.com/ballast-ai/token-station.git
cd token-station
rustup target add wasm32-wasip2
npm --prefix apps/desktop ci
npm --prefix apps/desktop run tauri:dev
```

```bash
# CLI
cargo build -p token-station-cli
./target/debug/token-station-cli --help
```

A normal Cargo build does not embed the official adapters. Use `scripts/build-release.sh <target-triple>` for a packaged CLI. On macOS, `scripts/install-local-desktop.sh` builds, audits, and installs a local desktop app.

Use the assets listed on the selected [release](https://github.com/ballast-ai/token-station/releases/latest) page. Signing and notarization vary by build.

## Security

- The gateway rejects non-loopback listen addresses. Local authentication is on by default.
- Provider credentials default to an owner-only `secrets.json`. They do not appear in logs or plugins.
- Desktop request logs store prompt and response bodies plus a bounded redacted HTTP trace as owner-only plaintext. Receipts and metrics do not.
- A cloud provider still receives any request you route to it.

The full boundary table is in the [reference](docs/reference.md#security).

## Documentation

- [Documentation index](docs/README.md)
- [Enterprise managed routing](docs/guides/enterprise-managed-routing.md)
- [Agent guides](docs/guides/)
- [Reference](docs/reference.md)

## License

Licensed under the [Apache License 2.0](LICENSE).

token-station

File Explorer

# Use via CDN

Was this content helpful?

Recent Feedback

Download README