Open-source Mecha dashboard checks balance and expiry of all your AI API keys locally
jokiruiz · reddit · 2026-11-09
Developer released Mecha (alpha 0.1.2, MIT), a local web+CLI dashboard that checks every AI credential you own — Anthropic, OpenAI, Gemini, xAI, OpenRouter — showing per-key traffic lights for validity, balance, expiry, and credential type.
- Key finding while building it: Anthropic, OpenAI, and Google expose no balance endpoint, Gemini doesn't expose expiry at all; only xAI (with a management key) and OpenRouter report balance directly. An opt-in probe sends one token on the cheapest model ($0.00002–$0.015 per thousand probes, hourly per key)
- Admin keys fill in expiry for org keys; legacy AIza Gemini keys are flagged amber since AI Studio switched to AQ. keys on May 28
- Subscription OAuth tokens (Claude Code, Codex, Gemini CLI) are only read locally, never used for API calls
- Security: 127.0.0.1 only, DNS-rebinding protection, AES-256-GCM at rest via OS keychain, per-key allowlists, no telemetry, explicit threat model in the README
Aimed at developers, teachers, and small teams juggling multi-provider keys; the author calls it alpha and welcomes mismatch reports.
More from coding & agent
- CS spent 70 years killing nondeterminism; in 2026 we set temperature=0.8 — korymath · 2026-11-09
- Open-source Bello claims 3x more usage from your coding agent at same quality — nikola_mr64990 · 2026-11-09
- Nominal raises $240M Series C at $3B valuation for AI hardware engineering — graceisford · 2026-11-09
- HF's Niels Rogge releases 'Getting Started with Local AI' slides: quantization, MoE, local agents — NielsRogge · 2026-11-09
- OpenClaw runs "massively multiplayer online AI": hundreds of agents on one server — vincent_koc · 2026-11-09
- Loop: a mobile-first feed-based orchestrator for your coding agents — Two_Half_Pints · 2026-11-09