capit 0.8.1

Issue authentication keys with spending caps

Budget per-agent, per-provider, as little or as much as you want

Ever been sticker shocked with a high inference bill only to find that the agent got stuck in some unproductive loop?

You need to manage the spending independent of the broken tool and broken agent.

capit, part of the DAY50 suite of open-source tools for AI workflows, allows for managing application-based key management with cost capping.

GUI

$ uvx capit serve

TUI

$ uvx capit openrouter 5.00 --agent openclaw
$5.00 openrouter key installed into openclaw
Old configuration backed up to /tmp/capit-openclaw-no22x7b1

That's it. Openclaw now has a capped API key. If it goes rogue, it can only cost you $5.

Everything is stored local-only or, optionally, not at all.

There are no capit servers and nothing is sent to us.

---

Install

uv tool install capit

Usage

Give an agent a budget

# Claude Code - $5 cap
capit openrouter 5.00 --agent claude

# Cursor - $10 cap
capit openrouter 10.00 --agent cursor

# Windsurf - $5 cap
capit openrouter 5.00 --agent windsurf

# OpenClaw - $5 cap
capit openrouter 5.00 --agent openclaw

Each agent gets its own capped key. Sleep soundly.

More agents

capit --agents  # List all supported agents

See agents/README.md for the full list and adding custom agents.

Platforms

The included platforms are openrouter and aihubmix.

Platforms are easy to create with a claude skill located in skills/platform-creator.md.

See platforms/README.md for more details.

---

Administration

capit --keys list              # List all keys with spending info
capit --keys list openrouter   # List keys from specific provider
capit --keys delete <name>     # Delete a key (e.g., claude-71ad2519)
capit --keys delete 'capit-*'  # Delete keys matching pattern
capit --platforms              # List available platforms
capit --platforms add          # Add a master key
capit --platforms remove       # Remove a master key
capit --agents                 # List supported agents

---

How It Works

1. You run capit openrouter 5.00 --agent claude
2. capit calls OpenRouter's API
3. capit creates a guardrail with $5 cap
4. capit creates an API key with that guardrail
5. capit writes the key to ~/.claude/.credentials.json
6. Done

The cap is enforced by OpenRouter. The key literally cannot spend more than $5.

---

MIT License