One local gateway for every AI agent.
Connect Claude Code, Codex, Gemini CLI, Cursor, and other agents to the models you control. Pin a provider, route by task, or use quota before it resets.
Download · Quick start · Docs · Issues · 简体中文
- Local by default. The Rust gateway listens on
127.0.0.1:8787and requires authentication. Agent request traffic leaves the device only when you route it to a cloud provider. - Three routes. Direct pins one provider and model. Smart tiers picks High, Mid, or Low in a single decision. Quota first spends buckets that reset sooner.
- Enterprise-managed routing. Enter an enterprise Base URL and credential once. The enterprise service keeps control of its real models and routing policy.
- Your providers. Start from 40+ editable presets, add a custom OpenAI-compatible endpoint, or keep work on a local runtime such as Ollama.
- Desktop and CLI. Both share the same Rust core. Usage, latency, cost estimates, and request logs stay on this machine.
- Reversible connectors. Connect writes a bounded plan and a private snapshot. Disconnect removes only Token Station fields.
- Sandboxed adapters. Official WASM plugins cover Anthropic Messages, OpenAI Chat Completions, OpenAI Responses, Gemini, and OpenAI-compatible providers. They have no network, filesystem, or credential access.
 Claude Code |
 Claude Desktop |
 Codex |
 Gemini CLI |
 Grok Build |
 Kimi Code |
 DeepSeek Harness |
 Hermes Agent |
 OpenClaw |
 WorkBuddy |
 OpenCode |
 Cursor |
Eleven agents use a built-in connector. Cursor's dedicated setup is currently macOS-only. See the guides and reference for protocols and connector notes.
You need a provider API key or a local model endpoint. Token Station does not import agent subscriptions or OAuth sessions.
- Download the latest build from Releases: DMG for macOS, MSI for Windows, or AppImage/DEB/RPM for x86_64 Linux.
- Open Token Station and add a provider. Use a preset or a custom OpenAI-compatible endpoint.
- On Home, set the global route to Direct, Smart tiers, or Quota first.
- For a built-in connector, select a detected agent and click Connect. Configure Cursor through its dedicated setup flow.
- Send a request from the agent. Inspect the result in Usage.
The default listen address is 127.0.0.1:8787.
On macOS, Windows, and Linux, closing the window hides the app while the gateway keeps running. Restore it from the menu-bar or system-tray icon, or launch Token Station again. Use Quit Token Station in the native menu to stop the process. Automatic updates remain macOS-only; Windows and Linux builds update manually from Releases.
Desktop development needs Rust stable (MSRV 1.96), Node.js 22.23.1, and the wasm32-wasip2 target.
git clone https://github.com/ballast-ai/token-station.git
cd token-station
rustup target add wasm32-wasip2
npm --prefix apps/desktop ci
npm --prefix apps/desktop run tauri:dev# CLI
cargo build -p token-station-cli
./target/debug/token-station-cli --helpA normal Cargo build does not embed the official adapters. Use scripts/build-release.sh <target-triple> for a packaged CLI. On macOS, scripts/install-local-desktop.sh builds, audits, and installs a local desktop app.
Use the assets listed on the selected release page. Signing and notarization vary by build.
- The gateway rejects non-loopback listen addresses. Local authentication is on by default.
- Provider credentials default to an owner-only
secrets.json. They do not appear in logs or plugins. - Desktop request logs store prompt and response bodies plus a bounded redacted HTTP trace as owner-only plaintext. Receipts and metrics do not.
- A cloud provider still receives any request you route to it.
The full boundary table is in the reference.
Licensed under the Apache License 2.0.