TKN is a token-level firewall and pager for LLM spend. It watches every call to OpenAI, Anthropic and Gemini in real time, trips alarms on velocity spikes, and gives you a swipe-to-revoke kill switch on your phone.
npx @tknapp/cli login
Stripe and your cloud bill catch finance. Nobody catches a leaked OpenAI key at 02:14 on a Saturday. By the time you notice, you've shipped your runway to a teenager in São Paulo.
Total spend today, sized for the lockscreen. Every model, every key, every watcher in one dense scrollable feed. No charts. No bubbles. Just numbers that change.
The Console is what your on-call sees when the alarm trips. One screen, one number, one decision: kill or hold.
Write rules in plain language. When they trip, TKN pages you AND can pause traffic before the page even lands. If it's already on fire, swipe the red block at the bottom of the screen.
A 90% drag commits. Less, and it snaps back. The thumb is heavy on purpose — accidental revocations cost more than missed spikes.
Ships as @tknapp/cli — the tokn command. No daemon, no telemetry, no Electron. Pipes to whatever your incident process speaks — Slack, PagerDuty, or just a shell that quits and SIGTERMs your worker pool.
TKN ships a Model Context Protocol server. Drop it into Claude Desktop, Cursor, or your custom harness, and your agent gets read+revoke capabilities scoped to its own keys. Self-policing autonomy.
{
"mcpServers": {
"tkn": {
"command": "tokn-mcp"
}
}
}
The mobile enclave is the iOS Keychain; the CLI enclave is ~/.tkn on your machine. The dashboard reads your providers directly. Our servers do not hold your keys.
iOS Keychain (Secure Enclave-backed, device-only) on mobile; per-machine derived key on desktop. No cloud reads in the local-only configuration.
The app locks behind Face ID when keys are present. Reveal and revoke can require a second biometric confirm.
Every revoke, pause, and rule trip is append-only signed JSONL. Pipe it to your SIEM or git-commit it.
Start free on one provider. Go Pro for unlimited providers, push alerts, and the kill switch. The first key you defend pays for the year.
It takes 90 seconds. The first key you defend pays for the year.
npx @tknapp/cli login