OKIT OKIT
中文

$ okit web

Every key. Every model. One plane.

Key and model control plane for AI agents: a local encrypted vault, 29+ built-in providers, adapters for 10 agents, usage dashboards for 15 platforms. Switches only rewrite the fields OKIT owns — hooks and statusLine stay untouched, with automatic snapshots you can roll back — plus a CLI and Skill that other agents can call directly.

Install CLI See pricing
0built-in providers
0agent adapters
AES-256encrypted vault
0usage dashboards
localhost:3780
Agent setup
Claude Code ChatGPT Kimi Hermes WorkBuddy
Zhipu Coding Plan
GLM-5 GLM-5-Air GLM-5-Flash
MiniMax Coding
MiniMax-M2
$ okit · claude → zhipu · GLM-5 · config.toml + auth.json ✓
Today’s usage
Claude 5h 8%
GLM week 62%
DeepSeek balance 81%
Anthropic OpenAI DeepSeek Zhipu Moonshot Volcengine MiniMax Qwen Baidu Qianfan Tencent Cloud SiliconFlow Xiaomi OpenRouter GitHub Copilot Ollama Anthropic OpenAI DeepSeek Zhipu Moonshot Volcengine MiniMax Qwen Baidu Qianfan Tencent Cloud SiliconFlow Xiaomi OpenRouter GitHub Copilot Ollama
01

Agent Config

Adapts to 10 agents: Claude Code, ChatGPT Codex, Kimi Code, WorkBuddy, Hermes and more. One click switches the model — config.toml and auth.json are written correctly, never hand-edited.

Agent setup
Claude Code ChatGPT Kimi Hermes WorkBuddy
Zhipu Coding Plan
GLM-5 GLM-5-Air GLM-5-Flash
MiniMax Coding
MiniMax-M2
$ okit · claude → zhipu · GLM-5 · config.toml + auth.json ✓
02

Built-in Providers

29+ provider presets covering international, aggregator, and Chinese platforms — with Coding Plan, Token Plan and other subscriptions managed in one place.

International
Chinese platforms
Aggregators / local
Coding PlanToken PlanSubscriptionsPay-as-you-go
03 Auto-create keys

Encrypted Vault

AES-256-GCM local encryption; keys bind to projects and inject into .env. The browser extension creates keys on provider consoles and files them back automatically — plaintext never hits disk.

1Extension opens the provider console
2Create the API key in one click
3Auto-filed into the local vault
AES-256-GCM sk-…•••7f2a → ~/.okit/vault (encrypted)
04

Usage Tracking

Live subscription and balance queries across 15 providers with smart polling; banner alerts and notifications fire before quota runs out. With Cloud Pro, threshold breaks also push to any webhook endpoint you choose — and roll up into cross-device usage history.

Claude 5h window at 8% — switch or wait for reset
Claude 5h 8%
GLM week 62%
DeepSeek balance 81%
05

Config Safety

Surgical writes: OKIT only rewrites the fields it owns — your hooks, statusLine and MCP config stay untouched. Every switch takes an automatic snapshot you can compare and restore in one click.

settings.jsonhookskept
settings.jsonstatusLinekept
config.tomlsnapshotsaved
config.tomlrestoreone click
06

Cloud Sync

End-to-end encrypted sync on Cloudflare KV: push and pull keys and configs across machines, export and import backups anytime.

This Mac
⇄
Cloudflare KVE2E
⇄
Other devices
07

CLI & Skill

Every OKIT capability is callable: other agents create keys and switch models via the CLI or Skill — no dashboard required.

# Let your agent drive OKIT
okit web          # open the dashboard
okit vault        # key management

# Skill (coming soon) — natural language calls
"Create a new Zhipu key and store it"
"Switch Codex to GLM-5"
PRICING

Free locally, optional in the cloud

Local

$0/forever

Desktop features, no account required

  • Local encrypted vault & multi-provider model management
  • One-click config switching for 10 agents
  • Local usage view & one-click key creation
  • 29+ provider presets & integration docs
Download desktop

CLOUD PRO

Pro

$7/mo
$59/yr

Billed monthly, cancel anytime

  • Cross-device usage history & daily rollups
  • Remote threshold alerts (webhook)
  • Multi-device sign-in with session & device management
  • Full export / deletion / deactivation suite
  • Expiry stops cloud only — local stays untouched

One price worldwide, in USD, billed through Stripe (international cards / Apple Pay / Google Pay). Cancel anytime — access runs to the end of the period.

Edge

Compared to the alternatives

Capability Manual config Config switcher OKIT
One-click model / provider switch✗✓✓
Encrypted key storage✗—✓
Auto-create API keys✗✗✓
Provider usage dashboards✗✗✓
Switch without losing custom config✓✗✓
Pre-switch snapshots & rollback—✗✓
No daemon (never in the request path)✓✗✓
Switch models inside the agent✗✗✓
Agent-callable (CLI/Skill)✗✗✓
Multi-agent adapters✗~✓
FAQ

Frequently asked

Where are my keys stored?

Keys live in an AES-256-GCM encrypted vault under ~/.okit on your machine. Cloud sync is end-to-end encrypted — plaintext never leaves your device.

Which agents are supported?

Eight built-in adapters: Claude Code, ChatGPT Codex, Kimi Code, WorkBuddy, Hermes, OpenCode and more — each writes that agent’s native config files.

How does auto-create work?

The browser extension operates inside your provider console: it fills the create form, copies the new key, and files it into the OKIT vault — entirely between your browser and your machine.

When will the Skill ship?

The Skill is coming soon; the CLI is available today — other agents can already call OKIT capabilities from the command line.

Will it conflict with existing configs?

No. OKIT only rewrites the fields it manages — your hooks, statusLine and MCP config stay untouched. Every switch also saves an automatic config snapshot (last 10 kept per agent) that you can compare and restore with one click in Settings, so you can always go back to official or the original provider.

What does the cloud receive with Cloud Pro?

Only usage numbers, account aliases, and device identifiers: the API enforces a strict field whitelist (unknown fields rejected outright), caps every event at 4KB and each batch at 256KB, and runs automated sensitive-field injection tests in CI. API keys and cookies are never uploaded.

How do remote alerts get delivered?

Alerts use a generic webhook — any service that accepts webhook notifications works. The moment a subscription balance crosses your threshold, a push fires; trigger and recovery each notify once. No spam.

Which payment methods are supported?

Checkout is processed by Stripe: international credit cards, Apple Pay and Google Pay, billed in USD with one price worldwide. Cancel anytime — access runs to the end of the period; account deletion has a 30-day cooling-off window.

Install

Open the dashboard from any workspace.

npm install -g @cing-self/okit-cli
okit web