Hey HN, I built this because I wanted to give my team access to Claude and GPT models for internal testing, but the official APIs have no per-key spending controls. You can't cap a key at $5/day or 100 requests/month — it's all or nothing. With non-technical team members in the mix (designers, PMs, QA), one forgotten loop or oversized prompt away from an ugly bill wasn't a risk I wanted to manage manually. Idea was to allow the members to test with these restricted API keys before using official keys.

So I built a bridge: it wraps the Claude Code CLI and Codex CLI behind an Express API, backed by existing Max/Pro subscriptions instead of per-token billing. Each team member gets their own API key with hard limits — requests/day, tokens/month, cost caps. Hit the limit and the key stops working. No surprises. An admin dashboard shows who's using what in real time.

Key features: - Two providers: /generate (Claude) and /generate-codex (Codex) - Per-user API keys with SHA-256 hashing (shown once, never stored raw) - Per-key hard limits with real-time tracking and enforcement - Admin dashboard for key management, usage monitoring, and request logs - Deploy on a $5 VPS behind Cloudflare Tunnel

What it's NOT: A production API replacement. It's for internal tooling and prototyping. CLI invocations add ~3-8s latency vs direct API calls.

Important: Wrapping CLI subscriptions behind a shared API may violate the Terms of Service of the underlying providers. Anthropic's Consumer ToS (updated Feb 2026) prohibits using subscription OAuth tokens in third-party tools, and OpenAI's ToS prohibits account sharing. Review the applicable terms before using this. See the Disclaimer section in the README for details.

Security was a focus: execFile (no shell injection), timing-safe auth, CSP/HSTS, input validation, rate limiting. Details in SECURITY.md.

Stack: Node.js, TypeScript, Express. No database — JSON files on disk.

GitHub: https://github.com/Shreyas-Dayal/ai-cli-bridge

Would love feedback on the approach and any security concerns I might have missed.

Show HN: A VCluster in Docker with Terraform and Istio

Show HN: Colored Title Bar – unique colors per VS Code workspace

Echoslate – Offline todo and Kanban tracker for programmers (MIT, .NET 8)

Show HN: Bridge your Claude/OpenAI subs into a team API with per-key cost caps

FounderSpace – AI-guided startup validation in 30 minutes

P5.lcd

US and Israel carrying out strikes against Iran

The March of Nines

Song about afterlife from AI perspective [video]

Show HN: TapPause – A dead-simple timer for intentional breaks

I built a startup game because I wanted one to play

U.S. and Israel Conduct Strikes on Iran

Japan aims for world first in space-based solar power

Simulation for Agentic Evaluation

Israel says it has attacked Iran, declares state of emergency

Show HN: PicShift – Convert images in the browser using WebAssembly

I Just Cancelled My ChatGPT Pro Plan

Trump directs US agencies to toss Anthropic's AI

Huk vs. Naniwa Starcraft [video]

Show HN: I built GeoQuests where people can request photos of a place

Israel launches attack on Iran, defence minister says

Israel launches strike against Iran, declares state of emergency across country

Ask HN: AI driven "legacy" Debug and Monitoring Tools

AI Mistakes Are Infuriating Gamers as Developers Seek Savings

AI Doomer Doublethink: The Orwellian Worldviews in the AGI Discourse

EUrouter – Integrate the latest AI models, without sending data outside the EU

What's cooking in git.git (Feb 2026, #11)

Poker4U – Educational game theory and better life decisions

Varlock: .env Files Built for Sharing

Saving No One

Show HN: Grant Project Access Without Forms or Mail Verification