Cost control tower and circuit breaker for AI agents

The circuit breaker for your AI agents.

See what every agent costs. Detect when one derails. Cut it off before the invoice arrives. One line of configuration, and every call is attributed to an agent, a run and an end customer.

Hosted in GermanyNo prompt content storedProvider key passed through onlyAudit log and DPA
6named findings with a euro amount and a fix
4intervention levels: observe, warn, throttle, stop
9providers in the proxy, plus custom targets such as Ollama and vLLM
0prompts stored. Counters, fingerprints, metadata only.
Diagnosis

Six findings. Each with an amount and a fix.

Two detectors work in the stream and intervene immediately; four run every five minutes in batch.

D1 · stream

Idle loop

The same tool call with the same arguments, again and again. Detected by fingerprint, stopped along your ladder.

D2 · batch

Context bloat

The context grows every step without progress. Suggested cut, savings per month.

D3 · batch

Cache blindness

Same system prompt and tools, no cache hit. Enable prompt caching, savings calculated.

D4 · batch

Wrong model

Short answers without tools on the most expensive model. The smaller one will do.

D5 · stream

Error storm

Error after error, each costing input tokens. Throttled or stopped before the night runs through.

D6 · batch

Outlier

A run costs a multiple of the agent's 15-day baseline. Reported before it becomes a pattern.

Intervention

Others show what happened. Tokenwarden prevents what is happening right now.

Run budget, daily budget per agent, monthly budget, rate limit, model block with time window, protection rules per detector. Every rule starts in shadow mode. If Tokenwarden itself fails, the proxy is fail-open.

observe
Count and report only.
Default for every new agent.
warn
Finding and alert.
E-mail, Slack, Teams, ntfy on your phone, JSON webhook.
throttle
Pause before the next call.
Up to ten seconds per call.
stop
HTTP 402 with a machine-readable reason.
Rule, limit, spend, run id, hint. The agent ends the run gracefully.
Security and compliance

Built like a financial system, not like a dashboard.

No content

Prompts and answers are neither stored nor logged.

Key pass-through

Your provider key is passed through and never stored. Scoped Tokenwarden keys.

Hosted in Germany

Processing exclusively in the EU. DPA, records of processing, deletion policy.

Audit log, 2FA, SSO

Every action logged; authenticator app; OpenID Connect with your directory.

See your first call in five minutes.

Free, no credit card, no contract. The demo shows the cockpit with a synthetic working day before you connect anything.