智能助手网
标签聚合 tokens

/tag/tokens

hnrss.org · 2026-04-18 08:47:20+08:00 · tech

I built this to run OpenClaw safely. The problem: every sandbox I tried still handed the real API token to the agent as an env var. nilbox never gives the agent the real token. It gets a fake placeholder instead (ANTHROPIC_API_KEY=ANTHROPIC_API_KEY). nilbox intercepts outbound API calls and swaps in the real token at the network layer. So if the agent leaks the "token" — attacker gets a useless string. That's it. Also ships a managed Linux runtime (consistent across mac/win/linux) and a Store for one-click agent app installs. Full shell access too. Available for macOS, Windows, and Linux https://nilbox.run Curious how others are thinking about token security when running agents locally. Comments URL: https://news.ycombinator.com/item?id=47812193 Points: 3 # Comments: 0

hnrss.org · 2026-04-15 23:38:22+08:00 · tech

As a consultant I foot my own Cursor bills, and last month was $1,263. Opus is too good not to use, but there's no way to cap spending per session. After blowing through my Ultra limit, I realized how token-hungry Cursor + Opus really is. It spins up sub-agents, balloons the context window, and suddenly, a task I expected to cost $2 comes back at $8. My bill kept going up, but was I really going to switch to a worse model? No. So I built l6e: an MCP server that gives your agent the ability to budget. It works with Cursor, Claude Code, Windsurf, Openclaw, and every MCP-compatible application. Saving money was why I built it, but what surprised me was that the process of budgeting changed the agent's behavior. An agent that understands the limitations of the resources doesn't try to speculatively increase the context window with extra files. It doesn't try to reach every possible API. The agent plans ahead, sticks to it, and ends work when it should. It works, and we've been dogfooding it hard. After v1 shipped, the rest of l6e was all built with it. We launched the entire docs site using frontier models for $0.99. The kicker was every time l6e broke in development, I could feel the pain. The agent got sloppy, burned through context, and output quality dropped right along with it. Install: pip install l6e-mcp Docs: https://docs.l6e.ai GitHub: https://github.com/l6e-ai/l6e-mcp Website: https://l6e.ai Happy to answer questions about the system design, calibration models, or why I can't go back to coding without it. Comments URL: https://news.ycombinator.com/item?id=47780622 Points: 3 # Comments: 0

hnrss.org · 2026-04-15 21:24:26+08:00 · tech

My frustration solving auth with JWTs led to reinventing the wheel for more predictable token integrity and transparency, while improving flexibility. The mix of features separates concerns more cleanly than what's been available, allowing higher throughput, custom codecs, delegation to both services and domains while easing key rotation and other practicalities. The design is focused on the token as state guarantee, not creation, revocation and the range of other separate concerns and application responsibilities. The spec conventions attempts to ease development with jurisdiction/data sovereignty and authorization in the authz field. It also enables and eases delegation between services and domains without centralized service exposure. The implementation is standalone and has demos for Deno, Cloudflare, etc in https://github.com/hwt-protocol Feedback and critique of the security logic and approach appreciated. Comments URL: https://news.ycombinator.com/item?id=47778646 Points: 2 # Comments: 0

linux.do · 2026-04-14 22:40:17+08:00 · tech

本帖使用社区开源推广,符合推广要求。我申明并遵循社区要求的以下内容: 我的帖子已经打上 开源推广 标签: 是 我的开源项目完整开源,无未开源部分: 是 我的开源项目已链接认可 LINUX DO 社区: 是 我帖子内的项目介绍,AI生成、润色内容部分已截图发出: 是 以上选择我承诺是永久有效的,接受社区和佬友监督: 是 以下为项目介绍正文内容,AI生成、润色内容已使用截图方式发出 github.com GitHub - Fwindy/Cli-Proxy-API-Management-Center: This is a WebUI interface based on CLI-Proxy-API,... This is a WebUI interface based on CLI-Proxy-API, designed to simplify configuration modifications and runtime status monitoring. 新增监控中心页面 类似于使用统计界面,但界面美化&增强。 新增「花费与Token」趋势图。 新增「模型使用分布」统计。 增强凭证统计 新增凭证花费统计 对于Codex凭证:可一键刷新配额,并根据配额的截止时间往前倒推统计5h花费/周花费。 增强请求事件明细: 支持自动刷新(15s/30s/1m/5m) 新增Tokens per second (TPS) 统计。 一键导入模型价格 从 https://models.dev/api.json 拉取最新价格并导入,对于多Provider的模型,可以手动指定优先用哪个Provider的价格 仅对 已有使用记录 的模型进行匹配与同步 支持CPA模型名称映射,例如把CPA中的coder-model先映射为qwen3.6-plus后再进行价格匹配 价格同步里已经预设了一些配置,可以直接点击“保存并同步”按钮来使用,可以正常导入御三家的价格。好用的话求点个Star 4 个帖子 - 3 位参与者 阅读完整话题

linux.do · 2026-04-14 20:34:51+08:00 · tech

各位大佬有没有发现, 这个hermes 太喜欢干活了,我让他帮我修改一个错误参数,结果他去找这个错误参数为啥出现?找history去了? 我不需要你帮我找原因啊 ,然后一直grep、exec、from pathlib? 我让你修改一个parameter,你直接sed不就完事了,你运行from pathlib干啥? 这个hermes 非常喜欢运行python的库,很多shell 命令就能搞定的,他偏要用python来搞? 结果就是一个问 题50k,2个问题直接compact ,3个问题就准备又要compact了。。。 6 个帖子 - 3 位参与者 阅读完整话题