Tidemark shows every rate-limit window your AI providers report: how much you have burned, when it resets, and whether your current pace gets you there. One card per account, side by side, so you can tell at a glance which provider to start a long run on.
A background service keeps polling while the window is closed, so the tray icon and the notifications stay current. Native Rust and Slint — no Electron, no embedded browser.
- Every window. Five-hour, weekly, monthly — whatever the provider exposes, each with its own reset time.
- Several accounts per provider. A work and a personal Claude, two Z.ai keys — grouped
behind an expand toggle, each named whatever you call it, in any script (
Работа,Team Lead), shown above the provider's own name on the card. - A pace mark on every bar. Fill to the left of the mark means the quota likely lasts until the reset; fill to the right means it does not.
- Warnings at 70% and 90%, plus a notification when a window resets. Off by default, switched on per window so you only hear about the ones you care about.
- History and a burn-down chart. Click a card to see how the current window was spent.
- Lives in the tray. Closing the window hides it; readings keep arriving.
| Details | Provider settings |
|---|---|
 |
 |
| Providers | Preferences |
|---|---|
 |
 |
Download the .deb or .rpm from the latest release:
Install from AUR with yay/paru
yay -S tidemark-gitExperimental. Download the setup executable from the latest release. It installs for the current user only and needs no administrator rights. The Inno Setup 7 installer handles manual upgrades and preserves startup preferences and user data. Native MSVC build and recovery instructions are in Windows packaging. The installer is not code-signed, so SmartScreen stops the first run — More info → Run anyway.
Install Tidemark directly from this repository:
nix profile install github:zbndev/tidemarkOr run the window without installing it:
nix run github:zbndev/tidemarkFor NixOS, add Tidemark as a flake input, import its module, and enable the service:
{
inputs = {
nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
tidemark.url = "github:zbndev/tidemark";
};
outputs = { nixpkgs, tidemark, ... }: {
nixosConfigurations.my-host = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [
tidemark.nixosModules.default
{ services.tidemark.enable = true; }
];
};
};
}The module installs Tidemark and registers its D-Bus-activated user daemon. It does not
start the window at login. nix run github:zbndev/tidemark#tidemarkd is available for
diagnostics, but normal use should let D-Bus activate the daemon when the window or another
client asks for it.
Open Tidemark. With nothing configured yet it says Add a provider to start tracking your quota.
- Open provider settings and press +.
- Pick your provider from the searchable list.
- Sign in, or paste an API key — the detail page says where to find it.
Keys are stored in your desktop keyring, never in a config file. Claude, Codex and Antigravity can sign in through Tidemark, or reuse the login their own CLI already has.
Removing a provider deletes its Tidemark-owned credentials and its card but keeps the quota history. A vendor CLI's own credential file remains owned by that CLI and is never removed.
tidemarkctl talks to the same daemon the window does, so anything the interface can do is
scriptable — and a panel widget needs no D-Bus code of its own.
tidemarkctl usage # every account, for a person
tidemarkctl usage --format json # {"accounts": [...]}, for a program
tidemarkctl guard --min-remaining 20 --window w604800 || echo "not this week"
tidemarkctl watch # one JSON object per change, until you stop itguard exits 0 when the quota is there, 1 when it is not, and 69 when there is no
trustworthy reading to judge — a rejected credential never answers "safe".
Secrets are read from stdin, never from the command line:
printf '%s' "$ZAI_API_KEY" | tidemarkctl auth set-key zaiCommands that act on one existing account use default unless --account work says
otherwise. Aggregate commands keep their broader meaning: usage, guard and watch
still include every matching account when no account filter is given.
A newly added Claude, Codex or Antigravity account starts pinned to Tidemark OAuth; adding it never silently adopts the vendor CLI's login:
tidemarkctl provider add codex
tidemarkctl auth login codex
# Or explicitly use the Codex CLI login that already exists:
tidemarkctl auth select codex --mode cliA Waybar module is two files. In ~/.config/waybar/config.jsonc:
and in your stylesheet, the classes it sets — ok, warning, danger at the same 70% and
90% the app's own bar changes colour at, plus stale when the reading is not fresh:
#custom-tidemark.warning { color: @warning_color; }
#custom-tidemark.danger { color: @error_color; }
#custom-tidemark.stale { opacity: 0.5; }tidemarkctl completions zsh > ~/.zfunc/_tidemarkctl installs completions;
tidemarkctl --help lists the rest — provider, account, auth, notify, config,
history.
If a card shows a number the provider's own dashboard disagrees with, the useful evidence
is the response Tidemark actually received. Put this in ~/.config/tidemark/config.toml:
[debug]
raw_responses = truethen systemctl --user restart tidemarkd. Every provider response is written verbatim,
one JSON object per line, to ~/.local/share/tidemark/debug/responses.ndjson:
jq 'select(.provider == "opencodego")' ~/.local/share/tidemark/debug/responses.ndjsonAPI keys are never written: request headers are left out entirely, URL query strings are redacted, and the sign-in endpoints are not logged at all. The file still describes your account's usage, so read it before attaching it to an issue. It rolls over at 16 MB and keeps one previous file. There is no switch in the interface — turning it off is the same edit, and a restart.
Sign in with your account
Antigravity · Claude · Codex
Paste an API key
ai& · Amp · Chutes · ClawRouter · ClinePass · Codebuff · Crof · Deepgram · DeepInfra · DeepSeek · ElevenLabs · Factory · Fireworks · Groq · IBM Bob · Kilo · Kimi · LiteLLM · LLM Proxy · MiniMax · Moonshot · NanoGPT · Neuralwatt · OpenAI · OpenCode Go · OpenRouter · Poe · StepFun · sub2api · Synthetic · Venice · Warp · xAI · Z.ai · ZenMux
Local session
Abacus · Alibaba Coding Plan · Augment · CommandCode · Cursor · Gemini · Grok · LongCat · Manus · MiMo · Mistral · Notion · Ollama · OpenCode · Perplexity · Qoder · Sakana · T3 Chat · ZoomMate
No credential needed
Wayfinder
Some providers need one extra setting alongside the key — a region, an account id, or the base URL of your own deployment. The provider's page asks for it.
Something else
If the service you use is not listed, you can teach Tidemark to read it without waiting for
a release. A provider plugin is one .tidemark-provider file — metadata, a sandboxed Lua
transformation and an optional mark — that you import from Providers → Import a provider
file, then point at your own endpoint with your own key. The file cannot name a host and
never sees the key. See docs/plugin-providers.md for the
format, the sandbox and a worked example.
A Wayland or X11 desktop with OpenGL. The packages are built for Fedora 44+ and Ubuntu 26.04 LTS+ and their derivatives; Arch and other rolling releases are fine.
Needs Rust 1.92 or newer, CMake, Clang, and the development packages for fontconfig and SQLite:
git clone https://github.com/zbndev/tidemark.gitcargo build --workspacecargo run -p tidemarktidemarkd does the polling and tidemark is the window. The window never talks to a
provider itself — it only shows what the daemon publishes on D-Bus, which also makes the
daemon usable from busctl or a Waybar module. See CONTEXT.md for the
architecture and the design record.
MIT — see LICENSE.
The provider marks under data/icons are their owners' trademarks and are not covered by
this licence; see docs/TRADEMARKS.md, which also explains how to
build without them.
Provider protocol details are taken from CodexBar (MIT).