auth-ai-proxy

Local AI account hub for CLI workflows. It manages provider accounts, tracks local usage, rotates accounts, refreshes sessions, and exposes an OpenAI-compatible proxy for tools such as Codex, Claude/OpenClaude, and the OpenAI SDK.

V1 focuses on Qwen OAuth, Qwen Web, Kimi Web, OpenAI, and GitHub Copilot accounts.

Installation

npm install -g @moreiratv/auth-ai-proxy

Quick Start

auth-ai-proxy setup --import-qwen
auth-ai-proxy add qwen --alias main
auth-ai-proxy ui

The proxy listens on:

http://localhost:1111/v1

OpenClaude / Claude Code OpenAI Mode

PowerShell:

auth-ai-proxy export --shell powershell

POSIX shells:

eval "$(auth-ai-proxy export --shell posix)"

The exported variables are:

CLAUDE_CODE_USE_OPENAI=1
OPENAI_BASE_URL=http://localhost:1111/v1
OPENAI_API_KEY=auth-ai-local
OPENAI_MODEL=<active-account-model>

Commands

• auth-ai-proxy setup: create local SQLite storage and import existing Qwen credentials.
• auth-ai-proxy add qwen --alias <name>: run Qwen OAuth device flow.
• auth-ai-proxy add qwen-web --alias <name>: open CloakBrowser for a persistent manual chat.qwen.ai login.
• auth-ai-proxy add kimi-web --alias <name>: open CloakBrowser for a persistent manual www.kimi.com login.
• auth-ai-proxy add openai --alias <name>: add an OpenAI OAuth account.
• auth-ai-proxy add github-copilot --alias <name>: add a GitHub Copilot account.
• auth-ai-proxy qwen-web login <name>: reopen the CloakBrowser profile to renew a Qwen Web session.
• auth-ai-proxy qwen-web validate <name>: check whether a Qwen Web profile is still logged in.
• auth-ai-proxy kimi-web login <name>: reopen the CloakBrowser profile to renew a Kimi Web session.
• auth-ai-proxy kimi-web validate <name>: check whether a Kimi Web profile is still logged in.
• auth-ai-proxy list: show accounts and today's quota usage.
• auth-ai-proxy use <alias>: set the active proxy account.
• auth-ai-proxy export: print OpenClaude/OpenAI-compatible environment variables.
• auth-ai-proxy proxy: run the OpenAI-compatible proxy.
• auth-ai-proxy ui: run proxy plus dashboard.
• auth-ai-proxy sync codex --alias <name>: update Codex config with a backup first.
• auth-ai-proxy sync claude --alias <name>: print env config for Claude/OpenClaude.
• auth-ai-proxy refresh [alias]: force refresh a provider token or browser session.

Notes

• Runtime HTTP server: Fastify.
• Upstream HTTP client: fetch/undici.
• Storage remains under ~/.auth-ai for compatibility with existing installs.
• Database: ~/.auth-ai/auth-ai.sqlite.
• Daemon log: ~/.auth-ai/auth-ai.log.
• Qwen Web browser profiles: ~/.auth-ai/qwen-web-profiles/<alias>.
• Kimi Web browser profiles: ~/.auth-ai/kimi-web-profiles/<alias>.
• External config backups: ~/.auth-ai/backups.
• Local proxy API key placeholder: auth-ai-local.
• Account override header: x-auth-ai-account.
• V1 does not encrypt credentials and does not expose auth/login for the local dashboard. Run it only on trusted machines.