agent-vitals

One command to find out what your coding agent is really costing you.

npx agent-vitals

agent-vitals scans your local Claude Code, Codex and Cursor setups and session history and tells you:

• 🔑 Plaintext secrets sitting in your MCP config (API tokens in ~/.claude.json)
• 🧟 MCP servers you never use, but still pay for in every session's context
• 🥶 Cold-start cost: how many tokens are loaded before your first prompt is even answered
• 🔁 Wasted re-reads: the same file read again and again with no edit in between
• 🌊 Context floods: which tools dump the most output into your context window
• 🪝 Broken hooks and skills that never trigger

  Health score: 35/100

Findings
  ✖ Plaintext secret in MCP server "slack" (env.SLACK_MCP_XOXP_TOKEN = xoxp…9f)
    → Move it to an env var and reference it as ${VAR}
  ▲ 5/11 MCP servers never called in 30 days: github, notion, postgres, …
    → Remove or disable them; each one adds tool schemas to context
  ▲ Median context before your first message is answered: ~60.5K tokens

Privacy

Everything runs locally. No network calls, no telemetry. Secrets are redacted in all output.

Options

| Flag | Default | | |---|---|---| | --days <n> | 30 | How much session history to analyze | | --agent <id> | all found | Limit to claude, codex or cursor (repeatable) | | --share | off | Print a screenshot-ready score card + a one-click post link (counts only, no names or paths) | | --json | off | Machine-readable output (for CI or dashboards) |

Exits with code 1 when a critical finding exists, so you can drop it into CI or a pre-commit hook.

Roadmap

• [ ] Per-MCP-server context cost (tool schema tokens)
• [ ] --fix to move plaintext secrets into env vars
• [ ] Tool name/description collisions across MCP servers

Supported agents

| | Config & MCP | Secrets | Session history | Re-reads | |---|---|---|---|---| | Claude Code | ✅ ~/.claude, ~/.claude.json, .mcp.json | ✅ | ✅ | ✅ | | Codex | ✅ ~/.codex/config.toml, AGENTS.md | ✅ | ✅ | — (reads via shell) | | Cursor | ✅ ~/.cursor/mcp.json, .cursor/rules | ✅ | — (stored in SQLite, no token data) | — |

Requirements

Node.js 18+. Zero dependencies.

License

MIT