See it at a glance. What you spent this month.

A billing app for the cloud and AI services you pay for. It adds up what they cost into one total. Credentials stay on this device.

Dashboard
Dashboard

Connect each service.
Follow the steps.

The walkthrough takes you to a read-only credential, and each step names the exact permission you are granting. Nothing is saved until a real amount comes back.

Setup guide
Setup guide

The SaaS you already use.
Most of it connects.

If a vendor has no billing API, you can post a reading from your own machine. The in-app list is the source of truth.

Support list

  • Active24
  • Aiven
  • Akamai
  • Alchemy
  • Alibaba Cloud
  • Anthropic
  • Apify
  • MongoDB Atlas
  • AWS
  • Azion
  • Baseten
  • Better Stack
  • BitLaunch
  • Botpress
  • Bring
  • bunny.net
  • Checkout.com
  • Clerk
  • Clever Cloud
  • ClickHouse Cloud
  • ClickSend
  • Cloudflare
  • CM.com
  • CockroachDB Cloud
  • Con Edison
  • Confluent Cloud
  • CUDO Compute
  • Cursor
  • Datadog
  • DataPacket
  • Deel
  • Deepgram
  • DeepInfra
  • DeepSeek
  • DigiCert
  • DigitalOcean
  • DNSimple
  • Dynatrace
  • EasyPost
  • Easyship
  • Elastic Cloud
  • Elastx
  • ElevenLabs
  • Exa
  • Expo EAS
  • fal.ai
  • Fastly
  • Figma
  • Firecrawl
  • Fireworks
  • Flexport
  • Flutterwave
  • Fly.io
  • FriendliAI
  • Gandi
  • Gcore
  • Google Cloud
  • GitHub
  • GitLab
  • GleSYS
  • Gooten
  • Grafana Cloud
  • Hedra
  • Heroku
  • Hivelocity
  • Hostens
  • HostUp
  • Huawei Cloud
  • Hugging Face
  • Hyperstack
  • IBM Cloud
  • IDCF Cloud
  • inference.sh
  • Infobip
  • InterNetX
  • IONOS Cloud
  • Latitude.sh
  • Leaseweb
  • Linear
  • MariaDB Cloud
  • Melbicom
  • MessageBird
  • Mistral
  • mittwald
  • Moonshot (China)
  • Moonshot (Overseas)
  • Namecheap
  • Name.com
  • NAVER Cloud
  • Nomos
  • Neo4j Aura
  • Neon
  • Northflank
  • Notion
  • Novita
  • Octopus Energy
  • 1NCE
  • OpenAI
  • Openprovider
  • OpenRouter
  • Orange Cloud Avenue
  • 3DS OUTSCALE
  • OVHcloud
  • Oyster
  • Parasail
  • PayPal
  • Paystack
  • PDFShift
  • PG&E
  • phoenixNAP
  • Pika
  • PlanetScale
  • Plivo
  • Polar
  • Porkbun
  • PostHog
  • Postman
  • Printful
  • Printify
  • Prodigi
  • Pulumi Cloud
  • Qdrant Cloud
  • Qovery
  • Railway
  • Realtime Register
  • Redis Cloud
  • Remote
  • Render
  • Resend
  • RevenueCat
  • RunPod
  • Sakura Cloud
  • Scaleway
  • Scalingo
  • Sentry
  • Servers.com
  • ShipBob
  • Shippo
  • ShipStation
  • Shipwell
  • SiliconFlow
  • Simply.com
  • Soniox
  • Soracom
  • STACKIT
  • StepFun (China)
  • StepFun (Overseas)
  • Stripe
  • Supabase
  • SurrealDB Cloud
  • Tavily
  • teelaunch
  • Textmagic
  • thanks.io
  • Tibber
  • TiDB Cloud
  • Together AI
  • TransIP
  • Transloadit
  • Turso
  • Twilio
  • Typebot
  • Typesense Cloud
  • Unleash
  • UpCloud
  • Upstash
  • Upsun
  • Vast.ai
  • Vercel
  • Voltage Park
  • VoltView
  • Vonage
  • VPS.NET
  • Vultr
  • WarpStream
  • Websupport
  • Zilliz Cloud
  • Zoom
  • Formspring
  • Frank Energie
  • Hubble
  • Files.com
  • DoiT
  • Timeweb Cloud
  • Cloudheed
  • Sevalla
  • Oxahost
  • Fiskil
  • 3PLGuys
  • Pleo
  • Cerebrium
  • Shipmondo
  • Sendcloud
  • Tencent Cloud
  • Make

Supported services

Connected services
Connected services

The keys stay on this phone.
Nowhere else *

Credentials are written only to this iPhone. Not iCloud. Not any TollCat server. Credentials are written only to this phone. Not a cloud backup. Not any TollCat server. What that actually means

Dashboard
Dashboard

FAQ

Do API keys leave this device?

No. They are written only to on-device Keychain with WhenUnlockedThisDeviceOnly: not iCloud, not system backups. Fetch requests go from this device to each vendor’s official API. No server ever handles a provider credential. No. They are encrypted with a key in Android Keystore and stored only on this phone: not in Google’s cloud backup, and if the phone has a screen lock, they only open after you unlock it. Fetch requests go from this device to each vendor’s official API. No server ever handles a provider credential.

Missing a service you use?

The full roster is on the support list. If a vendor has no billing API, you can post a reading from your own machine to the reading inbox. To request a service, use the contact page. Support list

What about a new phone?

Credentials deliberately stay out of iCloud, so moving is an export: save an encrypted .tollcat file on the old phone, then type the 10-character code shown on screen into the new one. The code dies when you leave the import page, and the file expires after 24 hours. History does not travel with the file — refresh once after import. Credentials deliberately stay out of cloud backup, so moving is an export: save an encrypted .tollcat file on the old phone, then type the 10-character code shown on screen into the new one. The code dies when you leave the import page, and the file expires after 24 hours. History does not travel with the file — refresh once after import.

Does it cost money?

Completely free.

Is this FinOps? Will it change my cloud resources?

No. TollCat reports spend. It does not shut down instances, change quotas, send remote push, or compute the bill with a cloud model. A local reminder is optional and never includes an amount.

Which devices? What about currency?

iPhone, iPad, and Mac, on iOS 26 or macOS 26. The Android app is built too and runs on Android 9 or later; it’s just not on Google Play yet. The ledger is kept in US dollars. Display currency only changes how amounts are written; it does not call a live FX API.

Where is the source?

It’s all on GitHub, MIT licensed. Build it yourself, or check that the App Store binary really comes from this source — the steps are in the repo. github.com/KUD-00/tollcat

What about Android?

It’s built — just not on Google Play yet. Too impatient to wait? Build it yourself from the source on GitHub, and feel free to lend a paw while you’re there. GitHub

Support list

Fully supported and tested (14)

Enter a read-only credential and the bill comes in. We have reconciled these against real accounts.

Theoretically fully supported (215)

A public billing API exists and the app can connect. We have not yet reconciled a live bill.

Reading inbox only (12)

There is no official bill-amount API. Post a reading from your own machine. A fixed subscription can also be entered by hand.

Not supported (286)

Checked and declined. There is no public bill-amount API we can reconcile against. The names stay in the catalog so we do not check again.

This list matches the app. To request a service, use the contact page. Contact

What that actually means

1 / 5

Open source, and how to check

The source is on GitHub, MIT licensed. You can build it and run it on your own phone.

The App Store binary is re-signed and encrypted by Apple, so it will not match this source byte for byte. What you can check is the public build’s provenance, and the executable’s UUID. The steps are in the repo.

Open source, and how to check

The source is on GitHub, MIT licensed, and the Android app lives in the same repo. You can build it and run it on your own phone.

The phone’s own keychain

Keychain is the encrypted keystore that ships with the iPhone. The system holds the keys; this app does not write them into its own files.

We use the strictest class: readable only after you unlock this device, not copied to iCloud, not included in backups. Delete a service and that key is deleted with it.

Where the keys are locked

Your keys are encrypted with a master key held in Android Keystore, then stored on this phone. The system holds that master key; it cannot be exported, and this app never writes it into its own files.

If the phone has a screen lock, the keys only open after you unlock it. The app opts out of system backup, so nothing goes to Google’s cloud backup. Delete a service and that key is deleted with it.

Where a refresh goes

A refresh leaves this phone for each vendor’s official API. No TollCat server sits in the middle, and none of them see a key.

The domains this app talks to are listed under Settings → About. The same list lives in the source; the build fails if a host goes missing.

A new phone

Keys stay out of iCloud on purpose, so a new phone is an export you start. Save an encrypted .tollcat on the old phone, then type the 10-character code on the new one.

Leave the import page and the code is gone. The file cannot be imported after 24 hours — that only shrinks the window if you sent it by mistake, and is not the strength of the encryption. History does not travel with the file; refresh once after import.

A new phone

Keys stay out of cloud backup on purpose, so a new phone is an export you start. Save an encrypted .tollcat on the old phone, then type the 10-character code on the new one.

Leave the import page and the code is gone. The file cannot be imported after 24 hours — that only shrinks the window if you sent it by mistake, and is not the strength of the encryption. History does not travel with the file; refresh once after import.

What the server never sees

There is one server. It handles tip notes, feedback, a public catalog, a reading inbox, and anonymous page counts. None of those paths see a credential or a bill.

Having a server does not mean it can fetch your bill.

iPad

1 / 2

More room, more to see

The same app as iPhone. You don’t install a second one.

Turn it upright, still good

Mac

1 / 2

Menu bar

A native Mac app. A billing cat shows up in your menu bar.

Download for Mac Unzip it, then drag TollCat into Applications. Needs macOS 26.

A native app, at home on the Mac

A real Mac app written in SwiftUI, not a web page wrapped in Electron. It opens right away, and it sits in the background without eating your memory.

Credentials stay in this Mac’s keychain. They are not shared with iPhone or iPad.

Android

Same math, made for Android

It’s built. It’s just not on Google Play yet.

It does the math with the same code as the iPhone app, so the totals match to the cent. The screens were rebuilt the Android way, and credentials stay on the phone here too.

If you can’t wait for the store, build it yourself from the source on GitHub.

Windows

Still in the shop

Not done yet — stay tuned!

The repo has an early Windows build.