CloudBridge
Your cloud and AI costs, in one local ledger.
CloudBridge is an open-source desktop app for developers who want to understand
what they spend on cloud infrastructure and model APIs. Connect billing accounts
or import provider exports, compare costs across sources, and trace spending to
services, models, and business lines. No CloudBridge account or hosted backend
required.
Download | Live demo | Quick start | Documentation | Contributing
Why CloudBridge?
- One view across providers. Explore month-to-date, rolling 30-day, or
12-month trends, with account and service breakdowns.
- Spend and usage kept distinct. See net charges alongside gross usage and
credits. Token-only exports remain usage records, not estimated bills.
- Explain where costs go. Follow a Sankey from source to service or model
to business line; unallocated usage stays visible.
- Review changes that matter. Configurable rules flag unusual daily spend,
low prepaid balances, and unallocated costs. Rules run when the app opens
and after each refresh; opening the Alerts page re-checks whether open
alerts have resolved.
- Find what to cut. Insights compares the bill with a read-only resource
scan of AWS and Cloudflare accounts: stopped instances, idle addresses,
unclaimed resources and billed resources missing from the scan, each priced
from the bill, summarized by type and opened down to the resource.
- Keep watching with the window closed. On macOS and Windows, CloudBridge
stays in the menu bar (notification area) with the month's spend as the
icon's title. Every 15 minutes it fetches the accounts that are due, runs
the rules and posts a system notification for each new alert. Open at login
keeps that running after a restart. Linux has no tray icon, so the app still
quits when its window closes.
- Report in one currency. Original billing amounts are preserved; a dated,
built-in exchange-rate table converts them for display. Missing rates are
reported rather than silently treated as 1:1. Rates are not live market data.
- Keep control of your data. A local DuckDB ledger, credentials in the OS
keyring, no cloud sync, and no telemetry. A native GPUI interface supports
light and dark themes.
Supported sources
| Source | Connection | Available detail |
|---|
| Amazon Web Services | Cost Explorer API | Costs by service and charge category |
| Microsoft Azure | Cost Management query API | Daily costs by service and charge type, per subscription |
| Google Cloud | Billing export in BigQuery | Daily costs by service, SKU, project and region, with credits apart |
| Alibaba Cloud (阿里云) | Billing API or bill import | Product totals; imported bill details include Model Studio (百炼) models |
| Volcengine (火山引擎) | Bill import | Ark (火山方舟) endpoints and token types |
| OpenAI | Cost or usage export | Project and model costs or token usage |
| Anthropic (Claude) | Cost or usage export | Workspace and model costs or token usage |
| Cloudflare | Billable usage API | Daily spend per service, split by bucket, Worker, D1 database and Durable Object (pay-as-you-go accounts) |
| DeepSeek | Balance API or bill import | Prepaid balance; imported daily, per-model spend |
File imports need no provider credentials. DeepSeek's API reports a balance,
not a spending breakdown. Google Cloud is read from the billing account's
BigQuery export, which has to be turned on first; see
permissions.
AWS accounts can also read AWS Data Exports (FOCUS 1.2 with AWS columns) from
an S3 bucket. This replaces Cost Explorer for accounts with an export URI,
reading Parquet or gzipped CSV and only the files the period's manifest names;
S3 storage and request charges can still apply.
Installation
Download from the official GitHub Releases page:
macOS: Open the disk image and drag CloudBridge to Applications.
Current official macOS releases are Developer ID signed and notarized. If macOS
blocks a current release, report the exact warning; do not remove quarantine
protection as a routine installation step.
Windows: The executable is not code-signed, so SmartScreen will likely
show "Windows protected your PC". Check that it came from the official
release page, then choose More info → Run anyway.
Linux and Intel Mac binaries are not published. Source builds on those platforms
are not guaranteed to work; see development setup
for prerequisites and validation guidance.
Quick start
Explore without credentials
Try the live demo in your
browser: the same pages running on a sample bill, with nothing to install.
In the desktop app, open Settings → Demo data to load sample accounts and
billing history. Demo accounts have no credentials and are skipped by provider
refreshes. Clear the demo data from the same page when you are ready.
Connect your own data
- Open Accounts, choose a source, and enter an account name.
- For API access, configure credentials using the
account setup guide
and permission templates. Use least-privilege credentials.
- Save the account. For API data, click Validate on the account row,
then Refresh on the Overview; for a downloaded export, click
Import on the account row.
- Open Overview and select MTD, 30d, or 12m. Choose your reporting
currency under Settings → Reporting.
Before importing a bill
- Imports replace whole months for the selected account. Export the full
bill: a product-filtered file replaces that month's existing data with only
that product. Re-import a corrected export to update a month.
- Refresh never overwrites an imported month, including Force Refresh.
- Usage is not spend. An export with token counts but no monetary amounts
does not contribute billed costs.
- Text exports must be UTF-8. Re-save GBK files as CSV UTF-8 before importing.
- Import DeepSeek's ZIP as downloaded. CloudBridge reads
cost-*.csv;
amount-*.csv contains token counts, not money.
The import guide
lists export locations and supported details; see
troubleshooting
if an import or a fetch does not do what you expect.
Refresh uses a 24-hour freshness window by default, configurable to
6, 12, 24, or 48 hours in Settings → Refreshing. Force Refresh bypasses
that window for API-backed periods and can incur additional provider charges.
CloudBridge itself is free; provider API fees are separate.
Keyboard shortcuts
⌘1…⌘9 (Ctrl+1…9 on Windows) switch pages in
sidebar order, ⌘R reloads the current page, ⌘Enter runs a query on the
Query page, and Esc closes a dialog. The full list is in the
docs.
How it works
Provider responses and imported files are retained locally. A normalization
layer maps them into a shared ledger using column names from
FOCUS, the open cost and usage specification.
CloudBridge uses this vocabulary; it does not implement the full specification.
Ingestion replaces an account's billing period transactionally, avoiding duplicate
charges on re-import. Raw data can be reprocessed after a mapping correction
without another provider fetch. Charts, attribution, and alerts read the ledger
rather than making their own billing API calls.
Privacy and local storage
- Saved provider credentials are held in the OS keyring, separate from the
billing databases. The app uses them to authenticate requests directly to
configured providers.
- Billing records and raw exports stay in the local application-data directory.
There is no CloudBridge sync service or telemetry.
- Deleting an account removes its credentials. Its billing history stays in
the ledger and keeps counting in totals unless you tick Also delete its
billing history; history left behind is listed on the Accounts page, where
it can be deleted.
- Local does not mean encrypted. CloudBridge does not encrypt the ledger or
raw billing files. Use OS disk encryption and protect your backups.
- Bills can contain account identifiers, resource names, and tags. Redact these
as well as credentials before sharing logs, screenshots, or sample exports.
See storage and backups
and security notes.
Documentation
Development
Use Rust 1.95 or newer (current stable recommended) and the platform
prerequisites in CONTRIBUTING.md. macOS builds need Xcode Command Line Tools
and CMake; Windows builds need the C++ build tools and Windows SDK, including
fxc.exe on PATH.
git clone https://github.com/JetSquirrel/cloudbridge.git
cd cloudbridge
cargo build --release
cargo run --release
The executable is written to target/release/cloudbridge on macOS or
target/release/cloudbridge.exe on Windows. The browser demo is a separate
WebAssembly target with an in-memory demo backend; it requires nightly Rust
and a matching wasm-bindgen CLI. See the contributing guide before building it.
Contributing
Bug reports, documentation improvements, and billing-source contributions are
welcome. Start with the contributing guide for setup,
validation commands, and guidance on sharing sanitized billing fixtures.
For larger changes, open an issue
to discuss scope first.
CloudBridge focuses on single-machine cost analysis. Shared deployments, team
collaboration, invoice reconciliation, and a general chargeback engine are
outside the current scope.
License and acknowledgments
CloudBridge is licensed under MIT.
Built with GPUI and
GPUI Kit for the native interface,
DuckDB for local analytics, and
FOCUS terminology for the billing ledger.
