jaynshare

jaynshare [global-options] verb [options] [arguments] [-- passthrough]

jaynshare is a self-hosted proxy that pools Anthropic Claude subscriptions and API keys for claude (Claude Code). One Rust binary covers the Linux server, the operator CLI, and the enrolled client. After a server is installed, accounts are added, and a client joins with a single-use invite, engineers run jaynshare claude instead of claude and draw from an account that still has quota.The server listens on a private-network address (Tailscale, or the host's only private address). TLS is pinned to the server's own identity. Clients present a per-machine secret. The pool routes each request by model glob, account eligibility, priority (lower wins), and optional per-route preference. On launch, claude can open a keyboard or numbered picker, take --account, take --auto, or skip the pool with --direct. Arguments after --, and remaining words after the launcher's own options, go to Claude Code unchanged.The same executable is used as a remote operator with --server and --operator-secret-file. --json prints one JSON document on standard output for verbs that accept it; jaynshare schema prints the matching JSON Schema. jaynshare help and jaynshare help verb never contact a server.The project is MIT-licensed, written by Jayn Labs, and is not made by, endorsed by, or affiliated with Anthropic.

--json

One JSON document on standard output (global).

Suppress progress and hints on standard error; errors still print.

Never emit colour. NO_COLOR in the environment has the same effect.

Configuration file. Same meaning as JAYNSHARE_CONFIG, and wins over it.

Address a running instance by its base-URL origin as a remote operator.

Protected file holding the remote-operator secret for --server.

Extra trust anchor (PEM) for an https --server origin.

Deadline for one control request (default 10).

Answer every skippable confirmation.

Version and build identity.

Help for the executable or one verb (one or two words, e.g. account add).

Version and build identity.

JSON Schema of a verb's --json document, or of every verb.

Launch Claude Code through the pool. After a successful launch the exit code is Claude Code's. --picker wins over JAYNSHARE_PICKER.

Print the launch environment, quoted for the shell to evaluate (eval "$(jaynshare env)").

Print the one shell line that makes claude run jaynshare claude.

Join a pool with the operator's invite (`jsi1_…`), install that server's client, and optionally add a Claude account.

Apply a client kit to this installation.

Remove this client installation.

Add or remove the pool's MITM CA from the OS trust store (always confirmed).

Install a rotated client secret.

Operator: the pool table with utilisation bars. Engineer: this client's view of the pool. --check prints nothing and answers with the exit code.

Pool accounts (operator) or the accounts this client added (engineer list / login). add takes --api-key, --portable, --server-file, or --claude-managed.

Move the default account, steer one route, or list accounts with the default marked.

Model-glob routes. add requires --pattern glob (repeatable) and optional --account, --bucket, --before, --after.

Per-account priority; lower wins. Negative values are allowed.

Blocked model patterns.

Start a usage probe sweep.

Client registry. invite prints a single-use token that expires after a day by default (--expires accepts seconds, or a number with s, m, h, or d).

Create or delete the remote-operator secret (the pool's master key; disclosed once, never stored by the CLI).

MITM CA fingerprint, PEM export, and rotation (--now replaces at once).

Configuration file. new --out writes a scaffold and never overwrites. edit uses $VISUAL or $EDITOR. SIGHUP on serve also reloads.

Operational NDJSON log, or the audit log (never a body or a credential). -n / --lines, --follow, --since.

Send one request through the proxy. Status and headers on standard error, body on standard output.

Discover, verify, or download a signed release from the release host.

Native systemd install. install writes a configuration when none exists and ends with an invite. auto-update on|off updates every night; clients follow on their next launch.

Register or control the platform service.

Run the server in the foreground until stopped; SIGHUP reloads.

Hooks Claude Code runs, not meant to be invoked by hand.

The server configuration is a TOML file selected by --config or JAYNSHARE_CONFIG. jaynshare config paths prints every owned path in force, how it was selected, whether it exists, and its mode. jaynshare config new --out path writes a minimal valid scaffold.An enrolled client stores client.toml under the platform client directory. Without that file, engineer verbs exit 11 (`clinotenrolled`) and name the missing file.JAYNSHARE_PICKER selects the account picker (`keyboard` or `numbered`) unless claude --picker is set. NO_COLOR disables colour.

Pooling Claude subscriptions conflicts with Anthropic's published terms and can lead to suspension or termination of every account involved, without a refund. The project does not claim that a deployment is legal or authorized.The server is a trusted intermediary, not an end-to-end encrypted relay. It receives request and response bodies in plaintext so it can route and retry them. Anyone who operates or compromises the server can read or alter that traffic.Self-hosting expects a Linux host with systemd and a private network between engineers and the server. The published one-line join installer targets macOS and Windows; a Linux client installer is listed as future work. The same binary still builds with cargo build --release.Invites work once and expire (default one day). Send them through a private channel. The audit log never stores a body or a credential.Exit 0 is success, 1 unexpected failure, 2 usage error. jaynshare help verb lists that verb's other rows (for example claude can exit 4, 6, 7, 11, 13, 14, 15, or 16 before it replaces itself).

Jayn Labs started jaynshare so a small group could share leftover Claude Code quota. Version 1 drew on Team Claude's approach. Version 2 is a from-scratch Rust rewrite (crate 2.1.0, rustc 1.95) with a less invasive Claude Code config change. MIT license.

claude(1), codex(1), systemctl(1), cargo(1)

Source code · Homepage