ccpool

Run Claude Code across a pool of accounts, rotating automatically when one hits its rate limit.

Based on the idea behind torkay/ccpool, but a much simpler take: three Python files, standard library only, no daemon, no config format, no database. A 0600 JSON vault and a small state file.

Install

brew install ventsislav-georgiev/tap/ccpool

Or just symlink it — there is nothing to build:

git clone https://github.com/ventsislav-georgiev/ccpool
ln -s "$PWD/ccpool/ccpool.py" ~/.local/bin/ccpool

Requires Python 3 and the claude CLI on PATH.

Use

Mint one token per account with claude setup-token while logged into that account, then paste it on stdin (never on argv, never logged):

ccpool add work
ccpool add personal
ccpool ls

Two ways to run:

# one-shot: picks an eligible account, rotates on rate limits, retries
ccpool run -- -p "do the thing" --model opus

# live session: rotates underneath a running claude, no restart
ccpool proxy &
ANTHROPIC_BASE_URL=http://127.0.0.1:8790 claude

Other commands: status (probe real quota, costs one call per account), hold (pull an account out of rotation), clear (undo a bench), rm.

How it decides an account is exhausted

Two paths, because they have different evidence available.

run watches Claude Code's event stream. A 429 from anything — a proxy, a CDN, a local dev server — produces an event indistinguishable from real account exhaustion, so benching on that signal alone silently walks a healthy pool down to nothing. The stream therefore only raises a suspicion; GET /api/oauth/usage against api.anthropic.com decides, deliberately bypassing whatever returned the 429.

proxy needs no confirmation probe. It holds the upstream connection itself, so the anthropic-ratelimit-unified-* headers it reads are authentic and utilization arrives free on every response. On a rate-limit rejection it benches the account, picks the next one, and replays the request — the session sees one slightly slow response. Replay is only attempted before any body bytes have gone downstream; a failure mid-stream is passed through untouched.

Rotation works by setting ANTHROPIC_AUTH_TOKEN per invocation. Measured against Claude Code 2.1.220, that variable overrides an existing keychain login and CLAUDE_CODE_OAUTH_TOKEN does not.

Security

The vault is a 0600 file. That is real protection against other users on the machine and no protection against anything running as you.

Environment

Variable	Default
CCPOOL_HOME	~/.ccpool
CCPOOL_CLAUDE	claude
CCPOOL_PROBE_BASE	https://api.anthropic.com
CCPOOL_PROBE_MODEL	claude-haiku-4-5-20251001

Tests

python3 -m pytest
./e2e_test.sh