What is Oh My CPA?

Oh My CPA is a self-hosted control plane and observability console for CLIProxyAPI, an AI gateway that handles protocol adaptation, credential storage, and request proxying for LLM providers. It manages providers, credentials, and configuration while recording usage and cost per request. The software runs as a single Go binary with an embedded React console and local SQLite database. It authenticates using CPA's management key. Capabilities include managing AI providers with credentials, model options, retry policies, and enable switches; OAuth management for multiple providers with quota tracking; client API key creation and revocation; a model catalog from upstream providers; a playground for testing routed models with streaming responses; a plugin store and trusted plugin pages; a dashboard showing metrics like request counts, token rates, cache efficiency, and expenses over time; live routing visualization; request records with full-text search and detail drawers; background usage collection; logs and audit trail; request-time cost snapshots using an OpenRouter price book with custom overrides and channel multipliers; dual-mode configuration editor (forms or YAML); automatic encrypted config backups; encryption at rest for credentials and payloads; audited sensitive actions; offline operation with embedded assets; personalization with four languages, light/dark themes, custom palettes, and fonts; an MCP server for external AI agents; and a model playground. Deployment options include Docker Compose (with or alongside CPA), native executables for macOS, Windows, Linux, and FreeBSD (amd64/arm64), and building from source. The console listens on port 8080 by default and serves under the /omc/ sub-path. It requires CPA v8.0.0 or later.

Should you self-host Oh My CPA?

Oh My CPA scores 49/100 on selfhost.directory (how scoring works) and ranks #15 of 19 in API Management. It has 276 GitHub stars.

It shipped 11 stable releases in the past year. The latest, v0.3.15, came out on 28 October 2026. New versions land roughly every 1 days.

Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is MIT-licensed and written mostly in Typescript.

Its closest alternative on selfhost.directory is Kong (81/100, 44 314 stars). It scores higher overall, so compare the two before you pick. See Oh My CPA vs Kong side by side.

Features

AI Provider Management
Background Usage Collection
Client API Key Management
Custom & Linked Pricing
Live Routing Visualization
Logs and Audit Trail
Model catalog
Model Playground
Model Usage Panels
OAuth credential management
Observability dashboard
OpenRouter Price Book
Plugin Store & Trusted Plugin Pages
Request Records with Full-Text Search
Request-Time Cost Snapshots

How to install Oh My CPA

Install Oh My CPA with Docker Compose

Environment variables

CPA_MANAGEMENT_KEY, OMCPA_MASTER_KEY, OMCPA_CPA_BASE_URL, OMCPA_CPA_MANAGEMENT_KEY, OMCPA_DATA_DIR

services: cli-proxy-api: image: eceasy/cli-proxy-api:latest restart: unless-stopped ports: - "127.0.0.1:8317:8317" environment: MANAGEMENT_PASSWORD: ${CPA_MANAGEMENT_KEY:?} volumes: - ./config.yaml:/CLIProxyAPI/config.yaml - ./auths:/root/.cli-proxy-api - ./logs:/CLIProxyAPI/logs - ./plugins:/CLIProxyAPI/plugins

oh-my-cpa: image: wiziscool/oh-my-cpa:latest restart: unless-stopped depends_on: - cli-proxy-api ports: - "127.0.0.1:8080:8080" environment: OMCPA_CPA_BASE_URL: http://cli-proxy-api:8317 OMCPA_CPA_MANAGEMENT_KEY: ${CPA_MANAGEMENT_KEY:?} OMCPA_MASTER_KEY: ${OMCPA_MASTER_KEY:?} OMCPA_DATA_DIR: /data volumes: - oh-my-cpa-data:/data

oh-my-cpa-updater: image: wiziscool/oh-my-cpa:latest restart: unless-stopped command: ["updater", "serve"] user: "0:0" read_only: true cap_drop: [ALL] volumes: - /var/run/docker.sock:/var/run/docker.sock

volumes: oh-my-cpa-data:

Requires Docker Engine with Compose plugin and CLIProxyAPI v8.0.0+. Generates CPA_MANAGEMENT_KEY and OMCPA_MASTER_KEY via openssl.

Install Oh My CPA with Linux

Environment variables

OMCPA_MASTER_KEY, OMCPA_CPA_MANAGEMENT_KEY, OMCPA_CPA_BASE_URL, TZ

VERSION=MAJOR.MINOR.PATCH OS=linux ARCH=amd64 ASSET="oh-my-cpa_${VERSION}${OS}${ARCH}.tar.gz" mkdir -p oh-my-cpa && cd oh-my-cpa curl -fLO "https://github.com/WizisCool/oh-my-cpa/releases/download/v${VERSION}/${ASSET}" curl -fLO "https://github.com/WizisCool/oh-my-cpa/releases/download/v${VERSION}/checksums.txt" grep -F " $ASSET" checksums.txt | sha256sum -c - tar -xzf "$ASSET" cp -n .env.example .env chmod 600 .env

Set OMCPA_MASTER_KEY, OMCPA_CPA_MANAGEMENT_KEY, OMCPA_CPA_BASE_URL in .env

./oh-my-cpa

Available for Darwin (macOS), Windows, Linux, FreeBSD on amd64/arm64. No Go, Node, or Docker required. CPA must be installed separately. Verify SHA-256 checksum against release's checksums.txt.

Install Oh My CPA with Build from Source

Environment variables

OMCPA_MASTER_KEY, OMCPA_CPA_MANAGEMENT_KEY, OMCPA_CPA_BASE_URL

git clone https://github.com/WizisCool/oh-my-cpa.git cd oh-my-cpa pnpm install --frozen-lockfile cp .env.example .env

Set OMCPA_MASTER_KEY, OMCPA_CPA_MANAGEMENT_KEY, OMCPA_CPA_BASE_URL in .env

pnpm build go build -trimpath -o bin/oh-my-cpa ./cmd/oh-my-cpa ./bin/oh-my-cpa

Requires Go 1.25+, Node.js 22+, pnpm 11+, and a running CPA. Untagged builds report as v0.1.0-dev.

How to configure Oh My CPA

OMCPA_BASE_PATH/omcSub-path the console is served under. omc, /omc/ and /omc are equivalent; / serves it at the root
Sub-path the console is served under. omc, /omc/ and /omc are equivalent; / serves it at the root
OMCPA_CPA_BASE_URLCPA's address, for example http://127.0.0.1:8317
CPA's address, for example http://127.0.0.1:8317
OMCPA_CPA_MANAGEMENT_KEYCPA's plaintext management key. Also the console's sign-in password
CPA's plaintext management key. Also the console's sign-in password
OMCPA_CPA_REPOrouter-for-me/CLIProxyAPIowner/name the checks read, for a fork
owner/name the checks read, for a fork
OMCPA_CPA_TLS_SKIP_VERIFYfalseSkip certificate verification when CPA uses a private certificate
Skip certificate verification when CPA uses a private certificate
values: true, false
OMCPA_CPA_USAGE_ADDRhost and port of OMCPA_CPA_BASE_URLhost:port of CPA's usage stream
host:port of CPA's usage stream
OMCPA_DATA_DIR./dataDirectory holding oh-my-cpa.db. Local disk only
Directory holding oh-my-cpa.db. Local disk only
OMCPA_DEMO_MODEfalseServe the console from the built-in fixture
Serve the console from the built-in fixture
values: true, false
OMCPA_ENV_FILENames another .env file to read
Names another .env file to read
OMCPA_GOOGLE_FONTS_URLhttps://fonts.googleapis.comThe Google Fonts stylesheet API the font library installs from, or a compatible mirror
The Google Fonts stylesheet API the font library installs from, or a compatible mirror
OMCPA_LISTEN_ADDR:8080Listen address
Listen address
OMCPA_MASTER_KEYAt-rest encryption key: a 64-character hex key (openssl rand -hex 32) or at least 32 bytes
At-rest encryption key: a 64-character hex key (openssl rand -hex 32) or at least 32 bytes
OMCPA_OMC_REPOWizisCool/oh-my-cpaowner/name the checks read, for a fork
owner/name the checks read, for a fork
OMCPA_PUBLIC_URLThe address browsers use. An https:// value marks the session cookie Secure
The address browsers use. An https:// value marks the session cookie Secure
OMCPA_REQUEST_TIMEOUT15sTimeout for ordinary CPA management calls
Timeout for ordinary CPA management calls
OMCPA_TRUSTED_PROXY_CIDRSComma-separated CIDRs of reverse proxies whose forwarding headers may be trusted for login throttling
Comma-separated CIDRs of reverse proxies whose forwarding headers may be trusted for login throttling
OMCPA_UPDATE_CHECK_ENABLEDtrueThe six-hourly release sweep
The six-hourly release sweep
values: true, false
OMCPA_UPDATE_CHECK_ON_PAGE_LOADtrueThe check the System Information page makes when opened
The check the System Information page makes when opened
values: true, false
OMCPA_UPDATER_ENABLEDtruefalse makes the console ignore an updater and offer no update action
false makes the console ignore an updater and offer no update action
values: true, false
OMCPA_UPDATER_URLhttp://oh-my-cpa-updater:8090Where the console looks for the updater
Where the console looks for the updater
OMCPA_USAGE_BATCH_SIZE1000Records read per poll (1-10000)
Records read per poll (1-10000)
OMCPA_USAGE_IDLE_INTERVAL1sFirst wait after an empty poll
First wait after an empty poll
OMCPA_USAGE_INBOX_RETENTION_DAYS7Days a captured payload is kept after it was decoded into a request record, 0 to keep it as long as the record
Days a captured payload is kept after it was decoded into a request record, 0 to keep it as long as the record
OMCPA_USAGE_INGEST_MODEautoUsage collection mode
Usage collection mode
values: auto, subscribe, resp_pull, http_pull, off
OMCPA_USAGE_MAX_IDLE_INTERVAL10sCeiling the idle backoff grows to
Ceiling the idle backoff grows to
OMCPA_USAGE_RETENTION_DAYS90Days of request records kept, 0 to keep them all
Days of request records kept, 0 to keep them all
OMCPA_VERSIONembedded stable tag; v0.1.0-dev for untagged source buildsOptional display/User-Agent version override; does not change the installed build
Optional display/User-Agent version override; does not change the installed build
TZsystem zoneServer calendar
Server calendar