Cloud providers have no spending caps — and neither do coding agents. One runaway loop can drain your account or burn thousands in tokens overnight. Kill Switch auto-kills runaway cloud services and caps runaway coding agents before the bill arrives. Cloudflare, GCP, AWS — and Claude Code, Cursor, or any agent.
Every 5 minutes, queries provider APIs for usage, costs, and anomalies across all connected cloud accounts.
Compares per-worker usage against your configured thresholds. Catches feedback loops, runaway DOs, and request spikes.
Removes routes and custom domains from offending workers. Code stays intact. Pages PagerDuty until someone acknowledges.
Catch runaway Workers and Durable Objects before they rack up millions of requests.
Stop runaway Cloud Run containers and GCE instances from spiraling your billing.
Shut down Lambda feedback loops and EC2 sprawl before your bill hits five figures.
Plus financial kill switches for RunPod · Redis · MongoDB · OpenAI · Anthropic · xAI · Replicate · Snowflake · Vercel · Datadog · Neon · Neo4j
Removes routes, not code. Your worker stays intact — just stops receiving traffic. Re-enable with a single deploy.
Critical alerts that call your phone until someone acknowledges. No more waking up to surprise bills.
Free alerting via Discord webhooks or Slack incoming webhooks. Rich embeds with usage details.
Mark critical workers as protected. They'll trigger alerts but never get disconnected automatically.
Set limits for DO requests, wall-time hours, and Worker request volume. Tune based on your normal usage.
Single TypeScript file. No npm packages beyond Wrangler. Deploys in under a minute.
Reads the live session, prices real token usage, warns at your soft cap and blocks the next tool call at the hard cap. Fails open on any error — a guard bug never bricks your session.
Point Cursor, Aider, or any script at the local metering proxy. At the cap it returns HTTP 402 — the API simply stops answering. A wall the agent can’t argue past.
The escape hatch lives outside the agent loop: ks guard pause, or a single file the agent can’t reach. The agent can hit the wall — it can’t move it.
npm i -g @kill-switch/cli
ks guard install # protect Claude Code
ks guard config --session-hard 30 --daily-hard 150Sign up, connect your cloud credentials, set your thresholds. Done.
Self-host the open source core or use our managed platform.
Either way, you're protected in under 5 minutes.