I added real-time activity logging and security scoring to my Claude Code dashboard

I added real-time activity logging and security scoring to my Claude Code dashboard The problem with just seeing costs Knowing how much you spent is useful. The real question is: what is your AI actually doing? Which files did it read? I couldn't answer any of those. So I built the answers in. Claude Code logs everything via hooks. Set it up once in ~/.claude/settings.json: { "hooks": { "PostToolUse": [{ "matcher": ".*", "hooks": [{ "type": "command", "command": "curl -sf -X POST http://localhost:3000/api/actions -H 'Content-Type: application/json' --data-binary @- 2>/dev/null || true" }] }] } } Then open http://localhost:3000/activity. This is the audit layer AI agents have been missing. Scored out of 100. Checks 7 things: Is Bash(sudo *) in your allow list? (-20) Is ~/.ssh/** in your deny list? (-20) Is Bash(curl *) unrestricted? (-15) Are .env files protected? (-15) Is strictMode enabled? (-10) Is Bash(rm *) restricted? (-10) Are hooks configured? (-5) I scored 90/100. What's yours? The point isn't to shame anyone. npm install -g @notenkidev/claude-token-dashboard claude-token-dashboard Open http://localhost:3000 GitHub: https://github.com/notenkitoclient-cpu/claude-token-dashboard This started as a simple token counter. More coming.