English · 简体中文

Claude Science Proxy (CSP)

Run Claude Science on the model APIs you already pay for — DeepSeek, GLM, Kimi, MiniMax, OpenRouter, or any Anthropic- / OpenAI-compatible endpoint — while keeping Science’s agent workflow: tool use, code execution, and skills (where supported).

CSP is a macOS desktop app (Tauri) that:

1. Starts Claude Science in an isolated sandbox
2. Prepares a local launch ticket (no copy of your real Claude login)
3. Routes inference through a local proxy on 127.0.0.1
4. Verifies API keys before switching the active profile
5. Manages local Skills and MCP connectors (stdio + remote), deploying enabled ones into the sandbox on launch

v2.2.1 — Audit hardening: one-click stop fail-closed, identity-aware sandbox status, platter credential fail-closed, key-rotation bak cleanup, SSH Include quotes, upstream error redaction; virtual-login cleanup. See Changelog.

Platform: macOS Apple Silicon today. The app is not notarized yet; on first launch, right-click → Open.

Download latest release · Changelog · Report a bug

---

Why CSP exists

Claude Science is Anthropic’s research-oriented agent app (literature review, data analysis, plotting, coding, writing). By default it expects a Claude subscription and Anthropic-hosted inference.

Claude Science Proxy is a local control plane:

Layer	What CSP does
Sandbox	Separate HOME, ports, and data under ~/.csp/sandbox; SSH config Include bridge to real ~/.ssh/config (v2.2.0+)
Launch ticket	Locally forged OAuth-shaped ticket so Science can start without your real Claude credentials
Proxy	Forwards /v1/messages (and related) to your chosen provider
Translation	Anthropic ↔ OpenAI Chat / Responses when the upstream is not native Anthropic

Claude Science (sandbox)
        │
        ▼
  CSP local proxy  (127.0.0.1:<port>/<secret>)
        │
        ▼
  DeepSeek / GLM / Kimi / MiniMax / OpenRouter / your endpoint

---

Features

For everyday use

• Multiple profiles — different keys, models, or relay URLs; only one active at a time
• Verify before switch — invalid keys are rejected; CSP does not silently activate a broken profile
• One-click start — launches proxy, prepares sandbox, opens Science
• Real model names in Science’s selector (not a generic claude / opus label)
• Multi-model per profile — virtual registry maps up to 8 claude-* shell IDs to real upstream models; strict routing rejects unknown shells when platter is active (v2.2.0+)
• Local Skills manager — create; import from folder, zip, or URL; enable/disable; scan-and-import from other agents (searchable list; already-owned skills keep-by-default); sync Science skill library (harvest edits, full-screen preview); built-in csp-environment handbook; enabled Skills deploy into the sandbox on launch
• Local MCP manager — add/edit stdio or remote (sse / streamable_http) connectors; scan-and-import from other AI clients with JSON/TOML config preview; enabled connectors deploy into the sandbox on launch
• Built-in web-search MCP — no key required for the free path: GENERAL (csp_web_search → DuckDuckGo IA/Lite) and LITERATURE (search_literature → Wikipedia / Crossref / arXiv / PubMed); optional Brave/Serper/Tavily keys; Start auto-grants search providers plus a curated common-egress set; extras via MCP 待批准出网域名 or ~/.csp/network-allowlist.json

For power users

• Native Anthropic-compatible passthrough (DeepSeek, Kimi, MiniMax, GLM, …)
• Custom Anthropic relay URLs
• Custom OpenAI Chat and OpenAI Responses base roots (proxy adds /chat/completions, /responses, /models)
• Read-only capability catalog for known provider / Science version boundaries
• Local config: ~/.csp/CSP.json (0600); logs under ~/.csp/logs/; MCP inventory at ~/.csp/mcp/inventory.json (0600)

---

Quick start

You need

• Claude Science installed
• macOS on Apple Silicon
• A third-party API key
• python3 on PATH (proxy runtime; moving to Rust is planned)

Steps

1. Download Claude Science Proxy_*.dmg from Releases.
2. Drag the app to Applications. If Gatekeeper blocks it, right-click → Open.
3. Click + New, pick a provider, enter your API key, models (multi-select), and base_url if needed.
4. Click Create, then select the profile card to make it active.
5. Click Start Claude Science after key verification succeeds.
6. Science opens in the sandbox; the model picker shows the names you configured.

---

Supported providers

Provider	Integration	Notes
DeepSeek	Native Anthropic API	Default; best effort on thinking, tools, streaming
GLM (Zhipu)	Anthropic-compatible	Editable default URL
Kimi / Moonshot	Anthropic-compatible	Editable default URL
MiniMax	Anthropic-compatible	Editable default URL
Xiaomi MiMo	Anthropic-compatible	Plan / regional endpoints supported
OpenRouter	Anthropic-compatible aggregate	Pick or type a model
Custom Anthropic	Your /anthropic or compatible URL	Private gateways, relays
Custom OpenAI	OpenAI Chat base root	Proxy appends /chat/completions
Custom OpenAI Responses	OpenAI Responses base root	Proxy appends /responses

Use Custom Anthropic for /anthropic URLs. Use Custom OpenAI only for OpenAI-shaped roots like https://example.com/v1.

OpenAI-compatible providers are configured through Custom OpenAI / Custom OpenAI Responses.

---

Virtual model registry

Science only accepts model IDs starting with claude-. CSP allocates up to eight shell IDs (3 in the main list + 5 under “More models”) and maps each shell to a real upstream model. Display names are sanitized for Science’s V2_ filter (e.g. glm-5-turbo → glm-5.turbo in the UI; outbound requests still use the real ID).

---

How CSP protects your real Claude account

• Does not copy, read, modify, or delete real Claude OAuth tokens, account state, or conversation data
• May read-only clone runtime binaries (bin, conda, runtime, seed-assets) from ~/.claude-science on first sandbox setup — not credentials
• Stores third-party keys only in ~/.csp/CSP.json; passes them via environment variables to the proxy
• Proxy listens on loopback only and strips Science’s Authorization / x-api-key before injecting your provider key

---

Current limitations

• Anthropic-hosted cloud features (remote/hosted MCP, directory connectors) and some cloud-only capabilities are unavailable or fast-fail — local stdio and custom remote MCP connectors are supported via the MCP tab
• Hosted top-level web_search / web_fetch are unavailable under CSP virtual login — use the built-in web-search MCP: host.mcp("web-search", "csp_web_search" | "search_literature" | "fetch_url", …) and read data["results"]
• Provider quality varies for tools, long context, thinking, images, and streaming
• OpenAI-compatible profiles (openai-custom / openai-responses, including GLM on OpenAI Chat URLs): long sessions and Resume are supported since v1.7.1 (counted SSE keepalives); upstream 429 / fair-use rate limits and very slow responses can still cause retries — see known issues
• Not Apple-notarized — manual approval on first open
• Proxy still requires python3 today

Details: docs/known-issues.md

---

Contributing

Issues and PRs welcome. Start with CONTRIBUTING.md, then read AGENT.md (safety rules) and docs/DEVELOPMENT.md. Security reports: SECURITY.md.

bash test/run_all.sh
(cd desktop/src-tauri && cargo test)   # if you touch Rust

Real-machine tests: test/docs/REAL_MACHINE_TEST.md — never touch real ~/.claude-science or port 8765 without the guard scripts.

Support: GitHub Issues only — no WeChat/QQ/DM. Do not paste API keys in issues.

---

Development

cd desktop && npm install && npm run tauri dev

Further reading: desktop/README.md · docs/DEVELOPMENT.md

---

Disclaimer

For personal learning and research. Not affiliated with Anthropic. Inference goes to your third-party providers. The local launch ticket is not an Anthropic credential. Software is provided as is, without warranty. See full text in the Chinese README or project docs.

License

MIT