Your keys. Our router.
Bring your own upstream credentials for OpenAI, Anthropic, Google, xAI, Fireworks, Together, Groq or anything else. Keep your negotiated pricing and residency — pay us nothing for the routing on the free tier.
Zero markup on tokens
The router forwards to your provider account. You get invoiced by the provider at your negotiated rate — we take nothing on top.
Keep your contracts
Enterprise agreements, DPAs, zero-retention terms and regional pinning all continue to apply — the router is a transport.
Use existing credits
Consume Anthropic, Azure and Google credits inside the same router without duplicating spend.
Hybrid billing
Mix BYOK and managed providers. Route auto:quality to your Claude account and auto:cost to our pooled DeepSeek — one policy.
Envelope encryption
Provider keys are sealed with per-org KMS and only decrypted inside the router at request time. Never logged, never surfaced.
Rotate anytime
Rotate upstream keys through the dashboard or API. The router picks up the new key on the next request.
POST /v1/provider-keys
{
"provider": "anthropic",
"credential": "sk-ant-...",
"scope": { "keys": ["agent-prod-router"] },
"region": "us-east"
}POST /v1/chat/completions
{
"model": "anthropic/claude-4.5-sonnet",
"messages": [...],
"route": { "byok": true }
}Do I still get analytics and audit logs on BYOK traffic?+
Yes. The router logs tokens, latency, cost, cache status, guardrail signals — same metadata as managed traffic.
What providers are supported?+
OpenAI, Anthropic, Google (Vertex + Gemini API), xAI, Groq, Cerebras, SambaNova, Fireworks, Together, Deepinfra, Azure OpenAI. Custom OpenAI-compatible endpoints on request.
Can I run BYOK-only?+
Yes. Free tier gives you the router, caching, MCP, guardrails and analytics on top of your own provider accounts, with no per-token markup.