AI Gateway · Bring your own keys

One gateway for
every AI model.

Route every request through one OpenAI-compatible endpoint. Keep your own provider keys, switch models by rule, and see the exact cost of everything you send.

6 providers1 endpointYour own keysOpenAI-compatible
from openai import OpenAI
client = OpenAI(
base_url="https://your-host/v1", # the only change
api_key="vk_live_…",
)
resp = client.chat.completions.create(
model="claude-sonnet-5",
messages=[{"role": "user", "content": "Ship it."}],
)
Gateway streamsample

claude-sonnet-5

Anthropic

200312ms

llama-3.3-70b

Groq

downshift94ms

gpt-4o

OpenAI

503

claude-sonnet-5

Anthropic

fallback288ms

gemini-2.5-pro

Gemini

200401ms

mistral-large

Mistral

200356ms

Providers

6

Endpoint

1

Dropped

0

Six providers, one interface

OpenAIgpt-4o · o3
Anthropicclaude-sonnet-5
Gemini2.5 pro · flash
Groqllama-3.3-70b
Mistralmistral-large
OpenRouterunified
OpenAIgpt-4o · o3
Anthropicclaude-sonnet-5
Gemini2.5 pro · flash
Groqllama-3.3-70b
Mistralmistral-large
OpenRouterunified

The request path

Watch a request move through the gateway.

Authentication, paywall, rate limits, routing and BYOK decryption — every guardrail on the way to the model, with automatic fallback when a provider fails.

One call in. Every guardrail. The right model out.

streaming · 0 dropped

Client

POST /v1/chat · Bearer vk_live_…

Gateway

Authenticatevk_ key · org lookup
Paywallsubscription active
Rate limitRPS · quota · budget
Routefirst-match-wins
Decrypt BYOKAES-256 · in-memory

Providers

OpenAI

gpt-4o

Anthropic

claude-sonnet-5

Gemini

gemini-2.5-pro

Groq

llama-3.3-70b

Mistral

mistral-large

OpenRouter

auto

Gateway trace

01 POST /v1/chat/completionsrouting rule matched → claude-sonnet-5

Getting started

Live in four steps.

1

Add your provider keys

Paste the OpenAI, Anthropic or Gemini keys you already have. They are envelope-encrypted the instant they land.

2

Create a gateway key

Generate a vk_live_… key for your app. Your provider keys never leave VaultAPI.

3

Point one base URL

Change your SDK's base URL. Every request now flows through auth, routing, fallbacks and logging — no rewrites.

4

Watch and tune

Read per-request logs and spend, then add routing rules to move cheap-enough prompts to cheaper models.

BYOK security

Your keys. Encrypted before they ever rest.

VaultAPI is bring-your-own-key by design. Every provider secret is envelope-encrypted the moment it arrives and decrypted in memory only for the instant a request needs it — so a database leak reveals nothing.

01

You paste a provider key

master key

sk-… never leaves the request body in plaintext — it is wrapped the moment it lands.

02

Envelope-encrypted at rest

wrapped DEK

A per-key DEK is sealed with AES-256-GCM under a versioned master key.

03

Decrypted in memory only

provider key

Unwrapped for the exact instant a request needs it — never logged, never written to disk.

Provider keys

zero-knowledge

Anthropic

sk-••••••••••••····3f9a

AES-256-GCM

OpenAI

sk-••••••••••••····a12c

AES-256-GCM

Groq

sk-••••••••••••····77e1

AES-256-GCM

Encryption envelope

master key
wrapped DEK
provider key

Pricing

Start on a trial. Scale when you're ready.

Every plan starts with a 3-day free trial. Pay by card, UPI or netbanking via Razorpay.

Solo builders

Developer

799/month

  • 1 workspace
  • All 6 providers
  • Routing + fallbacks
View pricing

Growing teams

Startup

3,299/month

  • Everything in Developer
  • Budgets & alerts
  • Team roles + audit
View pricing

At scale

Enterprise

12,499/month

  • SSO-ready
  • Priority routing
  • Custom retention
View pricing