Pricing
Predictable costs at every scale.
Start with a 3-day free trial — no card required. Bring your own provider keys, route everything through one endpoint, and pay for the gateway only.
Estimate Your Monthly Volume
Developer
Billed annually
10 Million Tokens
5 API Keys
- OpenAI, Anthropic & Gemini Gateways
- Exact Tiktoken & Anthropic token counter
- AES-256 GCM ENCRYPTED BYOK Vault
- Smart Model Switcher Rules
- 30-day Request Log retention
- Community & Email Support
Startup
Billed annually
100 Million Tokens
50 API Keys
- Everything in Developer
- All 6 Providers (incl. Groq, Mistral, OpenRouter)
- Smart Savings AI Advisor
- Custom Cross-Provider Fallback chains
- Budget Alert Triggers (50/80/100% hard-stop)
- 90-day Request Log retention & CSV export
- Priority 24/7 Slack & Email Support
Enterprise
Billed annually
Unlimited Tokens
Unlimited Keys
- Everything in Startup
- Custom SLA & Dedicated Infrastructure
- Zero Data Retention (ZDR) Privacy pipeline
- Role-Based Access Control (RBAC) & SAML SSO
- Custom Gateway Rules Engine
- Dedicated Solutions Architect
Billing
Paid through Razorpay.
Subscriptions are handled by Razorpay — UPI, credit and debit cards, and netbanking. Upgrade, downgrade or cancel at any time with no lock-in.
Supported
UPI
Supported
Cards
Supported
Netbanking
Supported
Auto-renew
Questions
Before you pick a plan.
What happens after the trial?
The 3-day trial starts the moment you create a workspace — no card required. When it ends, pick a plan to keep routing; your keys and settings stay exactly as you left them.
Do I pay for tokens on top of the plan?
No. You bring your own provider keys, so model usage is billed to you directly by OpenAI, Anthropic, Google and the rest. VaultAPI charges only for the gateway.
Can I change plans later?
Yes — upgrade or downgrade at any time. Changes take effect on your next billing cycle, and there is no lock-in.
Where are my provider keys stored?
Envelope-encrypted with AES-256-GCM under a versioned master key, decrypted in memory only for the instant a request needs them. They are never logged or written to disk in plaintext.