BYOK: bring your own keys to every provider

Bring Your Own Key (BYOK) lets you attach your own upstream provider keys to your AnyRouter account. When a request matches a model one of your keys can serve, AnyRouter forwards the call on your key and you pay the provider directly at their list price. You keep every AnyRouter feature — one unified API, logs, analytics, presets, routing, app attribution — on top of accounts you already have.

AnyRouter exposes BYOK for more than 60 providers: OpenAI, Anthropic, Google AI Studio, Groq, NVIDIA NIM, Z.ai, Ollama Cloud, and enterprise endpoints like Azure OpenAI, Bedrock, and Vertex AI. The full provider-by-provider setup guide lives at /docs/features/byok-providers.

No. AnyRouter charges nothing for BYOK traffic — no per-request fee, no surcharge, no minimum. Requests served through your own provider keys never deduct AnyRouter credits, on any plan. You only ever pay your provider. If every BYOK key for a provider is exhausted, requests can optionally fall through to pay-as-you-go credits so work keeps flowing.

• $0 markup on your own keys — you pay the provider, nothing to AnyRouter.
• Keep your own rate limits — you route on your account's quota, not a shared pool.
• Automatic failover — add more than one key per provider and a burned key (401/429) is quarantined while the next takes over.
• Load-balancing strategies — Fallback, Round Robin, Weighted, or Random per provider.
• Per-key budgets — cap monthly spend on any key so a runaway loop can't drain a provider account.

Once you've added keys, three built-in ids route across all of them without naming a specific model — and because they only ever use your own keys, they never spend AnyRouter credits:

curl https://anyrouter.dev/api/v1/chat/completions \
-H "Authorization: Bearer $ANYROUTER_API_KEY" \
-H "Content-Type: application/json" \
-d '{
  "model": "anyrouter/coding",
  "messages": [{ "role": "user", "content": "Refactor this function" }]
}'

Most provider quota sits idle most of the time. Flip the donate toggle on an eligible BYOK key and every request the shared pool routes through it adds up to 8% of that request's notional token cost to a pending balance you can claim anytime. Donating one working key also auto-grants the Go plan for free, for as long as that key stays active — so you skip the $2/mo. You keep first call on your own key; the pool only ever uses spare capacity, and you can opt out instantly.

• Earn up to 8% back on every token a donated key serves — 5% on Go, 8% on Pro/Max, capped at $1 per key per UTC day.
• Eligibility is about routing, not ToS — the toggle appears once AnyRouter can route to that provider. You're responsible for confirming your provider's terms permit sharing the key.
• Explicit, recorded consent — nothing is enrolled automatically.
• 429 auto-pause and instant opt-out from the dashboard.

See the pool in numbers at /pool, donate at /donate, and read the reward mechanics in /blog/shared-key-pool.

BYOK keys are sensitive credentials and AnyRouter treats them that way. They're encrypted at rest with a per-row salt, so a leak of one key's ciphertext never weakens another. They're write-only in the UI — after save only an alias and a masked identifier are shown. They're stripped from request and response logs, validated live on save (then the validation response is discarded), and only ever sent to the upstream provider they're scoped to.