Bring your own key (BYOK)
Instead of consuming platform credits, you can plug in your own provider keys:- Anthropic, OpenAI, or Google keys for direct access to that provider’s models
- An OpenRouter gateway key, which can route any model through your OpenRouter account
BYOK keys are stored AES-256-GCM encrypted in the shared account database and work across all surfaces. The raw key is never returned to the client after you save it; only the last four characters are shown.
How requests are routed
When an agent makes a model call, ProductOS picks the route in a fixed order of precedence:- Native key. If you have a key for the model’s own provider (for example, an Anthropic key and a Claude model), the call goes directly to that provider on your key, credit-free.
- Gateway key. If you have an OpenRouter gateway key, any model can route through your gateway, credit-free.
- Platform default. With no matching key, the call runs on platform infrastructure and is metered in credits.
Per-agent model selection
Each agent has a default model configured by platform admins, chosen to suit its work: research, long-form writing, and code generation have different demands, and the defaults reflect that. Under the hood the platform routes across multiple providers, including Anthropic, OpenAI, Google, xAI, and Perplexity models. You can override the model for any individual agent in Settings → Per-Agent Model Overrides. The picker is a searchable combobox grouped by provider:- A ProductOS group with the platform’s model catalog
- One group per connected provider, populated live from that provider’s own model list using your key
Related pages
- Plans and credits: how metered usage is billed
- Security and data: how keys and data are protected