Glossary

What is bring your own key (BYOK)?

Bring your own key (BYOK) means using a software product with your own API key for an underlying service, such as an AI model provider, instead of paying the product for usage. You pay the provider directly at their prices, with no markup. Many AI tools and self-hosted apps support it.

By the AgentLaunch team · Updated November 2026 · Also called BYOK, BYO API key

How it changes things

Bundled usage BYOK
Who pays the model provider The product You
Usage limits Product's plan Your provider limits
Model choice Product's choice Often yours
Data path Via the product Often direct to provider

Using keys safely

  • Create a separate key per tool so you can revoke one without breaking others.
  • Set spend limits in the provider's dashboard.
  • Store keys in environment variables or a secrets manager.
  • Never paste keys into chats, tickets or public repositories.
  • Rotate keys if exposed.

Example

A founder uses a self-hosted tool with her own model API key and a monthly spend cap. She sees exactly what each task costs and switches models when a cheaper one does the job.

FAQ

Is BYOK cheaper?

Usually for heavy users, since there's no markup; light users may prefer bundled plans.

Is it safe to give a tool my API key?

Use separate, limited keys and trusted tools; revoke if unsure.

What happens if my key leaks?

Revoke it immediately and create a new one; check usage for abuse.

Sources

  1. OpenAI: Best practices for API key safety
  2. Anthropic: API keys and workspaces

All glossary terms · AI agent and automation terms