Every request, governed in flight
Apps use virtual keys. KeyC checks budget and rules, swaps the encrypted provider key, forwards the call, and meters cost — in milliseconds.
Six things your provider dashboard won't do
Governance built for production AI — not a billing afterthought.
Virtual keys
One vault. Infinite governed copies.
Encrypted provider keys stay put. Every developer, client, or cron job gets a kc- key with its own rules.
Hard budgets
Stop at the limit — not at the invoice.
Monthly caps enforced per request. HTTP 402 when spent — SDK-friendly, graceful, predictable.
Per-key cost tracking
Every dollar has a name on it.
Name keys by client or project, watch live burn, and reconcile spend without guessing.
Instant revoke
Offboard in one click.
Revoked keys die everywhere in about a second. No rotation ceremony, no redeploy.
Smart alerts
Slack at 80%. Block at 100%.
Threshold notifications that respect on-call — actionable, not noisy.
Private by design
We never store prompts.
Metadata-only metering. Your completions pass through memory and leave no trace in our logs.