If you already pay OpenAI, Anthropic, or Google directly, you should not pay full retail again to use those models through ToRun. Bring Your Own Key (BYOK) is how that works.

How it works

Add a provider API key in Settings → BYOK Vault. The key is encrypted at rest immediately; the plaintext never appears in the UI again and never leaves the backend. From then on, eligible requests to that provider route through your key — the provider bills you at their prices, and ToRun charges only its service margin for the routing, tooling, memory, and billing layers around the call.

Three tiers

BYOK pricing is tiered by how much of the platform's machinery a call uses. A raw pass-through costs less than a call that uses ToRun-side tools, memory, and orchestration. The tier applied to each call is written into its billing record — you can audit every line.

What does not change

• Routing — capability-first model selection works the same; your key is simply preferred when the chosen model belongs to that provider.
• The ledger — every BYOK call still produces a billing record with the tier applied, so the math is checkable.
• Fallbacks — if your key hits a rate limit, you can fall back to platform routing instead of stalling.

BYOK is the honest deal: pay the provider what the provider charges, pay us for what we actually add.