Byoky

Michael Lodzik

About this app

Byoky is an encrypted wallet for your AI API keys. Store credentials for Claude, ChatGPT, Gemini, and
12 more providers in one place — then let any compatible app use them without ever seeing the key.

WHY BYOKY
Every AI app asks for your OpenAI key, your Anthropic key, your Gemini key — or charges a monthly
subscription on top of what you already pay the model provider. Byoky flips that: bring your own key,
use it everywhere.

HOW IT WORKS
1. Set a master password — your vault is encrypted on-device with AES-256-GCM.
2. Add your API keys or a Claude Pro setup token.
3. Scan a QR code from any browser, any device. Approve access in one tap — keys stay in the wallet.

FEATURES
• QR pairing — pair any browser on any device via relay, no extension required
• 15 AI providers — Anthropic, OpenAI, Gemini, Mistral, Cohere, xAI, DeepSeek, Perplexity, Groq,
Together, Fireworks, OpenRouter, Azure OpenAI, and more
• Setup tokens — use your Claude Pro or Max subscription, not only pay-per-use API keys
• Apps tab — install curated mini-apps that run inside the wallet, sandboxed
• Token Pool — discover free token gifts shared by the community, or publish your own
• Token gifts — share access with friends or teammates without sharing the key; set budgets,
expirations, and revoke anytime
• Alias Groups — bucket apps by purpose (Personal, Work, Side Project) and pin each group to a
specific key
• Cross-provider routing — drag an app from a Claude group into a GPT group and the wallet
transparently translates the request body and streaming response
• Full audit log — every request timestamped by app, provider, and status
• Spending caps — per-app and per-provider token limits enforced in the proxy
• Encrypted export/import — back up the vault as a .byoky file
• Local-first — no cloud account, no telemetry, no tracking

SECURITY
• AES-256-GCM encryption with PBKDF2 key derivation (600,000 iterations) via Web Crypto API
• Master password never leaves the device
• Keys never leave the wallet — apps only receive short-lived session tokens
• Open-source under MIT license — read the code on GitHub