Your AI API keys never leave your browser unencrypted. Apps use them through a secure proxy without ever seeing the raw key.
Every AI app you use today asks for your raw API key. One breach exposes everything.
Most apps store your key in their database with minimal encryption. A single SQL injection exposes every user's keys.
You paste the same key into 5, 10, 20 different apps. Each one is an attack surface. Each one can be breached independently.
Once an app has your key, it can make unlimited requests. There is no per-app budget, no rate limit, no kill switch.
You have no idea which app made which request, how much each app is spending, or whether a key is being misused.
Your keys are encrypted in your browser before they ever touch our servers. Even 1Relay cannot read them.
You enter a master password. It never leaves your browser. Not even a hash is sent to our servers.
Your password is stretched into a 256-bit encryption key using Argon2id (memory-hard, GPU-resistant).
Your API key is encrypted with the derived key using AES-256-GCM. Only ciphertext is stored on our servers.
If our servers are compromised, attackers get ciphertext that is computationally infeasible to decrypt.
When an app needs to call an AI API, here is what happens.
The app calls 1Relay's proxy endpoint instead of OpenAI directly. No API key needed in the request.
1Relay verifies the app's access token, checks budget limits, and confirms rate limits have not been exceeded.
In an isolated Cloudflare Worker, the session key decrypts your API key in memory for milliseconds.
The decrypted key is injected into the provider request, sent, then immediately zeroed from memory.
Built for developers and users who take API key security seriously.
Argon2id + AES-256-GCM in your browser. Your master password never touches a server.
Drop-in widget for apps. Users authorize access, set budgets, and pick providers. Like Plaid Link, but for AI.
See every request by app, provider, and model. Track spending per connection in real time.
Set monthly spending caps per app. Rate limit requests per minute. Automatic cutoff when exceeded.
Generate scoped tokens for AI bots and agents. Separate budget, rate limit, and model access per token.
OpenAI, Anthropic, and Google Gemini supported. Add keys once, use across all connected apps.
Store and manage keys for all major AI platforms in one encrypted vault.
Create your encrypted vault in under a minute. Free during beta. No credit card required.