One base URL · savings you can prove
Cut your LLM bill. Prove it didn't cost you quality.
Every request routes to the cheapest model that can handle it. We check a sample of those answers against the expensive model, so a lower bill never quietly means worse answers. Every call is also screened for PII and prompt injection, and logged so a security review has nothing to dig for. One base URL, live in 60 seconds, no card.
Start free, no card Open dashboard
Coming from Portkey? It went enterprise inside Palo Alto / Prisma AIRS. RemKey imports your config and grandfathers a free window, so you move in minutes and keep your self-serve workflow. See the Portkey alternative.
Everything a gateway should do, plus the security layer none of them ship
An LLM classifier sends each request to the right model tier at 96% accuracy, versus 33% for keyword rules. Cheap prompts stop paying premium prices.
On a sample of downroutes we also run the premium model and score whether the cheap answer held up. You get a quality-hold number, so the savings come with proof instead of a shrug.
PII detection (email, SSN, phone, card, API key) plus Llama Guard injection screening, fail-closed. Redact or block before the prompt ever leaves.
Every request is hash-chained and Ed25519-signed. Your security team verifies the export offline. This is the layer that clears sign-off.
Agent tool-calls run against a fail-closed allowlist. Blocked calls still land on the audit chain. Nothing else governs agent tools this way.
Anthropic, OpenAI, or OpenRouter keys, encrypted at rest and revocable instantly. First-party preferred, OpenRouter as commodity overflow.
Accepts both Authorization: Bearer and x-api-key. Swap one base URL and your Anthropic or OpenAI code doesn't change.
Savings you can prove, not a shrug
A router can tell you it downrouted. It can't tell you the answer held quality. We sample downroutes, run the premium model in the background, and score the two against each other. The number that comes out the other end is the one you can put in front of a security review.
An audit trail a reviewer can actually verify
Every request becomes a block, hash-chained to the one before it and signed with Ed25519. Your security team verifies the export offline, with nothing to trust but the math.
MCP tool-calls, governed the same way
Most agent frameworks trust MCP tool-calls once a connection is made. RemKey puts a fail-closed allowlist in front of every call: unknown tool or unknown scope is blocked by default, and both allowed and blocked calls are signed onto the same audit chain as everything else.
Why now
AI agents are moving from prototype to production, the fastest-inflecting slice of AI spend in 2026. Every team making that move hits two walls at once. Token bills run away from over-using frontier models on work a cheaper model handles fine. And a security review stalls the launch, because nobody can prove what the agents actually did. Today those are two separate tools, or two things nobody built.
RemKey collapses them into one layer. The routing cuts spend, then proves the cheaper model held quality before it counts a dollar saved. The governance guards, signs, and audits every call, so the gateway that lowers the bill is the one that clears the review. A commodity router can't add the proof. An enterprise suite can't be turned on in a minute. That gap is the opening.
routing accuracy, against 33% for keyword rules
guarded for PII and injection, signed into a tamper-evident chain
from base-URL swap to a governed, audited endpoint
Drop-in in one line
Swap the base URL. Your Anthropic (or OpenAI) code is unchanged. Now every request is classified, guarded, and audited.
# Anthropic SDK / Claude Code: swap the base URL, nothing else
export ANTHROPIC_BASE_URL=https://remkey.ai
export ANTHROPIC_API_KEY=rmk_your_keyFree to route. Pay for proof or governance, never for volume.
Routing and guardrails are free and uncapped, that's the acquisition engine, not a lead-gen trap. You pay only if you want the verified-savings number for yourself (Verified) or a security review is watching (Team). Compare to Portkey.
- Full classifier + guardrails
- MCP governance
- 7-day signed audit
- BYOK providers
- Everything in Free
- Confirmation the cheap model didn't get it wrong
- 30 days of savings & routing history
- Everything in Verified
- 90-day signed audit
- Seats + per-environment policy
- SOC 2 Type II (roadmap)
- HIPAA BAA, dedicated AWS deployment
- Custom retention
- Classifier fine-tune
- Dedicated support
Free is uncapped for real workloads, not a teaser: the backstop is 1M governed requests/mo, then $8/100k, so it only ever touches silent high-volume traffic, never a normal team finding its feet. Token margin only ever applies on the optional pooled lane. We market the dollars you save. We never bill on them.
Start free in 60 seconds
No card. You get a live key and a working dashboard immediately.