Why We Built a Zero-Markup BYOK Key Vault for Foundation Models

Why developers should never pay percentage surcharges on raw provider tokens, and how AES-256-GCM authenticated encryption secures vendor credentials in flight.

Many managed AI gateways charge a 5% to 20% percentage markup on raw foundation model token costs. For engineering teams spending $20,000+ monthly on model inference, this markup creates an unnecessary financial penalty.

The Bring Your Own Key (BYOK) Model

AgentMink takes an infrastructure-first approach: Bring Your Own Key (BYOK). When you add your OpenAI, Anthropic, Google, Groq, DeepSeek, or Bedrock API keys to your AgentMink workspace:

  • Zero Platform Markup: You pay your model vendors directly at your contracted tier pricing. AgentMink adds $0.00 to your token costs.
  • AES-256-GCM Encryption: Keys are encrypted at rest using industry-standard authenticated AES-256-GCM cryptography.
  • Dynamic In-Memory Injection: Keys are decrypted strictly in-memory at the edge during upstream dispatch, ensuring your secret credentials never leak into client-side code bundles.

You get all the benefits of intelligent edge routing, automatic failover, and real-time telemetry while preserving your direct vendor discounts and volume commitments.

Related Posts