Does AIbroker store my prompts?

No. Only metadata is logged (provider, model, capability, tokens, cost, latency, status). Message bodies pass through and are forgotten.

What happens if all keys for a provider fail?

The capability chain falls back to the next provider, rotating keys until one answers. Chat runs as an async job (POST /v1/jobs, poll GET /v1/jobs/{id}), so a slow provider never times the caller out.

How is the dashboard secured?

Telegram Login Widget signs in only OWNER_TELEGRAM_ID. Session cookie is HMAC-signed. An X-Admin-Key header is the fallback for ops scripts.

Can I rotate provider tokens?

Yes. Add a new key via dashboard or POST /admin/keys, then disable the old one. Active leases finish; new ones use the new key.

AIbroker — one API key, every LLM provider · free-first routing, cost guard, self-hosted

AIbroker

~$0

100%

Proxy

curl -X POST "https://aib.zapleo.com/v1/jobs?capability=chat:fast" \
  -H "X-Project-Key: aib_prj_..." \
  -d '{ "messages": [{"role":"user","content":"hi"}] }'
# → {"job_id": 123, "poll_url": "/v1/jobs/123"}
curl https://aib.zapleo.com/v1/jobs/123 -H "X-Project-Key: aib_prj_..."

curl -X POST https://aib.zapleo.com/v1/embed \
  -H "X-Project-Key: aib_prj_..." \
  -d '{ "texts": ["hello world"] }'

cerebras free

groq free

gemini free

mistral free

cohere free

openrouter free

voyage free

sambanova free

nvidia nim free

cloudflare free

zai free

deepseek paid

anthropic paid

openai paid

POST/v1/jobschat · async

GET/v1/jobs/{id}poll

POST/v1/embedsync

POST/v1/transcribesync

GET/admin/projectslist

POST/admin/projectscreate

GET/admin/keyslist

POST/admin/keyscreate

POST/admin/keys/{id}/disabledisable

GET/healthzliveness

GET/v1/healthprovider health

GET/docsSwagger

GET/openapi.jsonspec

GET/loginTG widget

GET/dashboardowner only

$0/mo