Bring Your Own Key (BYOK)

DevSpeak supports Bring Your Own Key (BYOK) — a feature that lets you connect your own LLM API credentials to use custom models for translation.

Supported Providers

| Provider | Tier Requirement | Configuration |

| ------------------------ | --------------------------- | --------------------------- |

| OpenAI | Free, Developer, Enterprise | API key + optional base URL |

| Anthropic | Free, Developer, Enterprise | API key |

| OpenAI-Compatible | Free, Developer, Enterprise | API key + custom endpoint |

| Managed Gemini (default) | All tiers | No configuration needed |

How BYOK Works

1. Navigate to Settings → LLM Provider.

2. Select your provider from the dropdown.

3. Enter your API key (stored encrypted server-side).

4. Click Validate to test the connection.

5. Once validated, all translations will route through your chosen provider.

Tier Routing

BYOK availability depends on your subscription tier:

  • Free: BYOK is optional. Without it, translations use the managed Gemini Flash-Lite model.
  • Vibecoder: BYOK is not available. Uses the managed Gemini Pro model exclusively.
  • Developer: BYOK is optional. Without it, translations use the managed Gemini Pro model.
  • Enterprise: BYOK is optional. Without it, translations use the managed Gemini Pro model.
  • Credential Security

  • API keys are encrypted at rest using AES-256.
  • Keys are never logged or exposed in API responses.
  • You can revoke credentials at any time from the settings panel.
  • Connection validation performs a lightweight test request to verify the key works.
  • Connection Statuses

    | Status | Meaning |

    | -------------- | --------------------------------------- |

    | active | Credentials validated and in use |

    | invalid | Last validation failed — check your key |

    | unconfigured | No custom provider set up |

    | validating | Connection test in progress |

    Troubleshooting

  • Invalid key error: Verify the key is correct and has not been revoked in the provider's dashboard.
  • Timeout during validation: The provider endpoint may be unreachable. Check the base URL and try again.
  • Unexpected model behavior: Ensure your provider plan includes access to the model you're targeting.