Bring your own key

With Your key, an agent’s calls to a provider run on your own account with that provider. The provider bills you directly, and Caplo adds no AI usage charge for those calls. Use it when you already have negotiated rates, need usage on your own account, or want a provider Caplo does not manage for you.

You can bring your own key for Anthropic, OpenAI, Deepgram and ElevenLabs. Each provider has one key per workspace.

Who can manage keys

Owners, Admins and Developers can add, replace and remove keys and change key sources. Other members who can view integrations see the key source and the last characters of a saved key, never the key itself.

Add a key and use it

1. In the console, open Integrations then Service providers.

2. On the provider’s row, under Language models or Speech providers, choose Your key and select Apply · add key.

3. Paste the key into the provider’s API key field and select Check key and use it.

Caplo checks the key with the provider before saving it. If the provider rejects it, you see “The provider did not accept this key. Check the key and try again.” and nothing changes. When the check passes, Caplo saves the key and switches the provider to Your key in one step.

To save a key without switching to it yet, select Add key on the row instead, then Check and save key. Switch to Your key later with Apply.

Note

The check only proves the key authenticates. A key restricted so that it cannot list models or read account details is still accepted. Make sure the key’s project or account can use the models and voices your agents need, and has enough quota.

How keys are stored and shown

• Caplo stores the key encrypted and never shows it again, in the console or through any API.
• The row shows Configured · ending in and the last 4 characters of the key, so you can tell which key is saved. Keys shorter than 16 characters show only Configured.
• The row also shows when the key was last checked, in UTC.
• Agents never see the key. It is used only for the calls Caplo makes to the provider on your workspace’s behalf.

Rotate a key

1. Create the new key in the provider’s dashboard.

2. In Service providers, select Replace key on the provider’s row.

3. Paste the new key and select Check and save key. The dialog shows the last characters of the key it replaces.

4. Once calls succeed with the new key, revoke the old key in the provider’s dashboard.

Caplo deletes the old key when it saves the new one. New calls use the new key straight away.

Remove a key

You can’t remove the key a provider is currently using. First switch the provider to Off or Caplo Managed and select Apply, then select Remove key and confirm. Caplo deletes the stored key.

What happens if your key fails

Calls on Your key use only your key. If the provider rejects it, the key is revoked, or your account runs out of quota, those calls fail; Caplo does not switch them to its own account. Replace the key, or switch the provider to Caplo Managed if it is offered.

Realtime voice models

A realtime voice model writes and speaks a call’s replies itself. It belongs to a language model provider, so its calls use that provider’s Language models key source. For example, an OpenAI realtime model runs on your OpenAI key when OpenAI is set to Your key, and is unavailable when OpenAI is Off. See Voice and speech.

Billing effect

• Calls on your key add no AI usage charge to your Caplo bill. Your provider bills you for them.
• Caplo’s platform fees still apply to every production conversation, whoever’s key it used: per connected voice minute and per completed AI reply.
• The Billing page counts the requests that used your keys and notes that those providers bill you directly. The Usage page includes their token and speech quantities; filter Keys by Your keys to see them alone.

See How Caplo charges and Usage and statements.