Virtual keys. Hard caps. Zero bypass.

Issue virtual keys with hard, server-side spend caps and SSRF-guarded routing. When the budget's gone, the request is refused — not logged for later.

$ forg gateway --status
● on  routing 4 models · SSRF guard
key  ci-bot      cap $50   used $47
key  team-pool   cap $200  used $112
key  scratch     cap $20   REFUSED over
spend  $112.93 / mo  metered live
 

Virtual key routing

Mint scoped keys for each seat, repo, or CI job. Your real provider keys never leave the gateway — rotate and revoke from the dashboard.

Hard spend caps

Budget ceilings enforced server-side. When a key hits its cap the request is refused immediately — no honor system, no overages.

SSRF-guarded proxying

Every outbound request passes an SSRF check before it leaves. Internal network ranges and metadata endpoints are blocked by default.

Real keys never leave the gateway

Virtual keys sit between your agents and your providers. Each key carries its own spend ceiling, model allow-list, and rotation schedule. Revoke a compromised key in one click — without touching production credentials.

• ✓Hard server-side budget caps
• ✓Per-key model allow-lists
• ✓SSRF guard on every outbound call

Virtual keys · live

overage billed at $15 / 1k requests, pooled