Bring your own key or use ours

When you deploy an AI assistant on OpenClaw, you choose between two API key modes: hosted (we provide the key) or BYOK (bring your own key). Both are secure. The difference is control and cost.

#Hosted keys

With hosted keys, OpenClaw provisions an API key on your behalf. You don't need an account with OpenAI, Anthropic, or Google. We handle rate limits, billing, and key rotation. You pay a flat monthly fee that includes a generous usage allowance.

This is the fastest path to deployment. Sign in, pick a model, deploy. No key management, no provider accounts, no billing surprises.

When to use hosted keys

• You want to deploy immediately without provider accounts
• You prefer predictable monthly pricing
• You're testing or prototyping and don't want to manage keys yet
• You want OpenClaw to handle rate limits and failover

#Bring your own key

With BYOK, you connect your own API key from OpenAI, Anthropic, or Google AI. You pay the provider directly at their standard rates. OpenClaw encrypts your key and stores it in an isolated vault — it never leaves the server.

BYOK gives you full control over your usage, billing, and rate limits. You can use enterprise agreements, volume discounts, or credits you already have with the provider.

When to use BYOK

• You already have API credits or an enterprise agreement
• You need fine-grained control over usage and billing
• Your organization requires keys to be owned by your entity
• You want to use a specific API tier or region

#Switching between modes

You can switch between hosted and BYOK at any time from the dashboard. The transition is instant — no redeployment, no downtime. Your bot continues responding to messages with the new key within seconds.

Start with hosted to get running fast, then switch to BYOK when you're ready to bring your own infrastructure. Or keep hosted forever. Both modes receive the same security treatment.