BYOAIK — Bring Your Own AI Key: a directory of AI tools that run on your own API key.

Dyad

Local open-source AI app builder — an alternative to hosted builders that runs on your machine and your own keys.

Website Source code

Category:
App Builders
Pricing:
Open Source
Open source:
Yes (Mixed: Apache-2.0 core, Functional Source License for pro directory)
Self-hostable:
No
Local-first:
Yes
Platforms:
Desktop
AI providers (bring your own key):
OpenAI, Anthropic, Google Gemini, OpenRouter, Ollama, Custom / OpenAI-compatible
API key storage:
Stored locally on device
Key risk level:
LOW
Trust score:
80/100

Dyad is a free, open-source desktop AI app builder that scaffolds and edits full web apps from prompts, running locally rather than in a hosted sandbox. The README states plainly that you bring your own keys and use your own AI API keys with no vendor lock-in, entering credentials for OpenAI, Anthropic, Google Gemini or OpenRouter in settings, or pointing it at a local model through Ollama or LM Studio. Ships as a cross-platform macOS and Windows app needing no account to start. 21,249 stars, pushed the day of review; the core is Apache-2.0 with a separate pro directory under the Functional Source License.

Why this trust score (80/100)

Trust measures how the tool treats your API key and how much of that has been verified. It contains no popularity signal.

  • Key Safety 23/25 — The key is held on your own device.
  • Request Routing 17/20 — Requests go straight from you to the AI provider.
  • Transparency 15/20 — Source is public, though the licence is unclear or non-standard. Key handling was located in the published source.
  • Privacy 8/15 — Local-first: it works without sending your data anywhere. Analytics or error-reporting libraries are present; what they send was not established.
  • Maintenance 10/10 — Actively developed — commits within the last three months.
  • Verification Confidence 7/10 — Key handling was found in the published source by BYOAIK's scanner.

What was checked

Verification tier: SOURCE_VERIFIED — derived from the evidence below, not set by hand.

  • [STRONG · SOURCE_SCAN] The user supplies their own OpenAI key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] The user supplies their own Anthropic key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] Supports a local model backend, so it can run with no cloud provider key at all. source
  • [REPORTED · SOURCE_SCAN] References PostHog, so some analytics or error reporting is present. This scan cannot tell whether it is opt-in or what it sends. source
  • [CONFIRMED · SOURCE_SCAN] Most recent commit 2026-08-14 — about 0 month(s) ago. source

How your API key is handled

Your API key is stored locally on your device. Requests are sent directly to the AI provider.

Setup

Open settings, paste your provider API key, choose a model, and start — the key stays on your device.