BYOAIK (Bring Your Own AI Key) is a directory of AI tools that run on your own API key.

LobeChat

Polished open-source AI chat UI/PWA with 40+ provider support, plugins, and multi-modal features.

Website Source code

Category:
AI Chat Interfaces
Maintenance:
Actively developed (last commit today)
Pricing:
Open Source
Open source:
Yes (LobeHub Community / Apache-2.0-based)
Self-hostable:
Yes
Local-first:
Yes
Platforms:
Web, Desktop, Mobile, Self-hosted, Docker
AI providers (bring your own key):
OpenAI, Anthropic, Google Gemini, Azure OpenAI, OpenRouter, Groq, Mistral, Cohere, Perplexity, DeepSeek, xAI Grok, Ollama, Together AI, Fireworks, Custom / OpenAI-compatible
API key storage:
Stored by vendor, encryption claimed
Key risk level:
MEDIUM
Trust score:
74/100

LobeChat (LobeHub) is an open-source, modern-design AI chat framework available as a web PWA, desktop app, and self-hosted Docker deployment. Users add their own API keys for 40+ AI providers under Settings > Model Provider (keys are encrypted at rest via KEY_VAULTS_SECRET), or configure them through environment variables. It supports custom OpenAI-compatible endpoints and proxy URLs, local models via Ollama, a knowledge base with RAG, plugins/artifacts, TTS/STT, and vision. The project is very actively maintained (v2.2.7 released June 2026) with ~79k GitHub stars.

Why this trust score (74/100)

Trust measures how the tool treats your API key and how much of that has been verified. It contains no popularity signal.

  • Key Safety 11/25: The key is stored server-side, encrypted, on an instance you control.
  • Request Routing 17/20: Requests go straight from you to the AI provider.
  • Transparency 15/20: Source is public, though the licence is unclear or non-standard. Key handling was located in the published source.
  • Privacy 14/15: Local-first: it works without sending your data anywhere. Can be self-hosted, so the data path stays inside infrastructure you control.
  • Maintenance 10/10: Actively developed: commits within the last three months.
  • Verification Confidence 7/10: Key handling was found in the published source by BYOAIK's scanner.

What was checked

Verification tier SOURCE_VERIFIED, derived from the evidence below and not set by hand.

  • [REPORTED · RESEARCH] This listing was compiled by an AI-assisted research pass over the tool's public website, README and documentation. No person independently confirmed it.
  • [STRONG · SOURCE_SCAN] The user supplies their own OpenAI key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] The user supplies their own Anthropic key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] The user supplies their own OpenRouter key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] The user supplies their own Groq key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] The user supplies their own Mistral key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] The user supplies their own DeepSeek key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] The user supplies their own Perplexity key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] Supports a local model backend, so it can run with no cloud provider key at all. source
  • [STRONG · SOURCE_SCAN] The user supplies their own Cohere key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] The user supplies their own xAI Grok key: the project references its API key variable. source
  • [STRONG · SOURCE_SCAN] The user supplies their own Hugging Face key: the project references its API key variable. source
  • [CONFIRMED · SOURCE_SCAN] Ships a container definition, so it can be self-hosted on your own infrastructure. source
  • [CONFIRMED · SOURCE_SCAN] Most recent commit 2026-08-15, about 0 month(s) ago. source

How your API key is handled

Your API key is stored encrypted on the server instance you control. Requests are sent directly to the AI provider. Because it can be self-hosted, your key never has to touch a third-party backend.

Setup

Sign in, open settings, and enter your provider API key. It is stored encrypted on your server.