BYOAIK — Bring Your Own AI Key: a directory of AI tools that run on your own API key.

Onlook

Open-source visual builder for Next.js apps; self-host it and all AI calls bill to your own OpenRouter key.

Website Source code

Category:
App Builders
Pricing:
Open Source
Open source:
Yes (Apache-2.0)
Self-hostable:
Yes
Local-first:
No
Platforms:
Web, Desktop, Self-hosted, Docker
AI providers (bring your own key):
OpenRouter, OpenAI, Anthropic, Google Gemini
API key storage:
Stored locally on device
Key risk level:
LOW
Trust score:
81/100

Onlook is an open-source, Figma-like visual editor for building real Next.js and Tailwind applications with AI, positioned against hosted builders. You can use the hosted service or self-host it: the self-hosting documentation has you copy the example environment file and set OPENROUTER_API_KEY to your own OpenRouter key, so chat and code generation bill to your account rather than Onlook's. Supports live visual editing with full code access to the generated app. Apache-2.0, 26,494 stars, pushed within a month of review. Bring-your-own-key applies to the self-hosted path; the hosted option uses Onlook's own billing.

Why this trust score (81/100)

Trust measures how the tool treats your API key and how much of that has been verified. It contains no popularity signal.

  • Key Safety 23/25 — The key is held on your own device.
  • Request Routing 17/20 — Requests go straight from you to the AI provider.
  • Transparency 20/20 — Source is public under Apache-2.0, so anyone can check how the key is handled.
  • Privacy 10/15 — Can be self-hosted, so the data path stays inside infrastructure you control.
  • Maintenance 10/10 — Actively developed — commits within the last three months.
  • Verification Confidence 1/10 — Compiled from public documentation by an AI-assisted pass, not independently confirmed.

What was checked

Verification tier: RESEARCH_ASSISTED — derived from the evidence below, not set by hand.

  • [CONFIRMED · SOURCE_SCAN] Ships a container definition, so it can be self-hosted on your own infrastructure. source
  • [CONFIRMED · SOURCE_SCAN] Most recent commit 2026-07-22 — about 1 month(s) ago. source

How your API key is handled

Your API key is stored locally on your device. Requests are sent directly to the AI provider. Because it can be self-hosted, your key never has to touch a third-party backend.

Setup

Open settings, paste your provider API key, choose a model, and start — the key stays on your device.