Compliance
Gateways are dual-use. The same routing tech that manages a company’s own keys can be misused to resell consumer subscriptions. This page states, in writing, which side of the line this practice is on.
Services provided
- Deployment and operation of gateways routing traffic under your organisation’s own API keys (BYOK) obtained from providers’ official API programs.
- Virtual-key management, quotas, usage metering, routing and failover across your accounts.
- Security hardening, monitoring, backup and handover.
Refused, regardless of payment
- Converting consumer subscriptions (ChatGPT Plus, Claude Pro/Max, Gemini consumer plans, etc.) into resellable API access.
- Account pooling, quota sharing or resale of account capacity.
- Bypassing provider rate limits, concurrency caps or anti-abuse systems.
- Extracting, buying, selling or transferring account credentials.
- Scraping private web UIs to simulate API access.
Provider matrix (API access modes)
Summarised from provider terms as read on 2026-07-26.
Terms change; verify against the linked originals before relying on this
table. This is an engineering compliance summary, not legal advice.
| Provider | Official API (BYOK) | Consumer-subscription relay via gateway | Notes |
|---|---|---|---|
| OpenAI | Permitted — platform API keys | Not permitted for third-party resale relay | Platform terms tie API usage to the account holder; consumer ChatGPT terms cover personal, non-programmatic use. |
| Anthropic | Permitted — API keys via console | Not permitted for third-party resale relay | Commercial terms distinguish API service from consumer Claude apps. |
| Google (Gemini) | Permitted — AI Studio / Vertex keys | Not permitted for third-party resale relay | Consumer plans and Cloud API are separate products with separate terms. |
| Open-weight hosts (Together, Fireworks, self-hosted vLLM…) | Permitted — standard API keys or your own hardware | n/a | Cleanest path for cost-sensitive routing tiers. |
Any access mode not covered by a provider’s official program is treated as UNVERIFIED here: it is not demonstrated on this site, not documented as a tutorial, and not enabled in the demo.
About this site
- The demo runs against a mock upstream only: fake accounts, fake balances, fake logs. No real provider account is connected anywhere on this host.
- This site is an independent deployment demonstration. It is not affiliated with, endorsed by, or connected to the Sub2API project or any upstream AI provider. Provider names appear for interoperability description only; no logos are used.
- Open-source gateway software licences are honoured in deployments — including source availability and modification notices for LGPL-3.0-or-later components. Licence texts ship with every delivery.