Overview
You are reading XAI Control docs (multi-tenant BYOK AI gateway). If you need a ready-to-use AI API SaaS with platform-managed keys, visit XAI Router.
What is XAI Control?
XAI Control is a multi-tenant BYOK (Bring Your Own Key) AI gateway. Each tenant gets an isolated, encrypted key vault to manage official provider keys (OpenAI, Anthropic, DeepSeek, etc.), while using a unified Router API and two consoles (Admin for configuration, Manage for accounts and usage).
This means:
- β You own the keys: no platform key pooling, no hidden markup.
- β Tenant isolation: parent/child accounts with DNA paths and cascading configs.
- β Unified access: OpenAI/Anthropic compatible APIs plus native protocols.
How to choose: XAI Router vs XAI Control
| Product | Service Mode | Key Ownership | Entry Points | Best For |
|---|---|---|---|---|
| XAI Router | SaaS with platform-managed keys | Platform-hosted | m.xairouter.com | Rapid onboarding without key management |
| XAI Control | Multi-tenant BYOK gateway | Customer-owned | a.xaicontrol.com / m.xaicontrol.com | Enterprises needing governance & compliance |
The core difference is who controls upstream provider keys.
Core capabilities
- Unified API entry:
/v1compatible with OpenAI/Anthropic and native protocols. - Multi-tenant governance: parent/child accounts, DNA paths, cascading policies.
- BYOK security: end-to-end encrypted key storage with no super-admin access.
- Smart routing: load balancing, failover, model mapping, and retries.
- Fine-grained limits: TPM/RPM/RPD, IP/model allowlists, usage & billing audits.
- Dual consoles: Admin for provider keys and policies; Manage for accounts and usage.
Architecture
XAI Control routes using your upstream keys. The system encrypts, monitors, and rotates keys for reliability, but never takes ownership of them.
Self-hosting modes
The same codebase supports two runtime modes via env vars:
- XAI Control mode:
SINGLE_TENANT=false(multi-tenant BYOK) - XAI Router mode:
SINGLE_TENANT=true(platform-managed key SaaS)
For on-prem deployments, see XAI Router self-hosting and set SINGLE_TENANT=false to enable XAI Control.