Provider sprawl
Each model vendor introduces a different endpoint, request format, credential, limit, and failure mode.
ENTERPRISE AI CONTROL INFRASTRUCTURE
AethosHub gives platform and security teams an on-prem AI gateway for virtual keys, multi-provider routing, budgets, guardrails, metering, and audit, backed by provider credential governance.
root@control-plane $ POST /admin/keys scope=team:platform expires=30d
virtual_keymintedsk-aam-••••7f2
scoperesolvedorg=acme team=platform
limitsattachedrpm=120 tpm=250000
keyACTIVEmaster_keys=withheld
THE CONTROL GAP
Operational risk grows when vendor credentials, model routes, budgets, safety checks, and call evidence are implemented differently by every application team.
Each model vendor introduces a different endpoint, request format, credential, limit, and failure mode.
Applications receive long-lived vendor credentials that are difficult to scope, expire, or revoke centrally.
Provider, model, token usage, spend, guardrail decisions, and outcomes remain fragmented across systems.
PRODUCT 01 / MAIN PRODUCT
Agent Access Manager holds encrypted vendor credentials, gives applications one OpenAI-compatible endpoint and revocable virtual keys, then routes, meters, guards, and audits every call.
OpenAI-compatible Chat, Responses, Messages, and embeddings surfaces for existing clients.
Issue revocable, expiring application keys while vendor master keys stay encrypted in the broker.
Map model aliases to multiple vendor deployments for load balancing, health, and failover.
Enforce scoped budgets, RPM/TPM limits, guardrails, and durable call-level audit.
Authorization: Bearer sk-virtual-keykey / budget / guardrail / route / meterorg / team / project · RPM / TPM · PII / secret policycall_8F21APRODUCT 02 / AVAILABLE NOW
APIKeyOps gives security, platform, and finance teams a working system for discovering AI API keys, assigning ownership, enforcing lifecycle policy, protecting secrets, and attributing cost.
APIKeyOps / Platform Overview LIVE PRODUCT CAPTURE
ONE CONTROL STRATEGY
Two focused products control the credentials entering your environment and the LLM traffic leaving it.
Inventory, ownership, encryption, lifecycle policy, and cost attribution.
APIKEYOPSRevocable application keys scoped to organizations, teams, and projects.
AGENT ACCESS MANAGERModel aliases, provider translation, load balancing, fallback, budgets, and guardrails.
AGENT ACCESS MANAGERConnect virtual key, provider, model, tokens, spend, policy decisions, and outcome.
POSTGRES / OPENSEARCHReview well-known MCP servers by credential exposure, source-system risk, and governance priority.
Open the MCP server directory →TRUST ARCHITECTURE
Map virtual-key access, encrypted provider credentials, guardrail decisions, and audit evidence to the controls your enterprise already operates.
Architecture supports evidence collection for access, change, and monitoring controls.
Map credential, access, policy, and audit practices to ISMS control objectives.
Operational visibility across governed model access, guardrails, usage, and provider outcomes.
Control-alignment statements describe product architecture and are not claims of AethosHub certification.
ENTERPRISE TECHNICAL REVIEW
Bring your vendors, model aliases, application traffic, budgets, guardrail requirements, and deployment constraints. We will map the broker to the operating path.