One gateway for your team’s AI and APIs.

Give people AI with personal keys and allowances, put your APIs behind one set of policies, and see every request and every dollar. In your own infrastructure.

Run the demo Self-host from GitHub

Self-hosted: your cloud or VPC
Apache 2.0: no license key
AI + every API: REST, GraphQL, gRPC, SOAP

doorman · requestssample traffic

00The dashboard

One dashboard for keys, spend, and APIs.

Doorman AI usage dashboard showing spend by model over time

One gateway for

REST
GraphQL
gRPC
SOAP
OpenAI
Anthropic
Gemini
Azure OpenAI

Runs in your infrastructure

Your cloud account or private network. Provider keys, prompts, and traffic stay with you.

Open source, Apache 2.0

The whole gateway and dashboard, with no license key and no limits on traffic.

One policy model

The same users, groups, roles, and logs for AI providers and for your APIs.

01Features

Everything between your people and what they call.

Built into the gateway, not bolted on. No extra services, no per-seat pricing.

Personal AI keys

Everyone gets their own key. Revoke one without touching anyone else.

laptopdk_pXKZ…active

ci-runnerdk_8Hq2…active

old-macdk_Lr0w…revoked

Allowances

Per person, team, or tier, in dollars, tokens, or requests. Block, warn, or downgrade.

Engineering$1,840 / $2,500

Design$310 / $800

Support$500 / $500

Support · 429 AI004 · resets Dec 1

Spend by model

See who spent what on which model, and export it for chargeback.

claude-sonnet-5-5$1,212

gpt-4.1-mini$684

gemini-flash$97

llama-localunpriced

Roles and groups

One set of users, roles, and groups across AI providers and APIs.

Dana LeeAdmin ▾

Sam OrtizDeveloper ▾

Lee ParkAnalyst ▾

ci-botService ▾

Rate limits and credits

Throttle callers per API, sell credits, and return clean 429s.

payments/v1100 / min200

orders/v31k / min200

partner-acme20 / min429

Guardrails

Redact emails, card numbers, and secrets before a prompt leaves your network.

summarise this thread from

[EMAIL] using key

[AWS_KEY] and …

2 redactions · prompt not logged

AI governance API management

02How it works

Change the base URL. Keep your SDK.

Callers point at Doorman with their own key. Every request is identified, checked against its limits, routed, and recorded, for AI providers and APIs alike.

python · any OpenAI SDK

import os
from openai import OpenAI

client = OpenAI(
    base_url="https://gw.example.com/api/ai/corp-openai/v1/v1",
    api_key=os.environ["DOORMAN_AI_KEY"],  # personal dk_ key
)

# Over the team's allowance:
# 429 {"error_code": "AI004", "budget": "Engineering monthly",
#      "period_resets_at": "2026-12-01T00:00:00Z"}

Limits are documented, not hidden. AI allowances are soft limits, and we say exactly how they behave.Read the limits

03Deploy

Try it locally or run it in your cloud.

The demo runs locally with sample APIs and a built-in AI model, so you can try routing, limits, and usage without a provider key.

terminal · demo

git clone https://github.com/doorman-dev/doorman.git
cd doorman && cp .env.demo .env
docker compose -f docker-compose.yml -f docker-compose.demo.yml up --build

# in a second terminal: team allowance, employee key, 4th request blocked
./scripts/demo-ai-walkthrough.sh