Hosted API
Use https://api.tekiz.ai/v1 with an active
generated sk_sage_* key for account-managed quotas,
usage analytics, fallback routing, and public edge reliability.
Use one Tekiz endpoint from hosted clients, local tools, Tailnet
agents, and BYOK-compatible provider stacks. Start with generated
sk_sage_* hosted keys for
https://api.tekiz.ai/v1, or run the router on local
port 8790 when provider credentials should stay on your own
host.
Use https://api.tekiz.ai/v1 with an active
generated sk_sage_* key for account-managed quotas,
usage analytics, fallback routing, and public edge reliability.
Use http://127.0.0.1:8790/v1 for local agents, Docker
Desktop, Umbrel, or developer machines where provider credentials
and subscriptions stay under local custody.
Use http://<tailnet-host>:8790/v1 for private
fleet routing across healthy Tekiz installations before
placing a public edge in front.
These setup paths share the same model profiles, provider authorization boundary, and no-secret support posture.
Set
OPENAI_BASE_URL=https://api.tekiz.ai/v1 or
local port 8790, then call
sage-router/frontier through chat completions or
Responses API-compatible routes.
Use wire_api = "responses",
model = "sage-router/frontier", and the hosted,
local, or Tailnet base URL that matches your custody model.
Point OpenAI-compatible settings at Tekiz first, then let route profiles and health-aware fallback pick the best authorized backend.
Run Tekiz beside the provider runtime, discover available models where supported, and expose only the routing endpoint to agents.
Keep one or more DeepSeek API keys on the router host, isolate failures per credential, and use V4 Flash directly or through a route profile. Open the DeepSeek guide.
Use Anthropic-compatible client routes where your harness expects them, while keeping provider credentials customer-authorized and private.
Use route profiles such as sage-router/frontier,
sage-router/balanced, and
sage-router/agentic instead of hard-coding one
vendor model.
BYOK uses provider API keys or workload credentials on your router host. BYOS uses a provider-supported subscription credential or OAuth profile. Local Ollama needs no credential unless its operator requires one.
All configured providers can use isolated credential pools. A failed key cools that credential, not every account for the provider. Consumer login sessions are supported only when the provider exposes an authorized integration path.
Support and setup reviews should use account email, plan, timestamp, HTTP status, request id, safe error class, and non-secret key prefix only. Do not paste prompts, workflow text, provider credentials, OAuth tokens, generated API keys, private keys, session cookies, raw provider responses, or customer data.