BYOK for Anthropic apps: keep your Perplexity, Tavily, and Exa keys
BYOK (bring-your-own-key) is the integration pattern where a downstream service spends data-provider quota from the user's own paid account instead of a shared pool — keeping audit logs in the user's control and avoiding paying for the same query twice.
BYOK — bring your own key — means you connect your own paid account at a data provider (Perplexity, Tavily, Exa, Brave, DataForSEO, Firecrawl, Apify) to ideaudit instead of consuming the bundled pooled quota. ideaudit encrypts each BYOK key at rest with AES-256-GCM, decrypts only in memory at call-time, and never logs the plaintext.
Key facts
- ideaudit supports 7 BYOK providers out of the box: Perplexity, Tavily, Exa, Brave, DataForSEO, Firecrawl, Apify.
- BYOK Perplexity discounts the Pro plan by $8/mo, taking it from $39 to $31.
- Free tier ships 50 raw-data calls/month — typical BYOK users hit this on day two.
- All BYOK keys are encrypted at rest with AES-256-GCM under a KMS-equivalent master key.
BYOK — bring your own key — means you connect your own paid account at a data provider (Perplexity, Tavily, Exa, Brave, DataForSEO, Firecrawl, Apify) instead of consuming the shared quota the SaaS vendor bundles.
For an MCP-backed product like ideaudit it matters because raw data is the marginal cost. The LLM provider charges per token. The data provider charges per query. If you already pay $200/mo for Perplexity Pro, you don't want to pay it again as part of your audit subscription.
When does BYOK pay off
Three conditions:
- You already pay the provider. If you have a Perplexity Pro / Tavily / DataForSEO seat, BYOK is free additional capacity.
- You hit our quota first. Free tier gets 50 raw-data calls per month. If you're auditing 20 ideas a day, you'll exhaust that in two days. BYOK uplifts your effective ceiling.
- You care about provenance. Some teams require their own audit trail of upstream API calls. BYOK keeps the trail in your account.
Skip BYOK if:
- You're casual — the free quota covers a few audits a week.
- You don't already have provider accounts. Signing up just to BYOK is more friction than savings.
What ideaudit supports today
- Perplexity — preferred BYOK target.
-$8/modiscount on Pro plan when wired. - Tavily — fast, cheap general web search.
- Exa — semantic search, good for "find me companies similar to X".
- Brave — independent index, useful as a redundancy provider.
- DataForSEO — pooled by default (our account); BYOK supported if you have your own.
- Firecrawl — for scraping a known URL list.
- Apify — for actor-based scrapes (Reddit threads, Product Hunt comments, etc.).
You can connect any subset. The web-search dispatcher tries providers in this order: BYOK first, then pooled fallback, then graceful degrade with a warning in the audit.
How keys are stored
Every BYOK key is encrypted at rest using AES-256-GCM with a master key kept in a KMS-equivalent (ENCRYPTION_MASTER_KEY). The plaintext is never logged. When the MCP server needs to call Perplexity on your behalf, it decrypts in memory, makes the call, and zeroes the buffer.
This matters because:
- A database leak does not leak provider keys.
- An MCP audit log shows "called perplexity.search" but never the key value.
- Rotating the master key triggers a re-encrypt sweep — your provider keys stay valid, just under a fresh wrapper.
How to wire it up
- Open Settings → Sources.
- Click Add provider. Pick Perplexity (or whichever).
- Paste your provider key. Hit Validate — we make a no-op call to confirm the key works before persisting.
- Active badge appears next to the provider once a real audit consumes it.
If a key starts failing (rotated upstream, hit rate limit), the dispatcher auto-falls-back to the next provider in the chain and surfaces the failure on the dashboard. No silent black-holing.
What this saves on a Pro plan
Concrete numbers from one user's last quarter:
| Path | Monthly cost |
|---|---|
| ideaudit Pro + bundled data | $39 |
| ideaudit Pro + BYOK Perplexity | $31 (Pro $39 − $8 BYOK discount) |
| Pure DIY (Perplexity Pro + scraping) | $200+ |
The BYOK discount is small in dollars but the real win is not paying for the same Perplexity query twice.
FAQ
Frequently asked questions
When does BYOK actually save money?
When you already pay for the provider. If you have Perplexity Pro, BYOK gives you free additional capacity on top of your existing seat, plus an $8/mo discount on the ideaudit Pro plan. If you don't have provider accounts, signing up just to BYOK is more friction than savings — stick with the pooled quota.How are BYOK keys stored?
Encrypted at rest with AES-256-GCM under a master key kept in a KMS-equivalent (`ENCRYPTION_MASTER_KEY`). Plaintext is never logged. When the MCP server needs to call Perplexity on your behalf, it decrypts in memory, makes the call, and zeroes the buffer. A database leak does not leak provider keys.What happens if my BYOK key starts failing?
The web-search dispatcher auto-falls-back to the next provider in the chain (BYOK → pooled → graceful degrade) and surfaces the failure on your sources dashboard. No silent black-holing — you see the error and can rotate the key.Can I revoke a BYOK key without losing existing audits?
Yes. Audits are stored as the rendered output, not as a re-runnable pipeline against the original credentials. Revoking a BYOK key removes future-call permission only; nothing in your existing audit history is affected.