Skip to content

Architecture and migrationGuide

AI aggregator platform vs AI gateway: three shapes compared

One key for hundreds of models is the aggregator's promise. The question that decides whether it fits is who holds the provider contract, who pays the provider, and where your data goes on the way.

By INFRO Editorial

Published

8 min read

Dark ground with amber light passing through three clusters of glass nodes, one funnelled through a single hub, one ringed by a private wall, one fanning out to separate accounts

In short

An AI aggregator platform gives you one API key for many models: you pay the platform and the platform pays the providers, so its accounts and terms sit between you and every model vendor. A self-hosted gateway such as LiteLLM gives you one endpoint over provider accounts you hold and operate. A BYOK control plane is hosted like an aggregator but routes only through your own provider accounts, which keep invoicing you directly.

Key takeaways

  • An aggregator, a self-hosted gateway and a BYOK control plane can expose the same OpenAI-compatible endpoint. They differ in who holds the provider contract and who pays the provider.
  • With an aggregator you pay the platform and the platform pays the providers; your negotiated rates, committed spend and direct data agreements do not travel with you.
  • Aggregators that accept your own keys may still fall back to their own capacity when your key fails. Find the setting and decide on it deliberately.
  • A self-hosted proxy keeps the contracts yours and makes the gateway your service to run and page for.
  • Aggregators are a sound choice for prototypes and model exploration. They stop fitting once procurement, committed spend or a data processing agreement enters the picture.

An AI aggregator platform gives your application one API key and one endpoint for models from many providers. You pay the platform, and the platform pays the providers. That last sentence is what separates an aggregator from the two other shapes that look identical in code: a self-hosted gateway, where you run the proxy over provider accounts you hold, and a BYOK control plane, where a hosted service routes only through your own provider accounts and your providers keep invoicing you directly.

All three expose the same thing to a developer, usually an OpenAI-compatible base URL. The differences sit underneath, in contracts, data terms and what happens when something fails. This guide describes each shape from its own documentation, compares them on the questions procurement and security will ask, and says when an aggregator is the right call and when it stops being one.

What an AI aggregator platform is

An aggregator holds accounts with many model providers and exposes them behind one API. OpenRouter is the best-known example; its quickstart says it gives access to hundreds of AI models through a single endpoint, and that the OpenAI SDK pointed at it works as a drop-in replacement with the base URL https://openrouter.ai/api/v11.

The commercial model is the defining part. Per OpenRouter's FAQ, you add funds to an account with OpenRouter, the cost of each request is deducted from that balance, and OpenRouter pays the underlying providers. It says it passes through the providers' pricing without markup and earns its revenue from a fee when you add funds2.

Routing is the other half. By default OpenRouter load-balances a model's requests across the providers that serve it: it prefers providers without recent outages, weights the choice toward lower price, and keeps the rest as fallbacks. You can pin an order, restrict to named providers with only, turn fallbacks off with allow_fallbacks: false, and restrict routing to providers that do not collect data (data_collection: "deny") or to zero-data-retention endpoints (zdr)3.

Aggregators with a bring-your-own-key option

Some aggregators also accept your own provider keys. OpenRouter's BYOK lets you add keys that are tried for requests to that provider. Usage on your keys carries a fee of 5% of what the same model and provider would cost on OpenRouter, above a monthly allowance measured in list-price inference cost4.

The detail worth reading twice is the fallback. By default, if all your keys for a provider hit a rate limit or fail, OpenRouter falls back to its shared endpoints. That means the request runs on OpenRouter's capacity under its terms rather than on your contract. You can change this per key, or set is_byok_only through the API, so a provider never uses shared capacity4. Neither default is wrong. One favours availability, the other keeps every request on your contract. Pick one on purpose.

The other two shapes

Self-hosted gateways and proxies

A self-hosted gateway is software you run in your own infrastructure, in front of provider accounts you hold. LiteLLM describes its proxy as a self-hosted server that offers one OpenAI-compatible endpoint for more than 100 LLM providers, with virtual keys per user, team and project, spend tracking by key, team and tag, budgets, rate limits, load balancing, retries and fallbacks5.

Contracts and invoices stay exactly where they were. What changes is that the gateway becomes a production service you deploy, upgrade, scale and get paged for, and it sits in the request path of every AI feature you ship.

BYOK control planes

A BYOK control plane is hosted like an aggregator but holds no provider accounts of its own. You connect accounts you already have; it routes, fails over, meters and enforces policy across them, and your providers invoice you for the model usage. The platform charges separately for the software. Because it has nowhere else to send a request, a failed attempt moves to another of your connections or fails. It never moves to someone else's account.

AI aggregator vs AI gateway vs BYOK control plane

QuestionAI aggregatorSelf-hosted gatewayBYOK control plane
Who holds the provider contractThe aggregator (yours only for BYOK keys)YouYou
Who pays the providerThe aggregator, from what you pay itYou, directlyYou, directly
What you pay the platformUsage plus any platform feeNothing for open-source software; your infrastructure and engineering timeA software subscription
Data pathYour app → aggregator → a provider the aggregator chooses or you pinYour app → your infrastructure → your providersYour app → control plane → your providers
Your negotiated rates and committed spendApply only to traffic on your own keysApplyApply
Data processing agreementsWith the aggregator; the aggregator's terms with each provider govern the hop beyond itWith each provider, as todayWith each provider as today, plus one with the control plane
FailoverAcross the aggregator's providers by default; BYOK may fall back to shared capacityConfigured by you, across your accountsAcross your accounts only
ObservabilityThe platform's dashboards and logsWhatever you build or runThe platform's request records, cost estimates and exports
Rate limitsPartly the aggregator's capacity, partly your keysYour accounts' tiersYour accounts' tiers
Lock-inMoving means opening an account with each providerLow; you run the codeLow; point the base URL back at your providers
The same OpenAI-compatible endpoint can sit on three different commercial and data arrangements.

Two rows need explanation. Rate limits belong to accounts. OpenAI sets limits per organization and project and moves an organization through usage tiers6. Anthropic sets them per organization and tier, measured in requests, input tokens and output tokens per minute7. On an aggregator's accounts you inherit its standing with each provider. On your own accounts you inherit yours, including any higher limits you negotiated.

Data processing agreements decide what a security review will accept. With an aggregator, your agreement is with the aggregator, and the hop from the aggregator to the model vendor runs under the aggregator's terms with that vendor. OpenRouter's routing controls let you exclude providers that collect data or require zero-data-retention endpoints3, and that is the right place to start reading. If your company already signed a DPA or a zero-retention addendum directly with a provider, that agreement covers traffic on your account, not traffic on someone else's.

When an aggregator is the right call

An aggregator removes the slowest step in trying a new model, which is opening an account with its vendor. That makes it a good fit when:

  • You are prototyping. One key, one balance and every model behind it lets a small team compare ten models in an afternoon without ten sign-ups.
  • You need breadth more than depth. Open-weight models served by several hosts, niche vendors and new releases all arrive behind one model id format.
  • Your volume is small and no contract exists yet. With no negotiated rates and no committed spend, there is nothing to lose by running on the platform's accounts.
  • Availability matters more than which contract serves the request. Default cross-provider fallback is useful if you do not care which host answers.

When it stops being the right call

The same arrangement starts to cost more than it saves when the company's relationship with its providers becomes real:

  1. Procurement signs an enterprise agreement. Negotiated rates and committed spend apply to usage on your account. Traffic that runs on an aggregator's account does not draw down your commitment.
  2. Security requires direct data agreements. A review that asks "which vendors process our prompts, under which contract" wants the answer to be your contracts. Adding a hop whose terms you did not sign makes that answer longer.
  3. Finance needs the provider invoice to reconcile. When usage flows through a third party, your provider's invoice no longer contains it. That is fine until someone has to explain spend by team or by feature against a contract.
  4. You need to leave. Moving off an aggregator means opening accounts, signing terms and getting limits raised with every vendor you used. That work is easier before you depend on it than after.

None of this is a criticism of aggregators. It is the trade they are built on: they hold the relationships so you do not have to. Once you want to hold them yourself, you need one of the other two shapes. OpenRouter alternatives compares named products on these lines, AI gateway pricing models compares what each one charges on, and who owns your AI gateway covers the 2026 acquisitions that changed the owners of several of them.

Questions to ask any platform before you commit

  • Whose provider account served this request, and does the response or the request record say so?
  • When my own key is rate limited or fails, does the request move to another of my keys, fail, or run on the platform's account? Where is that setting?
  • Is any fee charged on usage that runs on my own keys?
  • Do budgets and spend limits count usage on my keys, or only usage through the platform's accounts?
  • Can I enter my negotiated rate so cost estimates match my invoice?
  • Which DPA covers the hop between the platform and the provider?
  • Can I export request records through an API?
  • What changes in my code to leave? Ideally the base URL, the key and model ids.

If the platform stores your provider keys, also ask how it seals and scopes them. BYOK credential architecture lists what a sound answer looks like.

How INFRO fits the third shape

INFRO is a BYOK control plane. You connect provider accounts you already hold, applications call one OpenAI-compatible endpoint (and Anthropic's Messages format for agent tools such as Claude Code) with an INFRO gateway key, and each request runs on one of your connections. INFRO has no provider accounts of its own, so a failed attempt moves to the next of your connections or the request fails with each connection named. It never runs on a contract that is not yours.

Your providers invoice you for model usage at your rates. INFRO charges a subscription for routing, failover, request records, budgets that refuse spend before the provider call, negotiated-rate cost estimates and reconciliation against provider usage, with 0% markup on model spend. Leaving is pointing the base URL back at your providers. Plans and limits are on the pricing page.

Questions readers ask

Is OpenRouter an AI aggregator or an AI gateway?
Both words get used. By its own documentation it gives access to hundreds of models through one endpoint, you pay OpenRouter and it pays the providers, and it routes and falls back between providers. It also accepts your own provider keys for a fee above a monthly allowance. Commercially it is an aggregator; technically it does what a hosted gateway does.
Does an AI aggregator cost more than calling providers directly?
Not necessarily per request. OpenRouter, for example, says it passes provider pricing through without markup and charges a fee when you add funds. The larger cost question for a company is usually different: whether the negotiated rates and committed spend it already has with a provider apply to traffic that runs on someone else's account. They do not.
Can I use my enterprise OpenAI or Anthropic contract through an aggregator?
Only through the aggregator's bring-your-own-key option, if it has one, and only for requests that actually run on your key. Check whether the platform falls back to its own capacity when your key is rate limited or fails, and whether any fee applies to your own-key usage.
What is the difference between an LLM aggregator API and a BYOK control plane?
Both are hosted and both give you one API. An aggregator's default is its own provider accounts; a BYOK control plane has no provider accounts of its own, so every request runs on an account you hold and your provider invoices you for it. The control plane charges separately for the software.

From the team that builds it

Where this shows up in INFRO

INFRO is a control plane in front of the provider accounts you already hold. The capabilities below are the parts of it this article touches, each with the documentation that defines its behaviour.

  • Provider connections

    Available with a plan

    Connect provider accounts you already hold. Each credential is encrypted when saved, scoped to your organization and never shown again; applications use INFRO gateway keys instead.

    Read the documentation for Provider connections
  • Health-aware routing

    Available with a plan

    Named routes use priority or weighted targets over your own connections, with health checks, retries and failover.

    Read the documentation for Health-aware routing
  • Automatic failover

    Available with a plan

    A route that times out or 5xxs before the response starts is retried elsewhere without your client seeing it.

    Read the documentation for Automatic failover
  • Usage and cost per request

    Available with a plan

    Every request records its model, latency, token or unit counts, and estimated provider cost, queryable by project and key.

    Read the documentation for Usage and cost per request
  • Budgets and spend ceilings

    Available with a plan

    A hard cap per organization, project, member, and key, with alerts at your own thresholds.

    Read the documentation for Budgets and spend ceilings
  • Negotiated provider rates

    Available with a plan

    Enter the rates your contracts actually carry, per model and optionally per provider, so estimated cost uses them before the vendor's list rate. Included from the Team plan.

    Read the documentation for Negotiated provider rates
  • Provider cost reconciliation

    Available with a plan

    Daily comparison of estimated spend against the cost reported by OpenAI's and Anthropic's own cost APIs, using a separate admin credential, with the likely cause of a persistent gap and a suggested rate you can apply. Included on the Business plan.

    Read the documentation for Provider cost reconciliation
  • Claude Code and Codex through INFRO

    Available with a plan

    Point Claude Code, the Claude Agent SDK, Codex or the OpenAI Agents SDK at INFRO by changing the base URL and the key. Anthropic's Messages API and OpenAI's Responses API, with routing, budgets refused before the call, guardrails and the request log applied as on every other request.

INFRO accounts are self-serve. Provider usage is billed to you by your providers; INFRO charges a software subscription and takes 0% of model spend. See plans.

Sources

Numbered in order of first citation. Each was opened and checked against the claim on the date shown.

  1. 1.Quickstart (opens in a new tab) — OpenRouter. Accessed Oct 19, 2026.
  2. 2.FAQ (opens in a new tab) — OpenRouter. Accessed Oct 19, 2026.
  3. 3.Provider routing (opens in a new tab) — OpenRouter. Accessed Oct 19, 2026.
  4. 4.BYOK (opens in a new tab) — OpenRouter. Accessed Oct 19, 2026.
  5. 5.LiteLLM AI Gateway (LLM Proxy) (opens in a new tab) — BerriAI. Accessed Oct 19, 2026.
  6. 6.Rate limits (opens in a new tab) — OpenAI. Accessed Oct 19, 2026.
  7. 7.Rate limits (opens in a new tab) — Anthropic. Accessed Oct 19, 2026.

About this article

Written by the team building INFRO, which is one of the three shapes described here. Statements about OpenRouter and LiteLLM are taken only from their own documentation, opened on 2026-10-19, and limited to what those pages say. Statements about INFRO come from its public documentation and availability registry, read the same day. No performance, latency or cost comparison is made.

Last checked against its sources on . The next review is due by . No separate named reviewer is recorded for this article.

How articles are written, sourced and corrected is set out in the editorial standards.