AIProxy: Secure API Access for iOS Apps
AIProxy provides a fully managed proxy to protect API keys and securely route requests from your iOS app to AI providers. It eliminates the need to run your own backend, offers built-in key protection, observability, and granular control over which endpoints are exposed. The Swift client library, AIProxySwift, makes integration quick and scalable, with support for multiple AI providers and seamless key management.
How it works
- Add your provider API key to AIProxy and configure proxy rules to expose only the endpoints your app uses.
- Implement the AIProxySwift client in your iOS app and point requests to the AIProxy proxy endpoint.
- AIProxy encrypts and partially stores your key, combining pieces on the client side to fulfill requests securely.
- The system uses device attestation, rate limits, and endpoint restrictions to prevent abuse and key leakage.
Safety: No API keys are stored in a usable form on the backend. Keys are split and reassembled only when a request is made.
Getting Started
- Use the free plan to try AIProxy with no credit card required.
- Integrate the AIProxySwift package into your iOS project.
- Create your project in the dashboard, add your API key, configure proxy rules, and implement initialization code from the dashboard.
Core Benefits
- Protect API keys with split-key encryption and device attestation
- Rate limiting to prevent endpoint abuse
- Real-time observability and dashboards for usage insights
- Model overrides to switch AI providers or models without app updates
- Live console to test API calls and debug performance
- Bring-your-own-key option for flexible deployments
- Cloud-native scalability on AWS Lambda
- BYOK concept: your key is never fully exposed to the server
Feature List
- Fully managed proxy to protect API keys
- Client-side integration with AIProxySwift for Swift-based apps
- No need to run your own backend or cloud functions
- Split-key encryption and device-based verification to prevent key theft
- Rate limiting and usage monitoring with real-time observability
- Proxy rules to restrict accessible endpoints and block others
- Support for multiple AI providers and easy model/tooling overrides
- AWS Lambda-based, horizontally scalable infrastructure
- Bring-your-own-key support with secure handling
- BYOK-like security model: keys are never exposed in full to the server