OpenRouter Alternative for Secure AI Infrastructure

HTTP/1.1 200 OK
x-hub-scan-ms: 14
x-hub-violations: EMAIL_ADDRESS,US_SSN
x-hub-correlation-id: req_a1b2c3d4
x-hub-model: llama-3-70b
x-hub-provider: groq
content-type: application/json

{
  "id": "chatcmpl-abc123",
  "object": "chat.completion",
  "model": "oah/llama-3-70b",
  "choices": [...],
  "usage": {
    "prompt_tokens": 45,
    "completion_tokens": 120,
    "total_tokens": 165
  }
}

{
  "version": 3,
  "action": "BLOCK",
  "entities": [
    "US_SSN",
    "CREDIT_CARD",
    "EMAIL_ADDRESS",
    "PHONE_NUMBER",
    "API_KEY",
    "AWS_ACCESS_KEY",
    "AWS_SECRET_KEY",
    "PRIVATE_KEY",
    "GITHUB_TOKEN",
    "PROMPT_INJECTION"
  ],
  "custom_regex": [
    {
      "name": "INTERNAL_PROJECT_CODE",
      "pattern": "PRJ-[A-Z]{2}-\d{4,}",
      "description": "Internal project identifiers"
    },
    {
      "name": "CUSTOMER_ACCOUNT_ID",
      "pattern": "CUST-\d{8,12}",
      "description": "Customer account numbers"
    }
  ]
}

import OpenAI from "openai";

// Your existing provider keys are securely managed in the Hub dashboard
// with enterprise-grade authenticated encryption.
// The Hub uses them to route requests — you pay the provider directly.

const client = new OpenAI({
  apiKey: "oah_proj_production_xxxxx",  // project-scoped key
  baseURL: "https://api.opensourceaihub.ai/v1",
});

const response = await client.chat.completions.create({
  model: "oah/gpt-4.1",
  messages: [{ role: "user", content: prompt }],
  max_tokens: 512,
});

// What happens under the hood:
// 1. Hub authenticates your project key
// 2. Resolves project DLP policy (v3: BLOCK on 10 entities + 2 regex)
// 3. Scans all messages — redacts EMAIL_ADDRESS, blocks US_SSN
// 4. Detects BYOK key for OpenAI → uses YOUR OpenAI credentials
// 5. Forwards cleaned request to the resolved provider
// 6. Logs: entity types, actions, timing, correlation ID
// 7. Hub cost: $0.00 (BYOK mode)