Why you shouldn’t have to think about AI keys

June 12, 2026 · 5 min read

Every AI product faces the same choice: make customers bring their own model keys, or run the model for them. Zapito launched bring-your-own-key — and then watched who actually signs up. If you run a shoe store, a dental clinic, or a tour company, an AI provider dashboard is not your job. So we changed our answer: Zapito provides and runs the model, and you never see a key.

Keys are plumbing

Bringing your own key means creating a developer account with a model provider, attaching a credit card, generating a secret token, pasting it into the right field, and then keeping an eye on rate limits and deprecation emails. That’s five chores before your agent has answered a single customer — and every one of them is our job, not yours. Model names change quarterly; your support agent shouldn’t.

Conversations, not token math

Token pricing is honest but unreadable — nobody budgets in “dollars per million tokens”. With Zapito the model is included in the plan and usage is metered in the one unit that maps to your business: conversations. Building and testing in the sandbox is free; going live starts at $29 for Basic with about 500 conversations a month, and Plus is $59 for about 1,500 — exactly the same agent, just more usage. A simple usage bar shows where you stand. No “credits” to decode, no markup games hidden inside a made-up unit.

Swap-proof behind the scenes

Models keep leapfrogging each other on price and quality. Internally, Zapito is provider-agnostic: when a better or cheaper model ships, we swap it in server-side and your agent simply gets better. You don’t re-key anything, re-check billing, or read a migration guide — there’s nothing on your side to migrate.

Own the things that matter

The ownership argument for BYOK was never wrong — it just points at the wrong asset. What you should actually own:

Your WhatsApp number. Connected through Meta Embedded Signup, the number and the WhatsApp Business Account belong to your Meta business, never pooled under ours. One customer’s ban can never become your outage.
Your Telegram bot. It’s your BotFather token, your bot, your audience.
Your data. Your conversations and your knowledge sources stay yours — if Zapito stops earning its keep, you leave with everything.

A provider API key is the one piece of that stack that was only ever plumbing. Will BYOK come back? Honestly: maybe — as an advanced option for agencies and teams that genuinely want agents running on their own provider accounts. But it would be an option for the few, never a setup step for everyone.