The problem
One leaked key is enough. By the time you wake up, someone else has been running requests on your account for hours.
A spend limit stops the bill.
It also stops your app.
Notifications
Early this morning
Repository
Pushed to a public repo - .env included
1:32 AM
Illustrative scenario. Times and amounts are examples.
How Brello works
Providers
A
Provider A
3 Keys
B
Provider B
1 Key
C
Provider C
Connect
Access Scope
Read Usage
Read Billing
Send Requests
OffRead Usage
Keys found · 4
Synced 2 min ago
| Key | Project | Env | Charged | Status |
|---|---|---|---|---|
| ****3f2a | prod-api | production | $186.20 | Watching |
| ****42df | support-bot | production | $48.75 | Watching |
| ****91bc | web-app | staging | $6.10 | Watching |
| ****5d19 | old-demo | unknown | $0.00 | Unused |
old-demo hasn't been used in 60 days
Unused keys are easy to forget, and easy to leak. Consider revoking it.
Importing 30 days of history
Done
Security
What Brello reads
Token counts
In and out.
Cost per key
From your provider.
Model names
Which ran what.
When it happened
By the minute.
WHAT BRELLO NEVER DOES
Read your prompts
Or outputs.
Spend your money
No requests, ever.
Change your keys
Unless you allow it.
Sell your data
With anyone.
Pricing
Pay for the size of what you run. Nothing more.
Scan
See what's in your usage once.
Free
One-time usage check
Spot unusual spend
Shareable results
Pro
Watched, around the clock.
Early Access
$19
/ Month
Per-key monitoring and leak alerts
Quiet leak savings, every week
Webhook and email alerts
Step-by-step incident guides
Scale
For services that run on AI
$29
/ Month
Everything in Pro
Higher key and spend limits
Priority incident help
Already hit? Get help with your case.
Evidence, the first message, and every reply after. Free during early access.
FAQ
Clear answers about monitoring, provider access, alerts, and what happens when a key is exposed.
No. Your app continues to send requests directly to your provider; Brello never sits in that request path or acts as a proxy. It checks usage from the outside and sends you an alert when something looks unusual, so a Brello alert does not shut down your app.
No. Brello does not collect your prompt text, generated responses, or request bodies. It uses the usage information your provider reports—such as token counts, model names, and cost—to help you understand spending and spot unusual activity.
Brello currently supports OpenAI and Anthropic, with usage monitored per key. We plan to add more providers, starting with services that expose usage at the individual-key level so alerts can point to the credential involved.
Some providers expose per-key usage only through an admin key. When that is required, we recommend creating a separate key just for Brello instead of reusing one tied to your application. You can identify and revoke that Brello connection from your provider whenever you choose.
Brello uses the connected credential to call usage and cost endpoints only. Each request Brello makes appears in your activity log, so you can review its access. Credentials are encrypted, and Brello shows only the last four characters so you can tell keys apart without displaying the secret.
Brello checks provider usage periodically. When a check detects unusual activity, it sends an alert to your configured webhook or email within minutes. Brello does not inspect each API request in real time.
A provider spend limit is a hard stop: once usage reaches the limit, requests can fail for your whole app. Brello watches for unusual usage earlier and identifies the key involved, so you can investigate or revoke that key while leaving the rest of your application running.
We cannot promise a refund; your provider makes that decision. Brello helps you put together a clear case by organizing the usage and charge evidence, preparing the first message to your provider, and keeping the replies together as the case progresses. This help is free during early access.
When you disconnect a provider, its credential is deleted right away and Brello stops checking that connection. If you want to leave Brello entirely, you can ask us to delete your account data at any time.
Brello is in early access now. The pricing shown today is planned pricing and may change before launch. We will share the confirmed pricing with early access members first, before the public launch.
Early access
Get early access updates and be first to know when Brello is ready.
Your answers help us shape Brello. This form never collects API credentials or usage data.
Already hit? Get free help