Build with OmniStrat.

Quickstart. Router

Install the TypeScript SDK or hit the API directly. Once you have a Passport and an API key, route any AI model with one call:

# TypeScript SDK
npm install @omnistrat/sdk

// then
import { OmniStrat } from "@omnistrat/sdk";
const client = new OmniStrat({ apiKey: "ost_...", orgId: "org_..." });
const r = await client.route({ prompt: "Hello" });
console.log(r.result);

Or hit the API directly. Two shapes are supported, the native endpoint takes credentials in the body, and the OpenAI-compatible endpoint derives your org from the bearer key:

# Native endpoint - credentials in the body
curl -X POST https://api.omnistrat.ai/api/route \
  -H "content-type: application/json" \
  -d '{
    "org_id": "org_...",
    "api_key": "sk_live_...",
    "prompt": "Hello",
    "model": "claude-sonnet-4-6"
  }'
# -> { ok, provider, model, result, tokens_in, tokens_out, cost_usd, receipt }

# OpenAI-compatible - drop-in for any OpenAI SDK or curl snippet
curl -X POST https://api.omnistrat.ai/v1/chat/completions \
  -H "content-type: application/json" \
  -H "authorization: Bearer sk_live_..." \
  -d '{
    "model": "claude-sonnet-4-6",
    "messages": [{"role": "user", "content": "Hello"}]
  }'

Your org_id and api_key are on your keys page after sign-in. On the OpenAI-compatible endpoint the org is derived from the key, so base_url and the key are the only two things you change.

The Router picks the best provider, applies your org's cost cap, signs into the upstream API on your behalf (or uses your BYOK), and streams the response. Switching models is a single string change.

Quickstart. Passport

Sign a user in from your application. Browser-side JavaScript:

const r = await fetch('https://api.omnistrat.ai/auth/login', {
  method: 'POST',
  headers: { 'content-type': 'application/json' },
  body: JSON.stringify({ email, password })
});
const { token, user } = await r.json();
localStorage.setItem('omnistrat-token', token);

Verify the token in your own service using the public JWKS (no shared secret leaves the Router):

// TypeScript / any service
import { verifyPassport } from './passport-client';
const claims = await verifyPassport(req, env.PASSPORT_JWT_SECRET, {
  routerUrl: 'https://api.omnistrat.ai',  // for revocation check
});
if (!claims) return new Response('unauthorised', { status: 401 });

Authentication patterns

Different surfaces support different auth methods:

Keys, rotation and revocation

Rotate from the Keys & BYOK tab of the admin console, or over the API.

# Rotate the org API key. Owner-level org key only.
curl -X POST https://api.omnistrat.ai/api/rotate-key \
  -H "content-type: application/json" \
  -d '{ "org_id": "org_...", "api_key": "sk_live_..." }'
# -> { "ok": true, "new_api_key": "sk_live_..." }

Usage & pricing schedule

Every meter is per-tier and public. Overages are capped by policy you control. BYOK bypasses the token meter entirely, you settle directly with your provider.

More

The full OpenAPI spec is mounted at /openapi.json. The status page is at /status.html. Questions go to hello@omnistrat.ai.