Product: Andora Shield
Cap AI agent spend with virtual keys, hard budgets, failover, and guardrails — under 10 ms added latency. Change your base URL; keep your code.
Hard budgets, not alerts
Set a cap per key, agent, session, or workspace. Andora stops requests at the limit — including mid-stream on streaming responses.
Keys your agents never see
Agents hold virtual keys. Real provider keys stay envelope-encrypted and are decrypted in memory only when a request is forwarded.
Failover and guardrails
Reroute on errors and rate limits. Block, throttle, or route on policy. Optional prompt firewall for injection and PII patterns.
Also included
Spend attribution
See tokens, cost, model, and latency per virtual key and session.
Kill switch
Revoke a key or freeze the workspace when something goes wrong.
Security controls
Hashed virtual keys, SSRF allowlisting, rate limits — see /security.
Cloud resource provisioning firewalls are on the roadmap — not live. See spend firewall for what ships today vs coming.