Every request leaves a receipt you can re-derive.
Start freeFree is cardless.
Works with the providers you already call:
The answer takes minutes, not a support ticket.
Each request through the gateway writes a receipt — key, model, route, tokens, price — against a frozen, versioned price list.
The proof page
Receipts are hash-chained in order. Alter one row after the fact: Every hash after it broke.
The proof page
recovea-chain-v1f940cf7a…ee038873
Export your receipts and re-derive the chain in your own browser. Verification needs nothing from us.
The chain recipe
recovea-chain-v1f940cf7a…ee038873
The recipe
Full recipe in the ledger documentation, and a chain re-derives — tampered row included — on the proof page.
Four things happen on every call:
Sample month
Every call is priced as it happens, and booked to the key that made it.
Point one base URL at Recovea and the meter starts. Every call is costed against a frozen price list. Your keys, your provider accounts and your code stay unchanged.
Free is cardless.
Sample month
An armed cap sits in the request path, so the call that would cross it is refused before it is forwarded.
Set a ceiling and arm it. The next call over the line is refused with a 402 your code can branch on. The kill-switch is the second brake, on every plan.
Sample month
A Recovea Breaker is a budget one run carries: $240.00. It trips at that line, and stays tripped until a person starts a new run.
Only the calls that name a run in a header carry a Breaker. It tightens the caps above it, never loosens them, and stops that run, not your key and not the runs beside it.
Sample month
Every call writes a receipt into a hash-linked chain that anyone can check without trusting us.
A receipt is written for every call, on every plan, Free included. The chain is published with its recipe, so you can export it and re-derive every hash in your own browser.
A receipt covers what routes through the gateway. Spend outside the path is not metered here.
Designed to fail open: if the gateway degrades, traffic goes straight to your provider. The only stop is a cap you armed.
A count the provider does not report stays empty on the receipt — never guessed.
Your provider keys stay yours: sealed, bound to your workspace, never written to a log.
One line — the base URL. The gateway serves the wire format your client already calls.
14-day free trial, card required. Free is cardless.
Unlimited seats on every plan.