# Odile Gate

> An API gateway for AI-built apps, from Odile Labs. Put Gate in front of your database API: every app gets its own key, an allow-list of the calls it may make (for example GET /orders/:id), a per-minute rate limit, and every call, allowed or refused, lands in an audit log you can export as CSV. Ten minutes, no platform team.

## How it works
1. Create a project with your API's base URL and, if it needs one, the secret header it expects. You get an admin key once.
2. Register each app: a name, the calls it may make, and its calls per minute. You get that app's key once.
3. Point the app at https://gate.odilelabs.com/g/<project id>/... with its key. Gate checks the key, the call and the limits, adds your upstream secret, forwards the call and logs it.

## What Gate stores and never stores
Stores: route rules, key hashes (SHA-256), call metadata (time, app, matched route, a hash of the path, status, duration, body size and hash).
Never stores: request or response bodies, query values, headers, raw paths. Upstream secrets are encrypted (AES-GCM).

## Plans
- Free: 3 apps, 10,000 calls a month, 30-day audit history.
- Pro: $29 a month, 25 apps, 1,000,000 calls a month, 365-day audit history.

## Links
- Start: https://gate.odilelabs.com/
- Dashboard: https://gate.odilelabs.com/dashboard
- Publisher: Odile Labs, https://odilelabs.com