BYOK: Bring Your Own OpenAI Key

Two billing modes, one product

Persistent caller memory, transcripts, post-call email summaries, recording, webhooks, and the dashboard work identically on both modes. The only differences are the per-minute platform rate and which AI account is billed for the conversation. See the full pricing page.

How BYOK works

1. 1
   A call comes in (or goes out) on a BYOK number. AgentCall picks up the call on its phone network, exactly like the Managed flow.
2. 2
   AgentCall decrypts your stored OpenAI key just-in-time for that call and opens the Realtime voice session with your key. The encrypted key never leaves AgentCall infra; the decrypted value lives only in the per-call session.
3. 3
   The conversation runs. You see the live AI usage in your own OpenAI dashboard. AgentCall meters call minutes and bills you at $0.10/min on your next Pro invoice.
4. 4
   After the call ends, the transcript, post-call email summary, Memory extraction, contact and brief updates, and any subscribed webhooks fire exactly as they do on Managed. Memory is on for both modes; nothing about the post-call surface changes.

Setup

Three steps from a fresh AgentCall Pro account to a BYOK-enabled number. The dashboard does the same thing under the hood as the curl calls shown below.

curl https://api.openai.com/v1/models \
  -H "Authorization: Bearer sk-proj-..." \
  | grep realtime

API reference

Replace ac_live_xxxxxxxxxxxxx with your AgentCall API key, num_xxxxxxxxxxxx with the target number ID (find it in the dashboard or via GET /v1/numbers), and sk-proj-... with your OpenAI key.

curl -X POST https://api.agentcall.co/v1/numbers/num_xxxxxxxxxxxx/byok/test \
  -H "Authorization: Bearer ac_live_xxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"apiKey": "sk-proj-..."}'

# 200 OK
# { "ok": true, "model": "gpt-realtime" }
#
# 422 Unprocessable Entity (key rejected by OpenAI)
# { "error": { "code": "byok_key_invalid", "reason": "model_not_found",
#              "message": "Key cannot access gpt-realtime in this project." } }

curl -X POST https://api.agentcall.co/v1/numbers/num_xxxxxxxxxxxx/byok/key \
  -H "Authorization: Bearer ac_live_xxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"apiKey": "sk-proj-..."}'

# 200 OK
# {
#   "ok":           true,
#   "numberId":     "num_xxxxxxxxxxxx",
#   "voiceMode":    "byok",
#   "keyPreview":   "sk-proj-...xy12",
#   "configuredAt": "2026-05-18T17:14:08.000Z"
# }

curl -X DELETE https://api.agentcall.co/v1/numbers/num_xxxxxxxxxxxx/byok/key \
  -H "Authorization: Bearer ac_live_xxxxxxxxxxxxx"

# 200 OK
# { "ok": true, "numberId": "num_xxxxxxxxxxxx", "voiceMode": "managed" }

What BYOK does not support yet

Memory on BYOK

Security

Keep reading