Fuselee

Controlled power for cloud + AI spend

The fuse that blows so nothing else does.

Connect OpenAI, Anthropic, AWS and Vercel. Set a cap per provider, project or key. Fuselee forecasts the breach, alerts you, and at 100% cuts the key at the provider. Dry-run by default. One-click Resume.

No card for Free. Credentials sealed to the worker’s key, or never leave your network with the agent.

spend this hour

$2.50

cap

$50.00

5% of cap · current streaming

Live sever, on a loop

A runaway loop at 3 a.m. Warn at 50%, forecast at 80%, cut at 100%.

A runaway loop at 3 a.m. Fuselee warns at 50%, forecasts the breach at 80%, and cuts the key at the cap. Twenty seconds, on a loop.

Two ways to guarantee the stop

“Cutoff” means something different per provider. Every connection is labelled with its level, so you always know how hard the stop is.

native

seconds

Native

Fuselee uses the provider’s own admin API: delete or deactivate the key, pause the project, stop tagged instances. In-flight requests may finish; nothing new starts.

OpenAI · Anthropic · AWS · Vercel

proxy

instant

Proxy

Your app calls the Fuselee gateway with a Fuselee-issued key. At the cap the next request gets HTTP 403 before it reaches the provider. Nothing is stored; only model and token counts are metered.

OpenAI · Anthropic

Read the guarantee-level docs →

Three steps, then sleep

  1. 01

    Connect

    Paste a least-privilege admin key for OpenAI, Anthropic, AWS or Vercel, or run the agent in your VPC and keep the key there. Fuselee verifies it before sealing it.

  2. 02

    Set the cap

    A budget per provider, project or single key. Warn at 50%, alert at 80%, act at 100%. Dry-run is on until you disarm it through a three-step confirmation.

  3. 03

    Sleep

    Every five minutes the engine evaluates. Forecasts fire hours ahead. At the cap the key is deleted, deactivated or paused at the provider. One click resumes it.

Pricing

Start free. Upgrade when you need more providers, forecasts, or a team.

Free

$0/mo

One provider, real cutoffs.

  • 1 provider
  • 2 budgets
  • Email alerts
  • Dry-run + sever included
  • Dev Guard & Plan Watch: preview only
Dev Guard
Preview
Plan Watch
Preview
Start free

Solo

$9/mo

Every key you own, forecast ahead.

  • 3 providers
  • Unlimited budgets
  • Slack, Discord & push
  • AI burn-rate forecasts
  • Plan Watch: 5 subscriptions
Dev Guard
Preview
Plan Watch
5 subscriptions
Choose Solo

Pro

$19/mo

Root cause, auto-act, 5-minute sync.

  • All providers
  • Anomaly root cause + auto-act
  • Priority 5-minute sync
  • Outgoing webhooks + audit export
  • Dev Guard: loop killer, cache, session caps
  • Plan Watch: unlimited subscriptions
  • SMS / WhatsApp / voice (coming)
Dev Guard
Included
Plan Watch
Unlimited
Choose Pro

Team

$29/mo

Everything in Pro, for the whole team.

  • 5 seats with roles
  • API access
  • Everything in Pro, Dev Guard + Plan Watch
Dev Guard
Included
Plan Watch
Unlimited
Choose Team

Security · open source

Built to hold the keys that can spend your money

Provider credentials are sealed in the browser to the worker’s public key and never readable by the web app or the database. Row-level security is forced on every table. Every threshold, dry-run decision, sever, resume and plan change is an audit event.

  • libsodium sealed boxes; the master key lives only in the worker
  • Dry-run on by default; disarming is a three-step, server-validated confirmation
  • Never-touch list per budget; skips are logged
  • Self-hosted agent: credentials never leave your network, outbound HTTPS only
  • HMAC-signed outgoing webhooks; rate-limited auth and APIs

FAQ

Can Fuselee spend my money?

No. Credentials are read-only for spend and can only delete/deactivate/pause the connections you registered. Fuselee never creates resources or changes billing.

What happens if the worker is down?

Nothing is cut off and nothing is resumed; budgets simply do not evaluate until it is back. Proxy-mode requests fail closed (503) rather than open.

How fast is a cutoff?

Proxy mode: the next request. Native: within the 5-minute evaluation tick plus a few seconds at the provider. Agent-managed: plus one agent poll (15 s).

Do you see my prompts?

In proxy mode the gateway streams request and response through without storing bodies; it records only model and token counts from the usage block.

Can I export my data?

Pro plans export the audit log as CSV; Team plans read budgets, providers, events and insights over the API.

How do I delete everything?

Deleting a provider cascades to its keys, budgets, snapshots and records. Deleting the organisation removes all of it; sealed credentials are unreadable the moment the row is gone.

More questions →

Get launch updates

One email when Paddle checkout and the hosted agent image go live. No newsletter.

Fuselee: your API bill can’t surprise you anymore