Blunom Agentic RouterBuilt-in AI Firewall and Real-time TokenOps
Your own AI gateway that routes every model and tool, with governance built in, plus an AI Firewall and real-time TokenOps
EXISTING SDKs
SDKs: OpenAI, Anthropic, and Bedrock
AI FIREWALL
Your policies, enforced on every call and tool request
TOKENOPS
Full audit trail, trace id on every request
ANY MODEL
350+ models across every major provider
Our Customers and Partners
























































AI IS FRAGMENTED
Blunom can help with model routing, governance, tool access controls, and token efficiency.
Compatible with what you already run
Models and Providers
Route across every major provider: OpenAI, Anthropic, Google Gemini, AWS Bedrock, xAI (Grok), DeepSeek, Mistral, and Perplexity. Bring your own trained and open-weight models, too.
Tools
Run governed actions across 100+ integrations in the Blunom Tool Catalog, including Google Workspace, Slack, Salesforce, Snowflake, and more.
SDKs
Use the official OpenAI SDK, the Anthropic SDK, or the AWS Bedrock SDK (boto3). An OpenAPI specification is published for typed client generation.
Point your SDK at Blunom. Keep your code.
The Agentic Router sits between your application and the model providers. You change a base URL and use a Blunom key. Everything else, the request shape, the streaming, the tool-call round-trip, stays exactly as your SDK already does it.
Connect once
Update your existing SDK code to point to Blunom, and bring your own provider keys (BYOK) as integration profiles. Keep your negotiated provider discounts.
Route anything
Use any model from any provider. Your admin chooses which models are enabled, and Blunom handles the credentials, routes each request, and falls back automatically if a provider is unavailable.
Govern everything
Every call passes your AI firewall and content policy, with real-time TokenOps spend governance and observability, and writes one audit row with a trace id.
from openai import OpenAI
from anthropic import Anthropic
openai = OpenAI(api_key="sk-...") # provider keys live in your app
claude = Anthropic(api_key="sk-ant-...")
# plus Bedrock, Gemini, more keys
# no firewall, no spend caps, no audit trailfrom openai import OpenAI
client = OpenAI(base_url="https://app.blunom.ai/api/v1",
api_key="blu_live_...") # provider keys stay in Blunom
resp = client.chat.completions.create(
model="claude-sonnet-4-5", # Claude, through the OpenAI SDK
messages=[{"role": "user", "content": "Draft a Q3 update for jane@acme.com"}],
extra_body={"blunom": {"models": ["claude-sonnet-4-5", "gpt-5.5"]}}, # fallback
)Works with the OpenAI SDK, the Anthropic SDK, and the AWS SDK (Boto3), each with its own Blunom base URL.
Everything a control plane for AI should do
Blunom Agentic Router is a drop-in API that speaks the OpenAI, Anthropic, and AWS Bedrock SDKs. Route across every major model and provider, run governed tool calls across your business apps, and enforce one AI firewall and spend policy on every request. No refactoring.
Route Any Model
One endpoint for every provider, with fallback and a hot-swap when a better model shows up.
Govern Every Call
One firewall, one spend policy, and one audit trail on every request.
Run Tools and Knowledge
The same key reaches approved business apps and knowledge bases.
One API. Every primitive.
One Blunom key and one base URL unlock a full, SDK-compatible API. Every primitive is governed the same way: your AI firewall, your policies, spend caps, and one audit row with a trace id on every call. Add a capability without adding a new trust boundary.
Inference, in the SDKs you already use
- Chat Completions
/v1/chat/completionsOpenAI-compatible chat with streaming and tool calls. Route any chat model without changing your code.
- Messages
/v1/messagesAnthropic-compatible. Point the Anthropic SDK at Blunom and keep the same governance.
- Bedrock
/v1/bedrock/...AWS Bedrock-compatible invoke. Keep boto3, gain the firewall and audit.
- Embeddings
/v1/embeddingsOpenAI-compatible vectors through one governed endpoint.
- Rerank
/v1/rerankCohere-compatible relevance reranking to sharpen retrieval results.
- Models
/v1/modelsList the exact models this key is allowed to call.
Agents, not just models
- Invoke an agent
/v1/agents/{id}/invokeRun a full governed agent (planning, tools, knowledge) and stream the result, like calling a model but with real work done.
- Async runs
/v1/agents/{id}/runsKick off long-running work, then poll /v1/runs/{id} or stream /v1/runs/{id}/events, and cancel anytime. Durable background jobs with live progress.
- Schedules
/v1/agents/{id}/schedulesRun an agent on a recurring cron cadence, under the same governance as an interactive call.
- Discover agents
/v1/agentsList the agents a key can invoke, no copying IDs from a dashboard.
Tools and actions
- Tool catalog
/v1/integrationsList the governed integration actions this key can run.
- Run an action
/v1/integrations/{app}/{action}Call one approved action on a connected app (send a Slack message, run a Snowflake query) with credentials kept server-side and the same policy as a model call. Deterministic, no model required.
Knowledge and memory
- Knowledge search
/v1/knowledge-bases/{id}/searchSemantic search inside an approved knowledge base, access-scoped and opt-in.
- Documents
/v1/knowledge-bases/{id}/documentsAdd and manage the content an agent can ground on.
- Memory
/v1/knowledge-bases/memoryInspect or clear what a key has learned, so you control what persists.
Governance as a primitive
- Guardrails scan
/v1/guardrails/scanRun the AI firewall (prompt-injection detection, PII, credit-card, and SSN redaction) on any text, standalone. Add Blunom's safety check to anything, even flows that never hit a model.
- Usage
/v1/usagePull TokenOps usage and cost by key, model, and team into your own dashboards and FinOps tooling.
Scale and events
- Batches
/v1/batchesOpenAI-compatible bulk execution, governed per key, drained asynchronously for large jobs.
- Webhooks
/v1/webhooksSubscribe to events and receive signed, delivered callbacks so your systems react to runs and governance events.
Every endpoint speaks a standard SDK, enforces your firewall and spend policy, and returns a trace id. One key, one base URL, one audit trail across all of it.
One control point, three teams
For the CTO and platform teams
Integrate once, build on any model, and never rewrite to switch providers or add fallback.
For the CISO and IT compliance
Enforce one AI firewall and policy on every model and tool call, with a complete audit trail for every request across the org.
For the CFO and FinOps
Cap spend per key and per team, see cost by model, and stop surprise bills before they happen.
Built for the people who govern AI
For the CISO
Enforce one AI policy on every model and tool call.
- One AI firewall and content policy enforced on every model and tool request
- Prompt-injection detection and PII, credit-card, and SSN redaction on input and output
- Model and action allow-lists, with a fail-closed opt-in for destructive actions
- A complete audit trail with a trace id on every request
For the CFO
Cap AI spend and see cost by model, without locking in a vendor.
- Hard spend caps per key and per team, enforced before the spend happens
- Cost by model across every provider you connect
- Bring your own provider keys, so you keep your negotiated pricing