Zevium lets developers and agents call APIs with one key and a prepaid organization wallet. Publishers list their APIs with an OpenAPI spec, set prices per endpoint, and earn 95% of each successful paid call. Consumers can try free mock responses before making live calls.
How it works
- Publish — upload an OpenAPI spec. Upstream URL, endpoints, and pricing
(
x-zevium-cost, x-zevium-free-tier) live in the spec. Published specs cannot be edited. New versions replace the spec used by the gateway.
- Discover & call — browse or semantically search the catalogue, inspect response shapes with free mocks, then make live calls
through
/gateway/{org}/{project}/{path} with one API key. Agents get an
MCP endpoint and a machine-readable /discovery index.
- Settle per call — a per-org wallet (Durable Object at the edge) reserves
credits before the proxy, settles on 2xx, refunds on failure. $1 = 10,000
credits; the platform takes 5%, publishers accrue 95% toward payouts.
What's inside
- Metered gateway (Cloudflare Worker) — key verification with edge caching,
per-org wallet DO (reserve → settle/refund), per-key monthly caps and
rotation with grace, RFC 8594 deprecation headers, CORS for browser callers,
generic payment-required action envelopes, keyless
/mock mode, /mcp + /discovery
for agents.
- Control plane (Convex) — projects and immutable spec versions, credit
ledger, usage analytics, publisher earnings, Stripe event reconciliation,
notifications, publisher webhooks (HMAC-signed, retried), semantic catalogue
search (Gemini embeddings + vector index), platform admin.
- Web app (TanStack Start + React 19 + shadcn/ui + Motion) — public
catalogue with try-it playground, CodeMirror spec editor with a two-way
pricing rail and version diffs, org billing with Stripe Checkout, Connect
publisher onboarding, earnings/transfers/payouts, in-app docs at
/docs.
- Auth (Clerk) — orgs, machine API keys with org claims, prebuilt
profile/org management embeds.
Repo layout
apps/web/ # TanStack Start app — all screens
apps/gateway/ # CF Worker: metered proxy, wallet DO, mock, MCP, discovery
convex/ # Convex schema + functions (control plane)
packages/shared/ # OpenAPI parsing, x-zevium-* pricing, validation
e2e/ # agent-browser end-to-end suite (auth, publisher, consumer)
.agents/notes/ # committed agent memory: product, features, architecture, decisions, research
Docs: everything lives in .agents/notes/ — start with the
product overview, roadmap,
features, and architecture.
Security policy: SECURITY.md
Development
pnpm install
pnpm exec convex dev # control plane (needs CONVEX_DEPLOYMENT in .env.local)
pnpm dev # web app on :3000
cd apps/gateway && pnpm exec wrangler dev --port 8787 # gateway
pnpm seed # test user + org ([email protected])
Verification:
pnpm ci:pr # formatting, lint, static checks, types, tests, and build
bash e2e/run-all.sh # browser e2e: auth, publish, consume
pnpm build is the canonical root production build. Supply
CLERK_SECRET_KEY, VITE_CLERK_PUBLISHABLE_KEY, VITE_CONVEX_URL, and
VITE_GATEWAY_URL in the environment, or place them in the ignored
apps/web/.env.production.local. The wrapper derives the full Git SHA,
forwards only the four public build values through Turbo's hashed environment,
and passes the Clerk secret through without caching it. Production output must
never contain dist/server/.dev.vars.
License
WTFPL
