Skip to main content

​
Bring Your Own Keys (BYOK)

Deepline lets you plug in API keys you already own and use them directly through the CLI, API, and agent skills. There is no monthly platform fee, no per-call markup, and no middleman billing. You pay your providers at their published rates. Deepline handles orchestration, waterfall logic, and data normalization on top of whatever keys you connect.
AttributeValue
BYOK cost$0/month, 0% markup
Providers with API key support26
Providers with OAuth support3 (Attio, HubSpot, Salesforce)
Alternative (no keys)Managed credits from $0.08/credit
Key storageAES-256 encrypted, per-workspace, never shared across workspaces
Mix and matchYes — BYOK for some providers, managed credits for others
Setup timeUnder 2 minutes per provider

​
What BYOK means for your GTM budget

Not every team should use BYOK. Here is a straight breakdown of who benefits most and who should skip it. Best for teams with existing provider contracts. If you already pay Apollo, Crustdata, Hunter, or People Data Labs directly, BYOK lets you route those same keys through Deepline without double-paying. You keep your negotiated rates, your existing usage dashboards, and your billing relationship. Deepline adds waterfall logic and unified output schemas on top — nothing changes on the provider side. Best for cost-conscious operators. Clay charges 185/monthontheirExplorerplanand185/month on their Explorer plan and 485/month on Pro before you buy any enrichment credits. ZoomInfo starts at 15,000/year.WithBYOK,yourDeeplineplatformcostis15,000/year. With BYOK, your Deepline platform cost is 0/month. Your only spend is whatever you pay providers directly at their published per-call rates. For a team running 5,000 enrichments per month across 3 providers, the difference can be 2,000−2,000-4,000/year in platform fees alone. Best for testing multiple providers side-by-side. When you are evaluating whether Crustdata or People Data Labs returns better company data for your ICP, BYOK lets you run both through the same waterfall and compare hit rates without committing to either vendor’s annual contract. Connect free-tier keys from each, run a sample batch, and measure coverage before you buy. Not ideal if you have zero provider accounts. If you do not have any existing API keys and want to start enriching immediately, use managed credits instead. Managed credits start at $0.08/credit, require no provider signups, and work across all 26+ providers. You can switch individual providers to BYOK later as you negotiate direct contracts.

​
Supported providers

All 26 API-key providers listed below accept BYOK connections. Connect any combination.

​
Enrichment and prospecting

ProviderEnv var nameAuth typeCategory
AdyntelADYNTEL_API_KEYAPI keyAd intelligence
AI ArkAI_ARK_API_KEYAPI keyPeople search, email finder
ApolloAPOLLO_API_KEYAPI keyPeople + company enrichment
ContactOutCONTACTOUT_API_KEYAPI keyEmail + phone finder
CrustdataCRUSTDATA_API_KEYAPI keyCompany + people enrichment
DropleadsDROPLEADS_API_KEYAPI keyLead generation
ExaEXA_API_KEYAPI keyAI-powered search
ForagerFORAGER_API_KEYAPI keyData storage + enrichment
HunterHUNTER_API_KEYAPI keyEmail finder + verification
IcypeasICYPEAS_API_KEYCustomEmail finder + verification
LeadMagicLEADMAGIC_API_KEYAPI keyEmail + company enrichment
ParallelPARALLEL_API_KEYAPI keyAI enrichment
People Data LabsPEOPLEDATALABS_API_KEYAPI keyPeople + company data
ProspeoPROSPEO_API_KEYAPI keyEmail finder
RocketReachROCKETREACH_API_KEYAPI keyContact lookup
ZeroBounceZEROBOUNCE_API_KEYAPI keyEmail verification
ProviderEnv var nameAuth typeCategory
ApifyAPIFY_API_KEYBearerWeb scraping platform
BuiltWithBUILTWITH_API_KEYAPI keyTechnographic data
CloudflareCLOUDFLARE_API_TOKENBearerWeb crawling
FirecrawlFIRECRAWL_API_KEYBearerWeb scraping + extraction
Google SearchGOOGLE_SEARCH_API_KEYAPI keyCustom search API

​
Outbound sequencing

ProviderEnv var nameAuth typeCategory
HeyReachHEYREACH_API_KEYAPI keyLinkedIn outreach
InstantlyINSTANTLY_API_KEYBearerEmail sequencing
LemlistLEMLIST_API_KEYBasicEmail sequencing
SmartLeadSMARTLEAD_API_KEYAPI keyEmail sequencing

​
CRM (OAuth)

These 3 providers use OAuth instead of API keys. Connect them through the Deepline dashboard.
ProviderAuth typeConnection method
AttioOAuthDashboard one-click
HubSpotOAuthDashboard one-click
SalesforceOAuthDashboard one-click

​
Internal

ProviderEnv var nameAuth typeCategory
Deepline WaterfallWATERFALL_API_KEYAPI keyMulti-provider waterfall

​
How to connect a key

Connect a provider key in one command: 
deepline keys set apollo --key "your-apollo-api-key-here"
Verify the connection: 
deepline keys list
Expected output: 
Provider        Status     Added
apollo          active     2 minutes ago
hunter          active     1 day ago
leadmagic       active     3 days ago

​
Option 2: API

Set a key programmatically via the REST API: 
curl -X POST https://code.deepline.com/api/v2/keys \
  -H "Authorization: Bearer $DEEPLINE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "provider": "apollo",
    "apiKey": "your-apollo-api-key-here"
  }'

​
Option 3: Environment variable

For local development or self-hosted deployments, set the env var directly: 
export APOLLO_API_KEY="your-apollo-api-key-here"
The env var names match the table above exactly. When Deepline detects a provider env var, it uses that key automatically — no additional configuration needed.

​
Connecting multiple providers

Connect as many providers as you need. Each key is stored independently: 
deepline keys set apollo --key "apo_..."
deepline keys set hunter --key "hun_..."
deepline keys set leadmagic --key "lm_..."
deepline keys set zerobounce --key "zb_..."
All 4 keys are now available for waterfall enrichment. When you run a person_search_to_email_waterfall, Deepline queries each connected provider in sequence and returns the first verified hit.

​
Mix and match: BYOK + managed credits

You do not have to choose one model for all providers. Deepline supports mixing BYOK and managed credits at the provider level within the same workspace. Example setup:
ProviderModeWhy
ApolloBYOKAlready on an annual contract
CrustdataBYOKUsing their free tier for testing
HunterManaged creditsNo existing account, low volume
People Data LabsManaged creditsEvaluating before committing
LeadMagicBYOKNegotiated bulk rate
ZeroBounceManaged creditsOnly need occasional verification
This means a single waterfall enrichment can use your Apollo key for step 1, managed credits for Hunter in step 2, and your LeadMagic key for step 3. Deepline handles the routing transparently. You see which mode was used for each step in the enrichment response. Switching modes per provider is instant. Connect a BYOK key and that provider switches from managed credits to your key on the next API call. Remove the key and it falls back to managed credits automatically.

​
Cost comparison for a typical workflow

Consider a monthly workflow of 2,000 email enrichments using a 3-provider waterfall:
ModelPlatform feeEnrichment costTotal
Full BYOK (3 keys)$0/moProvider rates only (~80−80-200)~80−80-200/mo
Full managed credits$0/mo~160−160-320 at 0.08−0.08-0.16/credit~160−160-320/mo
Mixed (2 BYOK + 1 managed)$0/mo~100−100-240~100−100-240/mo
Clay Explorer (comparable)$185/mo+ Clay credits$185+/mo
The Deepline platform fee is $0/month regardless of which mode you use. The difference between BYOK and managed credits is purely the per-enrichment cost — and whether you want the operational overhead of managing provider accounts directly.

​
Key storage and security

Every API key stored through Deepline is:
  • Encrypted at rest using AES-256 encryption
  • Scoped to your workspace — keys are never shared across workspaces or tenants
  • Never logged — keys are redacted from all application logs and error traces
  • Deletable on demand — remove a key instantly via CLI (deepline keys delete apollo) or API
Keys are stored in your workspace’s dedicated database. They do not pass through shared infrastructure or caching layers. When Deepline makes a call to a provider using your key, the request goes directly from the Deepline execution engine to the provider API — there is no proxy that stores or inspects the key beyond the initial decryption.

​
Frequently asked questions

Deepline respects provider rate limits. If your Apollo key is rate-limited, the waterfall moves to the next provider in the chain (e.g., Hunter or LeadMagic). If all BYOK providers are exhausted, the enrichment returns a partial result with a clear status code. Deepline does not retry rate-limited requests automatically — it moves forward to avoid wasting your quota.
No. For a given provider, your workspace uses either your BYOK key or managed credits — not both simultaneously. If you connect a BYOK key for Apollo, all Apollo calls use your key. Remove the key to fall back to managed credits. This prevents ambiguous billing where you cannot tell which key was charged.
No. Waterfall enrichment works with managed credits, BYOK keys, or any combination. The waterfall engine is agnostic to how each provider is authenticated. If you have zero keys connected, managed credits handle everything. If you have 3 BYOK keys and 2 managed-credit providers, the waterfall uses all 5 in the configured priority order.
Every enrichment response includes a provider_chain array showing which providers were called, in what order, and which one returned the final result. For BYOK providers, the response shows auth_mode: "byok". For managed credits, it shows auth_mode: "managed". You can audit exactly where every credit or API call went.

Quick Start

Install Deepline and run your first enrichment in 60 seconds.

Pricing Schedule

Full per-endpoint pricing for managed credits across all providers.

API Reference

REST API documentation for keys, enrichment, and waterfall endpoints.

Waterfall Enrichment

How multi-provider waterfall logic works under the hood.