Developers keep their workflow. AIMS meets them inside the editor, the CLI, and Copilot, with entitled models, no key management, and attribution stamped on every request.
Run coding agents through the governed gateway without storing provider keys.
checkout-redesignGPT-4.1714 ms
CLI
AIMS Gateway
Policy Check
Secure Execution
Familiar workflowsUse the tools your developers already know.
Built-in governanceIdentity, policy, and entitlements.
Consistent attributionEvery request carries project and feature context.
02 · Live infrastructure
AI traffic control centre
Every request passes through one control plane before reaching a model.
Incoming requests
VS CodeNative extension1,370 / min
GitHub CopilotBYOK endpoint1,240 / min
CLISecure process685 / min
JetBrainsComing soonPreview · not routed yetPreview
API SDKComing soonPreview · not routed yetPreview
Illustrative traffic · per minute
AIMS GatewayLive
Operational·Governed routing
Entitlement EngineActive
Policy EnforcementActive
Budget ControlsActive
AttributionActive
Short-lived credentialsIssued just in timeTelemetryAttributed per request
Routed to models
GPT-5EntitledEntitled · via OpenAI1,420 / min
ClaudeEntitledEntitled · via Anthropic980 / min
GeminiEntitledEntitled · via Google540 / min
Other OpenAIProvider routeYour OpenAI org key240 / min
Azure OpenAITenant routeYour Azure tenant115 / min
3,295 / minRequests routed
4 of 4Checks on every request
12Requests blocked by policy
03 · Security by design
Central control. No long-lived keys
AIMS keeps provider credentials behind the gateway while developers work where they are fastest.
A developer's request passes through the AIMS Gateway, which authenticates it, scopes it, and issues a
short-lived credential for project-x, feature-x, and claude-sonnet. AIMS uses it to reach the AI provider,
and the credential is revoked automatically when its time to live ends.
Credential control plane
Live
Developer Uses familiar tools (IDE, CLI, Copilot)
Request
AIMS Gateway Central control plane
AIMS confirms who is asking and which project the request belongs to.
Access is limited to the project, feature, and models the developer is entitled to.
A short-lived credential is created at request time, tied to this request's context.
AIMS calls the provider within that scope. Provider keys stay behind the gateway.
Access ends when its window closes, or at once when it is revoked centrally.
Scoped access
AI Provider Access via short-lived credentials
Issued credential (Live)
Project
project-x
Scope
feature-x
Model
claude-sonnet
TTL
08:42Time compressed
Status
Active
Auto revokes
when access expires
Issued just in timeScoped credentials for every request.
Provider keys stay behind AIMSNever exposed to developer machines.
Revoked centrallyAutomatic expiry and centralised control.