Let your users bring their own API keys. Securely. Login with Deli gives platforms access to user credentials without ever exposing the raw keys.
User stores key
API keys encrypted at rest in Deli vault
Platform integrates
OAuth 2.0 + PKCE, just like Google login
User authorizes
Consent screen — scoped, revocable access
Platform proxies
API calls go through Deli's proxy layer
Key never exposed
Platform never sees the raw key
Three steps. No key management. No liability.
// 1. Redirect to Deli authorization
window.location.href = 'https://portal.withdeli.com/oauth/consent'
+ '?client_id=YOUR_APP&scope=openai';
// 2. Exchange code for token
const token = await fetch('https://api.withdeli.com/oauth/token', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
grant_type: 'authorization_code',
code: authCode,
client_id: 'YOUR_APP',
redirect_uri: 'https://yourapp.com/callback'
})
});
// 3. Proxy API calls — user's key is never exposed
const response = await fetch(
'https://api.withdeli.com/proxy/openai/chat/completions',
{
method: 'POST',
headers: { Authorization: `Bearer ${token}` },
body: JSON.stringify({
model: 'gpt-4o',
messages: [{ role: 'user', content: 'Hello!' }]
})
}
);