Subpool
Self-hosted control plane for AI subscription quota allocation and governance. Pool authorized subscription and API accounts, issue employee-specific keys, monitor quota and account health, and expose a unified OpenAI-compatible API. Upstream credentials are encrypted and no conversation content is ever stored.
Integrated lazy cat oidc login ##Core Features - Combine multiple authorized subscription accounts and API accounts into a resource pool to expose a unified OpenAI compatible interfaces (Responses and Chat Completions). - An independent key is issued to each employee, which can be individually restricted, expiration time set, and revoked at any time. - Priority should be given to consuming subscription quotas, and when subscriptions are exhausted, they will automatically fall back to paid API accounts, without employees realizing it. - Account health, remaining quota, and reset quota are clear at a glance, and the distribution relationship between key and account can be audited throughout the entire process. - Upstream credentials are stored encrypted;Subpool never saves any prompt words, replies, or source code. ##How to use 1. Open the app after installation and click ** on the login page to log in with LazyCat account ** Button, you can directly enter the console after authorization without entering the account password. 2. Access the account on the **Accounts** page: - Codex subscription account: Select the device code to authorize, and copy the one-time Captcha to the OpenAI page for confirmation (Device code login needs to be enabled in ChatGPT security settings); - OpenAI-compatible account: Directly fill in the Base URL and API Key. 3. Create a **Pool**(resource pool) and add the account to the pool. 4. Create an employee **API Key**, and configure `https://<this application domain name>/v1` and the key to the employee's computer's You can start using Codex (`~/.codex/config.toml`). ##Data and Security Notes - The management console is protected by Lazy Cat Micro Service Login Protection; the data plane API (`/v1/*`) is directly called by employee programs. It is authenticated by Subpool's own API Key and does not need to log in through lazy cats. - All data is saved in the local application private directory (PostgreSQL) before it is cleared when uninstalling the application. - Applications require access to the Internet to connect to upstream services such as OpenAI.
