Check any AI API key. We never keep it.
Paste a key. We name the provider, tell you if it works, and show the credit left when the vendor exposes it. The check runs in your browser and talks straight to the vendor.
Your key goes from your browser to the vendor. It does not pass through aicheck.in. We write nothing to disk, to storage, or to a log. Close the tab and it is gone.
What we can read
Most vendors do not let an API key read its own balance. We are honest about which ones do.
| Provider | Key shape | Balance exposed |
|---|---|---|
| OpenRouter | sk-or-… | Yes. Credit left and usage. |
| DeepSeek | sk-… 32 hex | Yes. Balance and currency. |
| xAI | xai-… | Key state only. |
| Hugging Face | hf_… | Token owner only. |
| OpenAI | sk-… | No. Live or dead only. |
| Anthropic | sk-ant-… | No. Live or dead only. |
| Google Gemini | AIza… | No. Quota is not readable. |
| Groq | gsk_… | No. Rate limits only. |
| Mistral, Together, Fireworks, Perplexity | varies | No. Live or dead only. |
If a check says blocked
Some vendors refuse calls made straight from a web page. That is a browser rule called CORS. It is not a bad key.
Most providers here allow the call. Groq is the one that does not. If you see blocked, run the optional proxy on your own machine, tick Use local proxy, and check again. The proxy is 40 lines, keeps nothing, and only talks to vendor hosts. See the README.