SynthHires: AI Agent Orchestration with BYOK & Client-Side Encryption
Agent platform on Cloudflare Workers: bring your own API keys (BYOK), encrypted AES-256-GCM in the browser, with full audit trail and human-in-the-loop.
Agents That Connect Your Data — Without Storing Your Keys
SynthHires is an AI agent orchestration platform with one non-negotiable architectural rule: BYOK (Bring Your Own Keys). Each user connects their own API keys for the models they already pay for, and no key is ever stored server-side: keys are encrypted in the browser with AES-256-GCM (WebCrypto) and decrypted client-side only at the moment a task executes.
The business model reflects it: the platform is free forever, sustained by contextual ads and an optional paid tier that only removes the ads — it grants no extra model access.
Agent Orchestration
A Lead Orchestrator coordinates specialized agents that connect to the user’s data, with two production guarantees:
- Full audit trail: every execution, decision and call is logged for review.
- Human-in-the-loop: high-impact flows pause and wait for explicit approval before executing.
Multi-Provider on the Vercel AI SDK
The AI layer integrates Vercel AI SDK v7 with native adapters for OpenAI, Anthropic, Google, Mistral, Cohere, Perplexity, Groq, DeepSeek, Cerebras and xAI, with OpenRouter as a unified fallback. Tooling is MCP-native (@modelcontextprotocol/sdk): agents expose and consume tools through the Model Context Protocol.
Edge Architecture
The entire platform runs on Cloudflare Workers (wrangler deploy), with an Astro 6 frontend and a React dashboard routed with TanStack React Router:
- Database: Drizzle ORM over Supabase/PostgreSQL with Realtime.
- Vector search:
pgvectorwith an Upstash Vector fallback; caching in memory + Upstash Redis. - Storage: objects in Cloudflare R2.
- Background jobs: Trigger.dev for anything beyond the Edge’s millisecond limits, with retries and queues.
- Email: Resend; payments: Lemon Squeezy (Merchant of Record, optional).
- Documentation: Astro Starlight with
llms.txt, generated and validated by scripts.
Visual stack: Tailwind CSS v4, Radix UI and Framer Motion 12; quality enforced with strict TypeScript, Vitest and deterministic ESLint.
SynthHires proves an agent product can be distributed, private by design and honest in monetization — without a single server holding third-party secrets.