A tool that cuts your workload in half, but needs your API keys. Deal or no deal?

Honest question for founders and devs in the early stages.

I'm exploring an idea where the tool runs on your own API keys. You bring the keys, the tool does the heavy lifting. No per-seat pricing, no markup on usage.

Keys from services like:

Resend / Postmark (transactional email)
Anthropic / OpenRouter (LLM features)
Plausible / PostHog (analytics)
Cloudinary (media handling)
Upstash (Redis, rate limiting)
Loops / Beehiiv (email marketing)

You plug them in. You pay the provider directly at cost. You revoke anytime.

But here's what I keep going back and forth on

The model makes sense on paper. Cheaper for the user, sustainable for the builder.

But would you actually do it?

Like, would you paste your Resend API key or your Anthropic key into a product built by some indie dev you found on the internet?

Even if the tool saved you hours every week, would you have second thoughts about:

Key theft? What if the builder stores your keys poorly and they leak?
Unexpected usage? What if the tool burns through your credits without you realizing?
Trust? How do you even verify a solo dev is handling your keys responsibly?

I'm genuinely torn. As a dev myself, I understand the hesitation. But I also use tools like TypingMind and Cursor that already work this way, and I never think twice.

So, what's your gut reaction?

🟢 "Already do it, no issues"
🟡 "Would consider it, but I'd need proof the keys are handled safely"
🔴 "Not a chance, too risky"

If you're a "maybe," what would change your mind? Open source? Encryption docs? A big enough time save that you stop caring?

Not pitching anything. Just validating before I build. Your honest take matters. 🙏