LiteLLM
App : A product you use directly
Self-hosted gateway that unifies 100+ providers behind an OpenAI API, with budgets and virtual keys.
The workhorse of self-hosted gateways; pin versions after the March 2026 incident.
Security reflects where data goes, requested permissions and incidents on record at the verification date. It is not a guarantee of zero risk: check the deployment mode and the connections you enable.
What it does, concretely
Managing calls to multiple language model providers usually means juggling different SDKs, authentication patterns, and incompatible request formats. LiteLLM solves this by exposing a single OpenAI-compatible API that covers 100+ providers, from OpenAI and Anthropic to AWS Bedrock, Azure, Gemini, and many more.
In practice, LiteLLM is deployed as a proxy server (via Docker, Helm, or Terraform) in front of your applications. Each request reaches the gateway, which translates it into the target provider's format, applies budget and rate-limit rules, and returns the response in a unified format. An admin dashboard lets you track spend by team, virtual key, or model, and cut off access as soon as a cap is reached.
LiteLLM is aimed at engineering teams and platform teams that want to centralize model access across an entire organization: developers who want to switch providers without rewriting code, managers who need to trace and cap spending, or teams operating in air-gapped environments. The gateway also supports agents via the A2A protocol and MCP servers.
On the other hand, LiteLLM is not suited for general consumers or anyone looking for a graphical interface to chat with a model. Installation and configuration require system administration or DevOps skills. Advanced governance, chargeback, and auto-routing features are reserved for the paid enterprise plan.
What it offers
- ·Unified OpenAI-compatible API for 100+ providers and 1,800+ models, with no code changes required when switching providers.
- ·Virtual keys with budgets and rate limits per key, team, organization, or model, with automatic request blocking when a cap is reached.
- ·Admin dashboard to track spend, requests, and tokens in real time by team, key, or model.
- ·Load balancing and auto-routing to the cheapest or most capable deployment based on request complexity (paid).
- ·Response caching (Redis, S3, GCS) and prompt compression to reduce costs and latency.
- ·Configurable guardrails: PII detection, prompt injection, secret detection, toxicity filtering, via integrations with Presidio, Lakera, Aporia, and others.
- ·MCP gateway to connect MCP servers to any model through the same API, and A2A protocol support for agents.
- ·Enterprise chargeback: attribute every request to a team or business unit for internal billing (paid).
In practice
- Price
- Freemium
- Commercial use
- Commercial use: yes
- Available on
- docker, linux, cli
- Licence
- MIT
Security and data
- Rating
- Security: one caveat, see the card
- Your data
- Data stays local
- Known incidents
- 24 mars 2026 : versions PyPI 1.82.7 et 1.82.8 malveillantes publiées via des identifiants volés (compromission CI/CD Trivy), retirées en quelques heures.
- Maintenance
- Active
- Last release
- 24 October 2026
Links and repository checked on 25 October 2026 · added on 1 August 2023
How to install LiteLLM
docker pull docker.litellm.ai/berriai/litellm:latest && docker run -p 4000:4000 litellm