<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/bruno-ai-bring-your-own-key-keep-secrets-local-2wyeze0b0" -->

---
title: Bruno AI: Bring Your Own Key, Keep Secrets Local | daily.dev
description: Bruno v4 ships a built-in AI assistant that runs on your own OpenAI, Anthropic, or OpenAI-compatible key rather than a Bruno-hosted model. It offers a chat...
canonical: https://daily.dev/posts/bruno-ai-bring-your-own-key-keep-secrets-local-2wyeze0b0
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Bruno AI: Bring Your Own Key, Keep Secrets Local | daily.dev
og:description: Bruno v4 ships a built-in AI assistant that runs on your own OpenAI, Anthropic, or OpenAI-compatible key rather than a Bruno-hosted model. It offers a chat...
og:url: https://daily.dev/posts/bruno-ai-bring-your-own-key-keep-secrets-local-2wyeze0b0
og:image: https://api.daily.dev/og/posts/2wyEze0B0.png
og:image:alt: Bruno AI: Bring Your Own Key, Keep Secrets Local
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Bruno AI: Bring Your Own Key, Keep Secrets Local

**[Bruno Blog](https://daily.dev/sources/usebruno)** · 7 min read · 1 upvotes · 0 comments

## Summary

Bruno v4 ships a built-in AI assistant that runs on your own OpenAI, Anthropic, or OpenAI-compatible key rather than a Bruno-hosted model. It offers a chat sidebar, a Generate feature for docs/scripts/tests, and inline scripting autocomplete, all going through a redaction layer that strips sensitive headers, secret variables, and response body values (replacing them with type placeholders) before anything is sent to the model. The AI feature is off by default, keys are stored in the OS keychain, and every redaction rule can be toggled or extended with custom names. Future plans include a unified UI across surfaces, curl-to-request import, debugging assistance, and OpenAPI-based collection design.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://blog.usebruno.com/bruno-ai-assistant>

## Questions this post answers

### How does Bruno's AI assistant keep API secrets from being sent to OpenAI or Anthropic?

Bruno redacts sensitive data before it is serialized into any prompt. Headers like Authorization, Cookie, Set-Cookie, X-API-Key, and any name matching patterns like token, secret, or password are replaced with a redacted placeholder. Response bodies are sent as shape only (types like string or number, not real values), and variables marked secret:true keep their name visible but never their value.

_Teams weighing AI features against compliance risk can compare tool security postures like this on daily.dev._

### Which AI providers can I use with Bruno's built-in assistant?

Bruno supports OpenAI (GPT-4o, GPT-4o Mini, GPT-5, GPT-5 Mini) and Anthropic as first-class providers, plus any OpenAI-compatible endpoint such as a locally running Ollama instance, Together, or a self-hosted vLLM server. You supply your own API key and base URL, and there is no Bruno-hosted model in the loop.

_Developers picking a self-hosted or bring-your-own-key LLM setup follow updates like this on daily.dev._

### Is Bruno's AI assistant enabled by default when I install it?

No, the entire AI feature ships behind a single toggle in Preferences and is off by default on install. When disabled, no context is built, no API key is read, and no request is sent out. Autocomplete has its own separate toggle so chat can be used without inline ghost text suggestions.

_Anyone auditing which dev tools phone home by default can track disclosures like this on daily.dev._

## Similar posts on daily.dev

- [Bring Your Own Key \(BYOK\) Is Coming Soon to JetBrains AI](https://daily.dev/posts/bring-your-own-key-byok-is-coming-soon-to-jetbrains-ai-odadpu214) · JetBrains · 0 upvotes · 0 comments
- [Bring Your Own Key \(BYOK\) Is Now Live in JetBrains IDEs](https://daily.dev/posts/bring-your-own-key-byok-is-now-live-in-jetbrains-ides-b8lg34y7n) · JetBrains · 0 upvotes · 0 comments
- [BYOK: Use Your Own AI Models in ABP Studio AI Agent](https://daily.dev/posts/byok-use-your-own-ai-models-in-abp-studio-ai-agent-ijlgawowo) · We Are .NET · 0 upvotes · 0 comments

---

Tags: [#llm](https://daily.dev/tags/llm), [#testing](https://daily.dev/tags/testing), [#data-privacy](https://daily.dev/tags/data-privacy)

[View this post on daily.dev](https://daily.dev/posts/bruno-ai-bring-your-own-key-keep-secrets-local-2wyeze0b0)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Bruno AI: Bring Your Own Key, Keep Secrets Local","url":"https://daily.dev/posts/bruno-ai-bring-your-own-key-keep-secrets-local-2wyeze0b0","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/bruno-ai-bring-your-own-key-keep-secrets-local-2wyeze0b0"},"datePublished":"2026-08-31T14:38:38.446Z","dateModified":"2026-09-14T09:34:52.112Z","description":"Bruno v4 ships a built-in AI assistant that runs on your own OpenAI, Anthropic, or OpenAI-compatible key rather than a Bruno-hosted model. It offers a chat...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c7cfd1a4b51cfcd95607e1387dd729ea?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c7cfd1a4b51cfcd95607e1387dd729ea?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Bruno Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Bruno Blog","logo":"https://media.daily.dev/image/upload/s--n6YntNuw--/f_auto,q_auto/v1787469611/logos/usebruno?_a=BAMAMicg0","url":"https://daily.dev/sources/usebruno"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/bruno-ai-bring-your-own-key-keep-secrets-local-2wyeze0b0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"llm,testing,data-privacy","timeRequired":"PT7M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Bruno Blog","item":"https://daily.dev/sources/usebruno"},{"@type":"ListItem","position":3,"name":"Bruno AI: Bring Your Own Key, Keep Secrets Local"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/bruno-ai-bring-your-own-key-keep-secrets-local-2wyeze0b0#faq","mainEntity":[{"@type":"Question","name":"How does Bruno's AI assistant keep API secrets from being sent to OpenAI or Anthropic?","acceptedAnswer":{"@type":"Answer","text":"Bruno redacts sensitive data before it is serialized into any prompt. Headers like Authorization, Cookie, Set-Cookie, X-API-Key, and any name matching patterns like token, secret, or password are replaced with a redacted placeholder. Response bodies are sent as shape only (types like string or number, not real values), and variables marked secret:true keep their name visible but never their value. Teams weighing AI features against compliance risk can compare tool security postures like this on daily.dev."}},{"@type":"Question","name":"Which AI providers can I use with Bruno's built-in assistant?","acceptedAnswer":{"@type":"Answer","text":"Bruno supports OpenAI (GPT-4o, GPT-4o Mini, GPT-5, GPT-5 Mini) and Anthropic as first-class providers, plus any OpenAI-compatible endpoint such as a locally running Ollama instance, Together, or a self-hosted vLLM server. You supply your own API key and base URL, and there is no Bruno-hosted model in the loop. Developers picking a self-hosted or bring-your-own-key LLM setup follow updates like this on daily.dev."}},{"@type":"Question","name":"Is Bruno's AI assistant enabled by default when I install it?","acceptedAnswer":{"@type":"Answer","text":"No, the entire AI feature ships behind a single toggle in Preferences and is off by default on install. When disabled, no context is built, no API key is read, and no request is sent out. Autocomplete has its own separate toggle so chat can be used without inline ghost text suggestions. Anyone auditing which dev tools phone home by default can track disclosures like this on daily.dev."}}]}
```

