What LMRouter is
LMRouter is an MIT-licensed AI API router written in TypeScript (Hono on Node.js), created in July 2025. It ships in two forms: a self-hostable server you clone and configure with your own provider keys, and a hosted service at api.lmrouter.com with a unified key and prepaid credits. The API surface is wide for a small project: OpenAI-compatible Chat Completions, Responses, image generation and editing, audio, and embeddings, plus an Anthropic-compatible Messages endpoint. The GitHub repository carries an MIT license covering the whole router, server included.
It is effectively a one-person project. A single author wrote 146 of the repo's 148 commits, and the terms of service name "LMRouter Contributors" as the provider under California law. No company entity, address, or registration is disclosed anywhere on the site or docs.
Where LMRouter genuinely wins
Three things deserve plain credit. First, openness: LMRouter is OSI open source and self-hostable. Our gateway and control plane are source-available under BUSL-1.1, which is a weaker openness claim. If your requirement is "fork it and run it under MIT," LMRouter meets it and we do not.
Second, fees. LMRouter adds no markup to model prices ("We do not mark up the price of the models you use"), charges 4.8% + $0.35 only when you buy credits, and passes BYOK traffic through free (pricing). That is one of the cleanest fee structures in this category.
Third, a plainly written privacy policy: prompt content is "a transient pass-through," never used for training, and not stored long-term except temporary caching for stateful features such as Responses-API conversation state (privacy policy).
The state of the project, with dates
The hosted API works: on August 16, 2026, GET /openai/v1/models returned 200 with 65 model entries. Development has been dormant:
- The main repo's last push was September 23, 2025 — about eleven months before this page's verification date.
- The model-catalog repo's last commit was February 7, 2026. Models released after early February 2026 are not in the hosted catalog.
- No GitHub release has ever been published.
- The live catalog's 65 entries (including duplicate aliases such as claude-3-5-haiku-20241022 and anthropic/claude-3.5-haiku) span about 8 providers. The homepage says "hundreds of AI models"; the live list does not support that. There are no video models — the README marks video as coming soon.
None of this proves the service will vanish. It does mean an evaluator should price in continuity risk: one maintainer, no legal entity, no releases, a catalog frozen for six months, and prepaid credits that expire after one year and "may be removed from your account without prior notice."
Three differences that decide this comparison
Routing logic vs. an aggregator
LMRouter is an aggregator: you pick a model ID and it forwards the call. No fallbacks, load balancing, retries, or cost-aware routing appear anywhere in its 22-page docs tree. TrustedRouter routes: provider failover and fallback model lists are built into the routing layer, and meta ids select candidate pools — trustedrouter/auto, cheap, and fast, plus privacy-tier routes. trustedrouter/zdr restricts to providers with contractual zero-data-retention postures; trustedrouter/e2e restricts to confidential-compute providers with provider-side end-to-end encryption (currently Tinfoil and Phala); trustedrouter/eu pins EU-focused providers. Privacy and jurisdiction preferences compose per request. The full list is on /models.
Verification: readable source vs. attested running build
LMRouter's trust model is that you can read the source and, if you self-host, run it yourself. That is real. When you use the hosted service, though, nothing demonstrates that the code at api.lmrouter.com is the code on GitHub, and there are no published certifications, no trust page, and no DPA. TrustedRouter's hosted gateway publishes hardware attestation on three clouds — GCP Confidential Space, AWS Nitro Enclaves, and Azure Confidential Containers — with live endpoints anyone can use to verify that the serving build matches published source and release digests: trust.trustedrouter.com and /security. Realtime inference keeps no durable prompt or output logs; operational metadata (ids, model, tokens, latency, cost, region, key hash) is retained.
Catalog currency and operations
As of August 16, 2026, TrustedRouter's catalog lists 561 model entries (a count that includes our own meta ids) across 49 upstream providers, with exact prices on /models. Our status page publishes a 99.99% availability target with live error-budget burn rates on 5-minute to 24-hour windows, and we freeze monthly benchmark reports — July 2026 covered 274,753 samples across 44 providers and 353 models (/benchmarks/reports). LMRouter documents usage logs for billing and no analytics or observability features.
Fees, on their actual bases
The two fee models sit on different bases, so comparing the percentages directly is wrong. LMRouter charges 4.8% + $0.35 per credit purchase and 0% on inference. TrustedRouter's fee sits on inference: prepaid usage bills at the provider's token price + 5.5%, with a $0.01 per million token floor — a $1.00/M provider price becomes $1.055/M (/pricing). For top-ups of $50 or more LMRouter's total fee load is lower; below $50 the flat $0.35 makes its effective fee the higher one. LMRouter's BYOK passthrough is free; we support BYOK but do not publish a separate BYOK fee. The offsetting LMRouter caveat is the one-year credit expiry.
What we do not claim
- Our attestation covers the gateway build, not downstream model providers. Providers are covered by cited policy and contract tiers; the e2e routes add provider-side confidential compute, and those are the provider's mechanisms, not our attestation.
- Our gateway is not open source. It is source-available (BUSL-1.1, converting to Apache-2.0 four years after each release); the SDKs are Apache-2.0 or MIT. Every line that touches your prompt is public and inspectable.
- We are young: our public repos date from late April 2026 and our benchmark history starts June 2026. LMRouter's repo is nine months older, though inactive.
- We publish no SOC 2 or HIPAA certification today. Neither does LMRouter.