Send a request. Pick a route.
Different clients enter through Ferry. Each request goes to an eligible upstream.
Connect your clients to the accounts you already have. Ferry handles routing, waiting and recoverable failures.
Requests, responses, fallback, queues, logical models and reset credits.
Different clients enter through Ferry. Each request goes to an eligible upstream.
Streamed text, tool arguments and completion events travel back to the same client.
A temporary failure on one account can move the request to a compatible backup.
Hold requests while capacity is unavailable; release them in order when it opens.
Your app calls a logical model such as work. Change the underlying model, account or route in Ferry without changing client configuration. Hermes is one example.
Configure logical models →AutoReset redeems available Codex reset credits within the expiry threshold and records the outcome. Default: 20 minutes before expiry; can be disabled.
Configure AutoReset →Illustrations, not live traffic. Recovery has time and attempt budgets, honors cancellation and cannot splice another upstream stream after visible output is committed.
Keep eligible requests pending within a bounded recovery window.
Use a compatible fallback when the route permits recovery.
Bound active requests and queue traffic at capacity.
Use the Skill and management API to inspect, simulate and apply authorized changes.
Match the endpoint, model and protocol to the task.
Change routes without changing the model name in every client.
Chat, Responses and Messages, within each route’s capabilities.
Keep routing decisions, recovery, usage and cost evidence together.
Create the administrator, add an upstream and issue a client key. No source build or separate database is required.
Installation, backups and upgrades →curl -fsSLo compose.yaml https://github.com/hulkbig/ferry/releases/latest/download/compose.yaml
docker compose up -dOpen localhost:17910 to initialize.
No. Use your own API keys or supported subscriptions. Calls, retries and capability probes can incur upstream charges.
Waiting is bounded by recovery budgets. A client’s Thinking display is not evidence of continuous upstream reasoning.
No. Some account drivers have offline coverage only. Verify tools, streaming and follow-up turns on your own routes.