GILD verdict
Choose Together AI for open-weight models behind an OpenAI-compatible API, billed per token from a prepaid balance, with a path to reserved capacity.
Test tool calls and long prompts on each model first, pin only models Together serves serverless, and keep a second host for traffic that cannot take a 429 or a retired model.
Together AI
Inference Hosting by Together AI
−49 NegativeFit and limits
Who it fits
- You want open models from several labs through one API that follows the OpenAI REST API and SDKs, so an existing app switches by changing the API key and base URL.
- You want to start on serverless with no minimum cost and move steady traffic to provisioned throughput or a dedicated endpoint without rewriting the app, since all three use the same inference APIs.
- You want third-party open models such as DeepSeek served on the host's own infrastructure, which Together says do not call out to the model author.
- You also fine-tune open models, with LoRA or full fine-tuning, and want the tuned model served on a dedicated endpoint by the same vendor.
Where it falls short
- Tool calling and request parameters break on some models. Kilo Code had trouble making edits on DeepSeek-V4-Flash-0731 on together.ai (Sep 17, 2026), gpt-oss-120b through ChatTogether failed with a 400 once tools were added (Aug 20, 2025), and the OpenHands evals team moved Qwen3-Coder-Next to OpenRouter after a tools error through LiteLLM (Feb 4, 2026).
- Serverless models change. A developer reports Together's notice emails deprecating GLM-5.1 on July 10, 2026 with no upgrade path, MLCommons' benchmark scoring broke twice when annotator models left serverless, and GoodParty.org's fallback model was never served serverless.
- Serverless performance is best-effort, with 429 or 503 responses when demand is high. A G2 reviewer with bursty voice-agent traffic hit 429s at peak (Oct 21, 2026), and an OpenRouter user saw repeated stream errors from Together (Sep 13, 2026).
- Audit records are scoped to dedicated endpoints. Of the 417 pages Together's documentation index listed on Nov 1, 2026, none uses the term audit log, and audit trail appears on feature pages such as SSO, cluster OIDC and rollouts.
Implementation reality
Match each workload to an inference mode
Put bursty and low-volume traffic on serverless, which bills per input and output token with no minimum. Move steady traffic for GLM-5.3, GLM-5.3 Flash, DeepSeek V4.1 Flash, GLM-5.2 or Kimi K3 to provisioned throughput through sales, or serve any supported model on a dedicated endpoint billed by the minute per replica.
Test every model you pin
Run your real tool definitions, structured-output requests and longest prompts against each model on Together before production, through the client or framework you ship. Confirm the model is in the serverless catalog, since serverless and dedicated inference support different sets of models.
Fund credits and plan for limits
Keep the prepaid balance above zero, since API access is suspended at zero and the cut-off is not an exact cap. API keys have no spending limits of their own, so track spend per service yourself, and add retries with backoff for 429 and 503 responses.
Set data handling and sign-in
Turn prompt storage off in the organization's privacy settings if prompts must not be kept, and decide whether to allow passthrough models, which send data to the upstream provider. Buy a Scale or Enterprise account if your identity policy requires SSO.
What to verify before you buy
Limits and billing
- Rate limits: Together's serverless performance is best-effort. When demand is high, Together may limit requests, and you may receive 429 Too Many Requests or 503 Service Unavailable responses.
- Contracts: purchased rate limits under an active Enterprise or Scale contract stay in place until the contract expires, and when a model is in especially high demand Together may apply custom rate limits or access restrictions to that model.
- Batch: batch jobs run against a separate rate-limit pool, with up to 50,000 requests per batch, up to 100 MB per input file, up to 10 MB per line, which inline base64 images count toward, and up to 30B tokens enqueued per model at any time. The completion window defaults to 24h, cannot be changed and is a best-effort target.
- Spend: the zero-balance cut-off does not guarantee an exact spending cap. Metering has a short delay, so some usage can arrive after the balance reaches zero and the customer remains responsible for it. API keys do not currently support independent spending limits, and organization and project budgets and spend alerts are planned features that are not currently available to configure.
- Provisioned throughput: PTUs reserve capacity for the contract term. Unused PTUs don't roll over and aren't refunded or credited, and overage traffic is not covered by the provisioned throughput SLA.
Models
- Together Link is currently in beta. By default, its sessions use the auto router, which picks a Together AI model for each request and, in Claude sessions with an Anthropic API key, sends the most difficult requests to Claude Opus. To choose a model, Together Link lists available models, context limits and pricing, and a session is pinned to a single model by passing --main with the model ID before the tool name. Together Link refuses or ignores a model flag placed after the tool name.
- Catalog: Together's serverless catalog lists chat models by API model string, including zai-org/GLM-5.3, openai/gpt-oss-120b and moonshotai/Kimi-K3. Serverless and dedicated model inference support different sets of models.
- Provisioned throughput covers GLM-5.3, GLM-5.3 Flash, DeepSeek V4.1 Flash, GLM-5.2 and Kimi K3, with a reliability commitment that at least 99% of eligible requests complete successfully each month.
Data, security and sign-in
- Storage: by default Together stores prompts and responses and may use them for product improvements. Organization admins can turn storage off to enable zero data retention. Data sharing for training other models is opt-in and not enabled by default.
- Passthrough: some Together models are offered as passthrough. Together forwards prompts and responses directly to the upstream provider, and data is handled under that provider's own data policy. A separate organization-level toggle controls passthrough models, independent of the training opt-in.
- Certifications: the trust center lists SOC 2 and ISO 27001:2022 under Compliance, with a SOC 2 Type 2 Report and an ISO 27001:2022 Certificate among its resources. Together says it completed a SOC 2 Type 2 examination, an independent audit spanning several months (Jul 8, 2025).
- SSO: Together supports SSO via SAML and OIDC with Google Workspace, Okta, Microsoft Entra and JumpCloud, for Scale and Enterprise accounts. SCIM provisioning is listed under What's coming.
- Audit: for dedicated endpoints, Together lists an endpoint's audit and lifecycle events newest first, merging endpoint events with those of every deployment under the endpoint, and can filter to one subject, such as a rollout. None of the 417 pages in Together's documentation index on Nov 1, 2026 uses the term audit log.
Region and integrations
- Region: on Together's geo-specific endpoint there is no fallback outside the selected geography. If a model isn't available there, the request fails with a 404 error of type region_unavailable.
- Hosting: models from third-party authors such as DeepSeek, Qwen and Mistral that Together hosts run on Together's own infrastructure and do not call out to the model author. DeepSeek models are hosted in Together's North America data centers.
- SDKs: Together's API is compatible with the OpenAI REST API and SDKs. The Vercel AI SDK's @ai-sdk/togetherai provider, LiteLLM 1.100.0 and later, and LangChain's langchain-together package, for chat models and embeddings, support Together.
What to measure in your pilot
- Retest tool calling on each pinned model every month, and move a model to a dedicated endpoint or another host when a test fails twice.
- Watch for Together's deprecation emails and check the serverless catalog before each release, and keep a replacement model tested for every pinned one.
- Ask Together in writing for an organization-wide audit log and a SCIM date before a security review that requires them.
Sources
- Official documentation
- 24
- Public source
- 8
- Together AI docs: Billing and credits
- Together AI docs: Serverless overview
- Together AI docs: Serverless models
- Together AI docs: Inference overview
- Together AI docs: Provisioned throughput
- Together AI docs: Dedicated endpoints overview
- Together AI docs: Dedicated endpoints pricing
- Together AI: GLM-5.3 model page
- Together AI docs: Batch inference
- Together AI docs: Fine-tuning overview
- Together AI docs: GPU clusters overview
- Together AI docs: Billing spend controls
- Together AI docs: Serverless rate limits
- Together AI docs: Privacy and security
- Together AI docs: Geo-specific inference
- Together AI Trust Center
- Together AI docs: Single sign-on
- Together AI blog: SOC 2 Type 2 (Jul 8, 2025)
- Together AI API reference: List endpoint events
- Together AI CLI reference: Endpoints
- Together AI docs: Together Link
- Together AI docs: OpenAI compatibility
- Together AI docs: Vercel AI SDK quickstart
- Together AI docs: Third-party integrations
- Hacker News, joshheitzman: Kilo Code edits on together.ai (Sep 17, 2026)
- langchain-ai/langchain-together issue #19: gpt-oss-120b fails once tools are added (Aug 20, 2025)
- OpenHands/software-agent-sdk issue #1899: move qwen3-coder-next from together.ai to OpenRouter (Feb 4, 2026)
- earendil-works/pi issue #6132: Together.ai models to be deprecated July 10 (Jun 28, 2026)
- MLCommons, modelbench issue #1045: Find replacement for missing annotator model (May 20, 2025)
- GoodParty.org, omni pull request #435: Migrate the LLM layer fully off Together AI onto Anthropic (Jun 26, 2026)
- G2 reviews of Together AI on AWS Marketplace (Oct 21, 2026)
- r/openrouter, GT95: Upstream error from Together during an agent task (Sep 13, 2026)