Your company pays for AI subscriptions nobody can see, scattered across personal accounts and team plans, and Subpool is the self-hosted control plane that pools that authorized capacity and hands every employee one key with limits you govern. Administrators combine subscription and API accounts into pools behind a single managed endpoint, then allocate employee-specific keys across whichever provider accounts are healthy. The console watches account health, remaining subscription capacity, and when each plan window resets, and routing prefers subscription capacity first, falling back to paid API accounts under the very same employee key when a window runs dry. Rate-limit, expire, or revoke any person's access independently, and keep every key-to-account assignment visible and auditable instead of buried in a shared credential nobody can trace. The employee API speaks OpenAI-compatible Responses and Chat Completions, so existing tools point at your pool unchanged, while aggregate input and output token telemetry is tracked per key in provider-native units. For OpenAI accounts, a Costs API estimate shows the remaining grant balance; Bailian Token Plan accounts display their five-hour, weekly, or monthly quota windows. Upstream credentials stay encrypted, and prompts, responses, and source code are never persisted. One Go service with an embedded console and PostgreSQL runs from Docker Compose, with sign-in on port 8081 and the employee API on 8080. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.