credential-pooling-analysis

Credential Pooling Analysis

Framework for analyzing API reseller operations that use credential pooling (bulk account creation → free tier exploitation → resell access at markup).

What is Credential Pooling?

Definition: Acquiring many free/trial accounts from a service, pooling their credits/quotas, and reselling access to end-users at a markup.

Common pattern:

User → Reseller API → Credential Pool (100s of accounts) → Official API (Claude/GPT/etc)

Economics:

• Input: Bulk accounts (e.g., 100 Google accounts = $1-2)
• Multiplier: Each account gets $5-10 free credits
• Output: $500-1000 total credits
• Markup: Sell at 50-70% of official API price
• ROI: 50-100x return on account cost

Analysis Framework

1. Identify the Operation

Signals that indicate credential pooling:

✅ Pricing signals:

• Significantly cheaper than official API (30-70% discount)
• Credit-based, not subscription
• "No subscription, just credits" messaging
• Prices that don't match any official tier

✅ Technical signals:

• Unified API for multiple providers (Claude + GPT + Gemini in one endpoint)
• OpenAI-compatible API (drop-in replacement)
• Frequent "maintenance" or "rate limit" messages
• Inconsistent response times

✅ Business signals:

• New/small operation (not official partner)
• Located in regions with cheap bulk accounts (Indonesia, India, etc)
• Telegram/Discord-only support (no official business presence)
• Vague about "how we get access"

2. Scrape and Extract Data

Target pages:

• Homepage (tagline, value prop)
• Pricing page (model list, credit costs)
• Docs (API endpoints, authentication)
• About/Contact (location, team, legitimacy signals)

Use escalation ladder (see cloud-browser-automation skill):

1. Try web_fetch first
2. Try direct curl with headers
3. Try Hermes browser
4. Use Browserbase if Cloudflare-protected

Key data to extract:

{
  "site": "example.com",
  "tagline": "...",
  "models": ["claude-opus-4", "gpt-5", ...],
  "pricing": {"claude-opus-4": "$X per 1M tokens"},
  "features": ["streaming", "openai-compatible", ...],
  "contact": {"email": "...", "discord": "...", "telegram": "..."},
  "location": "...",
  "legal_docs": ["terms", "privacy", ...]
}