Skip to Content
Control & ConfigurationBYOKProvider Configuration

BYOK Provider Configuration

With BYOK (Bring Your Own Key), you add and configure each provider using your own API keys. This page describes how to set up and manage BYOK providers in Settings → Providers.

Adding a provider

  1. Open Settings → Providers.
  2. Find the provider you want to use (e.g. OpenAI, Azure OpenAI, OpenAI Compatible, Anthropic, Google Generative AI, Google Vertex AI, Mistral AI) in the BYOK list. See BYOK Providers for the full list and descriptions.
  3. Enable the provider (e.g. toggle “Enabled”).
  4. Enter your API key (required). Some providers also let you set a base URL (e.g. for proxies or custom endpoints). For Google Vertex AI, you must also set Project ID and Location in Provider Options, and use a service account key (JSON) as the API key.
  5. Save. You can use Test connection (if available) to confirm the key works.

Your requests to that provider will use your key; you are billed by the provider according to their terms.

API key and base URL

  • API key: Obtain it from the provider’s dashboard or developer site. Store it securely; the app masks it after saving. For Google Vertex AI, paste the full service account key (JSON) from Google Cloud.
  • Base URL: Optional. Use it only if you need a custom endpoint (e.g. proxy or self-hosted API). Leave blank to use the provider’s default URL.
  • Google Vertex AI only: In Provider Options, set Project ID and Location (e.g. us-central1). See Google Cloud Vertex AI  for enabling the API and creating a service account.

Test connection

After saving, use Test connection to verify that the key and optional base URL work. If the test fails, check the key, base URL, and provider status.

Security classification

For each provider you can set a security classification (e.g. Public, Internal, Confidential, Secret). The app uses this to ensure conversations only continue with providers that match the classification of the conversation, helping prevent data from being sent to a provider that does not meet your sensitivity level.

Disabling a provider

Turn the provider off in settings to stop using it. Your saved key and settings remain, but no new requests will be sent to that provider until you enable it again.

For an overview of BYOK and supported providers, see BYOK.

Last updated on
Available ProvidersSecurity Classifications