Model provider setup (BYOK)

Orkena is model-agnostic. You bring the keys; the runtime routes and governs the calls.

Supported providers#

• Anthropic
• OpenAI
• Azure OpenAI
• Bedrock
• Private endpoints (any OpenAI-compatible endpoint)

Scoped keys#

Keys are stored encrypted under the tenant envelope, scoped to the specific agent and graph that needs them — never shared across agents. Credential use is itself a policy decision, evaluated before every use.

Configuration#

Open Settings → Model providers:

providers:
  anthropic:
    key: ${ANTHROPIC_KEY}        # encrypted at rest, scoped
    default_model: claude-sonnet-4
  openai:
    key: ${OPENAI_KEY}
    default_model: gpt-4o

Per-model routing#

On an agent node, pin the provider and model:

nodes:
  triage:
    type: agent
    model: anthropic/claude-sonnet-4
  classify:
    type: agent
    model: openai/gpt-4o

Rotating keys#

Rotate per provider without downtime. The rotation is recorded in the ledger; old keys are retired after a configurable grace period.