Provider API Keys
Your Anthropic, OpenAI, Google, Mistral or Cohere credentials — write-only, never returned
You do not have to store anything here. By default LLMCap runs in pass-through mode: your provider key travels in each request, is used once to reach the provider, and is discarded. Nothing about it is written to our database.
Storing it instead — the Vault — means you are asking us to hold it. It is kept as AES-256-GCM ciphertext with a random 96-bit nonce per entry, decrypted in memory only to sign an outbound call, never returned by the API and never written to a log.
AWS Bedrock cannot be stored here at all. SigV4 signing needs an access key and a secret access key, and this vault holds one value per provider — so Bedrock callers always send the AWS headers with each request.
| Provider | Label | Status | Added (UTC) | |
|---|---|---|---|---|
| anthropic | Anthropic Prod Key | Active | ||
| openai | OpenAI Prod Key | Active | ||
| Google Vertex Key | Expiring | |||
| mistral | Mistral La Plateforme Key | Active | ||
| cohere | Cohere Prod Key | Revoked |
Every change on this page — added or deleted keys — lives only in this browser tab; reloading restores the original sample keys. No value you type here is sent anywhere.