# NEXUS AI Providers

AI provider configurations are the model credentials an organization brings to NEXUS AI (bring your own key). The AI Builder and other AI features use them.

## Supported providers

`ANTHROPIC`, `OPENAI`, `GOOGLE`, `COHERE`, `XAI`, `OPENROUTER`, and `CUSTOM` (any OpenAI-compatible endpoint, set with `baseUrl`).

## Routes

| Route | Action |
|---|---|
| `GET /api/ai-providers` | List configurations (keys are not returned) |
| `POST /api/ai-providers` | Add one: `provider`, and `apiKey` or `secretId`, plus optional `model`, `maxTokens`, `temperature`, `baseUrl` |
| `PUT /api/ai-providers/{id}` | Update, including `enabled` |
| `DELETE /api/ai-providers/{id}` | Remove |

All need the `aiProviders.manage` permission (Owner, Admin). Prefer `secretId`, which points at a key already in the secrets vault, over sending `apiKey` directly.

Custom `baseUrl` endpoints must resolve to public addresses; private and internal addresses are rejected.

## Managed AI

Without a key of your own, the AI Builder uses NEXUS-managed models within the plan's daily AI request allowance. See [Plans and limits](/docs/plans.md). The providers available to the Builder are listed at `GET /api/builder/providers`.

## Related resources

- [AI Builder](/docs/builder.md)
- [AI Gateway](/docs/ai-gateway.md)
- [Security](/docs/security.md)