Are you an LLM? Read llms.txt for a summary of the docs, or llms-full.txt for the full context.
Skip to content
Administration

Provider keys

Your app sends Mubit your Mubit key. Mubit then calls the provider with your provider key, so the calls are on your own provider account.

You add provider keys in the console, under Provider keys. Your app's code doesn't change.

Which providers need a key

The starter credit covers some providers, and the console names them: Get started, for example, reads Calls to {providers} use the starter credit until you add a key.

ProviderWithout your own key
A provider the starter credit coversCalls use the starter credit while it lasts.
A provider it doesn't coverCalls get 403 provider_key_missing.

Once you add your own key for a provider, its calls use your key.

Some options, such as hosted web search, file search and stored prompts, are not available on the starter credit. The error says which, and your own key removes the limit. See Starter credit errors.

Add a key

Only an admin of your organization can add, rotate or delete provider keys. A member sees Ask an admin of {org} to add or change keys., with your organization's name.

  1. In the sidebar, under Workspace, open Provider keys.
  2. Select Add key. The dialog Add a provider key opens.
  3. Choose the Provider: Anthropic, OpenAI, Gemini or OpenAI-compatible.
  4. For OpenAI-compatible, choose the Service: OpenRouter, Groq, Together or Mistral.
  5. Paste the key in API key.
  6. To name the key, enter a Label (optional).
  7. Select Check and save.

Mubit checks the key with the provider before it saves anything. A good key shows Valid. A refused key shows Refused, and nothing is saved.

Each provider takes one key. A provider that has one is off in the Provider menu, with It has a key already. To change the key, rotate it.

The key must be an API key

Paste an API key, not a sign-in token. Subscription sign-ins, such as Claude Pro or Max and ChatGPT, can't be used: the dialog answers Not an API key. A Mubit key there gets Mubit key, and another provider's key gets Wrong provider.

What the page shows

Mubit stores each key encrypted. After saving, only its last 4 characters show.

Each key's row shows details such as its provider, its last 4 characters and its fingerprint: fp and a short hash of the key. Each call's record keeps the fingerprint of the key it used.

While the starter credit covers a provider you have no key for, a box at the top reads Starter credit with Available. Once the credit is used up, it reads Used up: add your own key to keep calling that provider.

Rotate a key

  1. On the key's row, select Rotate.
  2. Paste the new key in New API key.
  3. Select Check and replace.

Mubit checks the new key, then calls the provider with it. Revoke the old key at the provider afterwards.

Delete a key

  1. On the key's row, open the menu next to Rotate.
  2. Select Delete….
  3. Type the key's name, as the dialog asks.
  4. Select Delete key.

Mubit stops calling the provider with that key. Deleting it here doesn't revoke it at the provider: revoke it there too.