Models & providers
Every model that powers chat, agents, and workflow agent nodes is configured in one settings page. This page covers where models come from, running turns on your own provider key, reasoning effort, the admin model catalog, and what changes on a self-hosted install.
Where models are configured
Models live in Settings › AI Providers. What you see there depends on your role and edition:
| Who | What the page shows |
|---|---|
| Admin | A row of tabs: API Keys, CLI (with its own toggle, one entry per CLI bridge: Claude Code, Codex, Gemini CLI, Mistral Vibe, Cursor), Models, and on the cloud also Execution links and Your keys. |
| Non-admin, cloud | Only the Your keys panel, to run your own turns on your own provider key. |
| Non-admin, self-hosted | An unauthorized notice. Only the administrator configures AI providers. |
The Models tab is the single source of truth for every chat and agent model the platform exposes. Generation models (image, video, sound, speech, music) are handled separately, see Studio.
Platform API-key providers
On the API Keys tab an admin saves one key per provider. Its models then become available wherever a model is picked:
| Provider | Models |
|---|---|
| Anthropic | Claude |
| OpenAI | GPT |
| Gemini | |
| Mistral AI | Mistral |
| DeepSeek | DeepSeek |
| xAI | Grok |
| Perplexity | Sonar |
| Cohere | Command |
| Z.AI | GLM |
| OpenRouter | multi-provider aggregator |
| Qwen (Alibaba) | Qwen |
| Moonshot (Kimi) | Kimi |
| MiniMax | MiniMax |
| TypeSafe (Jev) | Decision model for Classify nodes only, never offered in chat or agent pickers |
A key saved here takes priority over the server's environment configuration; with no saved key, the server falls back to its environment. Saving a key refreshes the model list right away.
Run on your own provider key
In Your keys, paste a key for a provider and press Save key. The provider checks the key when you save it, and a rejected key shows the provider's reason. Then turn on Use my key for that provider. Each row states its route: Runs on your key, Runs on the LiveContext key, or Runs on the LiveContext key (yours is saved). You can switch back at any time, and your key stays saved. OpenRouter and Cohere are not offered here.
On your key, the provider bills you the tokens directly. LiveContext charges a flat fee per agent turn, by the model's price band, and never more than the same turn would have cost on the LiveContext key. These turns appear as Your key in your credit history. Press See the price per turn in the panel to see the current fees.
The fee for each price band is listed under Own-key fee in Billing.
CLI bridge providers
The five bridge providers run a coding-agent CLI on a bridge host instead of calling an API directly: claude-code, codex, gemini-cli, mistral-vibe, and cursor. Claude Code and Codex let you use a Claude or ChatGPT subscription instead of an API key, Gemini CLI logs in with a Google account, Mistral Vibe uses a Mistral API key set on the bridge host, and Cursor uses a Cursor account (a Free Cursor plan only runs the Auto model; the other Cursor models need a paid Cursor plan). Each bridge, picked in the toggle of the CLI tab, has a setup panel (install the CLI, log in, start the bridge, then Verify Connection) and an access panel titled Who can use this bridge.
| Access mode | Who can dispatch through the bridge |
|---|---|
| Disabled | No one, not even the admin. |
| Admin only | Only users with the ADMIN role. This is the default. |
| Allowlist | Only the users you add with Grant access. |
| All users | Every user of this instance. Pair it with a per-user daily quota. |
Max requests per user per day caps each user (leave it empty for unlimited), and Usage today lists the day's activity. Because the default is Admin only, an admin testing a bridge model sees it work while every other user is refused until the mode changes.
An API model is usable the moment its key is saved. A bridge model also needs the CLI to be installed and logged in on the bridge host. Before a bridge provider is offered in a model picker, the bridge is asked for its status (the answer is cached for 60 seconds). A CLI that is missing or logged out is hidden, and if the bridge cannot be reached at all, every bridge provider is hidden rather than guessed at. Regular API providers are never affected.
Reasoning effort
Reasoning effort is one dial with six levels, from lightest to most thorough:
minimal, low, medium, high, xhigh, max.
Only three providers honor it: claude-code, codex, and the direct anthropic API. Gemini CLI and Mistral Vibe expose no usable effort control, and Cursor puts the effort in the model name itself, so the selector is not shown for them, nor for any other provider. Each of the three maps the level to its own setting:
| Provider | Native setting | How levels map |
|---|---|---|
| Claude Code | CLAUDE_CODE_EFFORT_LEVEL | accepts low to max; minimal becomes low. |
| Codex | -c model_reasoning_effort=<level> | accepts minimal to xhigh, so max becomes xhigh. xhigh and max need a codex-max model and drop to high on other models. |
| Anthropic (API) | output_config.effort | depends on the model, see below. |
| Anthropic case | Rule |
|---|---|
| Effort supported at all | Fable / Mythos, Opus 4.5 and above, or Sonnet 4.6 and above. Haiku (through 4.5) has no effort control. |
| minimal | always becomes low; the API has no minimal level. |
| xhigh | needs Fable / Opus 4.7+ or Sonnet 5+; otherwise high. |
| max | needs Fable / Opus 4.6+ or Sonnet 4.6+; otherwise high. |
Precedence when a run executes: a per-conversation or per-run override beats the per-agent setting, which beats the per-model admin default (the Effort column of the Models tab). If none is set, nothing is sent and the provider's own default applies. In the Effort column, - means “no default, let the model decide”.
Vision and attachments
Images and files you attach, and images returned by tools (for example a file an agent opens), are sent inline to the model, and a vision-capable model can see the images. Inline content has a size cap per item:
| Attachment | Inline cap |
|---|---|
| Image | 3.6 MB |
| Other binary or PDF | 256 KB |
Past the cap, the model receives the file's extracted text when there is some, otherwise a placeholder naming the file: it knows the file exists but cannot read its contents. Tool-result images reach the model on both API providers and CLI bridges.
The admin model catalog
The Models tab (Model Configuration) is a sortable, per-row editable list. Its columns include Provider, Tier, Effort, the Recommended star, Price ($/1M) (USD per 1M input and output tokens), and global rate limits (TPM global, RPM global).
| Control | What it does |
|---|---|
| Enabled toggle | Offers or withdraws the model everywhere a model is picked. |
| Display name | Click the name to rename it. |
| Tier | top, high, mid, or budget. A new or custom model defaults to mid. |
| Ranking | Drag to reorder. Each category tab keeps its own ranking. |
| Provider on | Switches a whole provider off without touching the setting of each model, so switching it back on restores your selection. |
| Filters and search | State, provider, and Tier filters, plus Search a model. |
| Bulk actions | Select rows, then Enable, Disable, or Set tier. |
| Not configured | A key icon on a model whose provider has no key yet. It is listed so you can rank and price it, but it cannot run. |
| Add Model | A custom model: Provider and Model ID (required), an optional Display Name, tier, price, and rate limits. It is added at the end of the ranking. |
| Reset / Reset All | Reverts admin changes to the catalog value. Offered only on non-custom rows that were changed. |
Deleting a regular model disables it. Deleting a custom model removes it, since there is no catalog row to fall back to. Per-tenant rate-limit columns exist but stay hidden.
When a model is disabled
Disabling a model does not break the agents, workflow nodes, and chats that already use it. On the Chat / Agent tab a disabled model shows a Replaced by selector: while the model stays disabled, those runs use the chosen replacement instead (and are billed for it). Platform default means the model the platform uses when none is chosen.
Free-plan models (cloud)
On the cloud each row has a Free chip. It decides whether a Free-plan account may spend its monthly credits on chat and agent turns with that model. It is off by default: a Free account then needs a top-up to run the model. If no model on a tab is open to the Free plan, the tab shows a warning, because Free accounts are then refused for that kind of turn.
What ships to self-hosted installs (cloud)
The cloud catalog also carries a CE: auto / CE: on / CE: off chip per row. It decides what the model catalog bundle ships to self-hosted installs, independently of the enabled toggle: auto follows it, on ships the model enabled, off ships it disabled.
Model categories
The Models tab has one pill tab per category, and a model can be enabled in one and disabled in the other:
| Category | Used by |
|---|---|
| Chat / Agent | Chat, agents, and every other consumer of the global catalog. Its ranking is the default order. |
| Browser Agent | Browser Agent runs only. Disabling a model here removes it from those runs. |
Bridge (CLI) providers are hidden from the Browser Agent tab, where ranking or disabling them would have no effect. They still appear on Chat / Agent.
Model execution links
An execution link separates what you are billed for from what actually runs. It maps a billed provider and model to a different execution provider and model, a CLI bridge or another API provider. Credits are still charged at the billed model's price. Leaving the execution model blank reuses the billed model id, shown as same as billed.
| Scope | Applies to |
|---|---|
| ALL | The default, used when no more specific scope matches. |
| CHAT | Chat conversations. |
| WORKFLOW | Workflow agent, Classify, and Guardrail nodes. |
| WEBHOOK | Webhook-triggered runs. |
| WIDGET | Embedded widget conversations. |
| SCHEDULE | Schedule-triggered runs. |
| TASK | Task executions. |
| TASK_REVIEW | Task review executions. |
Resolution checks the exact scope first, then falls back to ALL. Sub-agent runs, the browser agent, and other callers without a scope are reached only by an ALL link. There is at most one link per billed model and scope, and each link can be enabled, disabled, or deleted.
On the Models tab, a model whose exact id is also served by a CLI (Anthropic to Claude Code, OpenAI to Codex, Google to Gemini CLI) has a route button that creates an ALL link to that CLI in one click. Once routed, the button becomes a badge that opens a surface picker. The button turns amber when that CLI cannot run on the bridge host (missing or logged out): runs routed to it would fail until the CLI is fixed or the link is changed. Remember the bridge access policy too: with the default Admin only mode, other users' runs of a routed model are refused.
Self-hosted (CE)
LLM source: Cloud or API keys
On a self-hosted install, Settings > Cloud has an LLM source switch once the install is linked. The API Keys tab shows which source is active:
| Source | Behavior |
|---|---|
| Cloud | API model calls use your linked LiveContext Cloud account. Only the model completions are relayed to the cloud and billed in credits on that cloud account. Tools and traces still run locally. Requires a linked cloud account. |
| API keys | API model calls use the keys configured on this instance. |
CLI bridges have no such switch: they always run on your own bridge host. See Self-hosting to link a cloud account.
The model catalog on a self-hosted install
Each release of the Community Edition ships with the cloud's signed model catalog of that day, applied when the install starts. So a never-linked install still gets the models of its release. A linked install also syncs the latest signed catalog on startup and about every 15 minutes, and the Model catalog bundle control (Update bundle) syncs on demand. The signature is verified before anything is merged, and your own edits and custom models are kept.
Troubleshooting
| Symptom | Cause | Fix |
|---|---|---|
| A model shows a key icon and cannot run | Its provider has no key yet (Not configured). | Save a key for that provider on the API Keys tab. |
| A bridge model works for the admin but other users are refused | The bridge access mode is Admin only, the default. | In Who can use this bridge, choose Allowlist or All users, with a daily quota if needed. |
| A bridge provider is missing from the model picker | Its CLI is not installed or is logged out on the bridge host, or the bridge cannot be reached. The status is cached for 60 seconds. | Fix the CLI, press Verify Connection on its tab, and wait a minute. |
| Your key is saved but turns still run on the LiveContext key (cloud) | Use my key is off for that provider, or your plan is below Team, where saved keys stay read-only. | Turn on Use my key, or upgrade to Team. |
| The model says it cannot read an attached PDF or file | The file is over the inline cap (256 KB for a PDF or other binary), so the model only got its extracted text or a placeholder. | Attach a smaller file, or send the part that matters as text. |
| Switching the LLM source to Cloud fails with "Link a Cloud account before switching to Cloud." (self-hosted) | The install is not linked to a cloud account. | Link it in Settings > Cloud first, see Self-hosting. |