> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://developers.alephant.io/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://developers.alephant.io/_mcp/server. # Model Credentials > Add OpenModels API keys, sync their model catalogs, and manage the credentials used by AIvis model features. Model Credentials is where an Admin connects OpenModels API keys to AIvis. Each saved credential stores one encrypted API key, synchronizes the models that key can access, and exposes those models to the rest of the model configuration flow. Adding a credential does not automatically make every model the default model. After the catalog is synchronized, use [Language Models](/aivis/models/language-models) and the capability pages to choose which models are enabled for chat, image generation, video generation, STT, and TTS. ## Before you begin | Requirement | Why it matters | | -------------------- | --------------------------------------------------------------------------------------------------------------------- | | Admin access | Only administrators should add, rotate, refresh, or delete model credentials. | | OpenModels API key | The key is required when creating a new credential. Get it from OpenModels, then store it only in the protected form. | | Approved model scope | Decide which model families the workspace is allowed to use before enabling defaults. | | Network access | AIvis must be able to reach the OpenModels API from the deployment environment. | ## Get an OpenModels API key If your organization already has an OpenModels account, ask the account owner for a workspace-approved API key or for access to create one. If you do not have one yet: 1. Open [OpenModels](https://openmodels.market/). 2. Sign in or create an account for the organization that will pay for model usage. 3. Purchase or activate the model access your AIvis deployment is allowed to use. 4. Create or copy an OpenModels API key from the OpenModels account. 5. Store the key in your team's secret manager until you paste it into AIvis. Use a production-owned key instead of a personal trial key for shared deployments. The same OpenModels account is also where Admins should check balance or recharge when requests report insufficient balance. ## Page overview ![Model Credentials page showing one synchronized OpenModels credential with available model counts, refresh, edit, and delete actions](https://fdr-prod-docs-files-public.s3.us-east-1.amazonaws.com/alephantai.docs.buildwithfern.com/e645c660d1e7984899d834691d18919e7a59932422a78a11600625c87f98b2b2/assets/aivis/model-credentials/model-credentials-list.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA6KXJSKKNFOCF7G4B%2F20260805%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260805T114916Z&X-Amz-Expires=604800&X-Amz-Signature=a2e6a7857beef11bd3b15aadede8b1d99f4bbe66ec8d0f06a1f9e9c57e4dedea&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject) Each credential card summarizes the synchronized catalog for one OpenModels API key. | UI element | Meaning | | ------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------- | | Credential name | Admin-facing label used when selecting a credential in model configuration. It is not sent to the model service. | | Masked key | Partial key display used only to identify which key is stored. The full key is not shown again. | | Sync status | `Catalog synced`, `Sync failed`, or `Never synced`. Refresh the catalog after key changes or provider catalog changes. | | Available / unavailable models | Available models can be selected by AIvis features. Unavailable models remain visible only as catalog context or compatibility signals. | | Capability counts | The catalog is grouped into language, image, video, STT, and TTS models. | | Last synced | Timestamp of the last successful or attempted catalog refresh. | | Card actions | Edit the name or key, refresh the catalog, or delete the credential. | | Available models drawer | Expands the card and lists available models by capability tab. | ## Add a credential ![Add model credential dialog with name and OpenModels API key fields](https://fdr-prod-docs-files-public.s3.us-east-1.amazonaws.com/alephantai.docs.buildwithfern.com/6154210367a165c544575e887500e0803950a869881204aa48973d859846ae99/assets/aivis/model-credentials/model-credentials-add-dialog.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA6KXJSKKNFOCF7G4B%2F20260805%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260805T114916Z&X-Amz-Expires=604800&X-Amz-Signature=6efcf82587994c4d98c50087a41f82bd775cfbadedd03cdf54ff2c37cd44acc2&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject) 1. Sign in as an Admin. 2. Open **Admin Console > Model Credentials**. 3. Select **Add Credential**. 4. Enter a clear **Name**, such as `Company OpenModels key` or `Production OpenModels`. 5. Paste the **OpenModels API Key**. 6. Select **Save and sync**. AIvis saves the credential and immediately synchronizes the model catalog available to that key. If synchronization succeeds, the credential card shows `Catalog synced` and the available model counts. If synchronization fails, reopen the form to verify the key, then use the refresh action after correcting the problem. The name helps Admins identify the credential later. It is not sent to OpenModels during model requests. ## Review available models Open the credential card by selecting **View available models**. The expanded catalog groups synchronized models by capability: * **Language** for chat, Agents, and text reasoning. * **Image** for image generation or image editing models. * **Video** for text-to-video, image-to-video, or video editing models. * **STT** for speech-to-text models. * **TTS** for text-to-speech models. Use this view to confirm that the expected model families are visible before configuring defaults on other pages. ## Refresh, edit, or delete | Action | When to use it | Behavior | | ----------------- | --------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- | | Refresh catalog | The OpenModels account gains or loses model access, or an Admin wants to retry a failed sync. | AIvis fetches the current catalog for the stored key and updates model counts. | | Edit credential | Rename the credential or rotate the API key. | When editing, leave the API key field empty to keep the stored key. Paste a new key only when rotating. | | Delete credential | The key is no longer approved or the environment no longer uses it. | AIvis blocks deletion if model settings still depend on the credential. Move those settings first. | After editing or refreshing a credential, revisit [Language Models](/aivis/models/language-models), [Image Generation](/aivis/features/image-generation), [Video Generation](/aivis/features/video-generation), and [Voice](/aivis/features/voice) if any default model or capability binding depends on the changed catalog. ## Troubleshooting | Symptom | What to check | | ----------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Save and sync** is disabled | Name and API key are required for new credentials. Remove leading or trailing spaces. | | Sync failed | Confirm the OpenModels API key is valid, active, and reachable from the AIvis deployment. | | Expected model is missing | Confirm the key has access to that model in OpenModels, then refresh the catalog. | | Model appears unavailable | The catalog entry exists, but AIvis cannot use it for the required capability. Choose an available model or review compatibility differences shown on the page. | | Delete fails | The credential is still selected by one or more model settings. Move those settings to another credential first. | ## Security practices Do not paste OpenModels API keys into Agent instructions, chat messages, source control, screenshots, tickets, or shared documents. Store them only through the Model Credentials form. Use separate credentials for different environments or access boundaries. Rotate keys according to your organization's security process, then refresh the catalog and verify that the expected model defaults still work. ## Related pages * [Language Models](/aivis/models/language-models) explains how to choose catalog models after access is configured. * [Generation & Chat Capabilities](/aivis/models/generation-and-chat) covers capability-specific configuration and verification. * [Image Generation](/aivis/features/image-generation), [Video Generation](/aivis/features/video-generation), and [Voice](/aivis/features/voice) use the synchronized catalog for capability-specific defaults.