Providers API

API keys, subscription OAuth, and custom OpenAI-compatible providers.

Host keys, subscriptions, connectors, Computer, routines, groups and shared agent turns require admin. Non-admin accounts use isolated BYOK text turns; there is no host-key fallback.

GET /open-bot/providers/byok

POST /open-bot/providers/byok

DELETE /open-bot/providers/byok/:id

POST /open-bot/byok/chat

BYOK chat accepts model (openai/, xai/ or openrouter/ prefix) and message. Keys are encrypted per account; text requests go directly to fixed provider origins with no shared tools or gateway access.

GET /open-bot/providers/oauth

POST /open-bot/providers/oauth/start

GET /open-bot/providers/oauth/session/:id

POST /open-bot/providers/oauth/paste-token

GET /open-bot/accounts

POST /open-bot/accounts/connect

POST /open-bot/custom-models

Custom model keys: AES-GCM under openbot-custom-models/.