Skip to content

LLM credentials

Mate is bring-your-own-key (BYOK): it never charges for LLM usage directly. You supply an API key from your own account, and requests are billed there at the provider’s rates.

This is Step 4 of the onboarding wizard (after setting the GitLab URL, registering the bot, and saving an agent config).

Two providers are supported:

ProviderWhere to get a key
OpenRouteropenrouter.ai/keys — routes to many models through one key
Anthropic directconsole.anthropic.com/settings/keys — direct access to Claude models

Select the provider that matches your key. The label on the selector tells you which environment variable the key will be injected as (OPENROUTER_API_KEY or ANTHROPIC_AUTH_TOKEN).

  1. Select the provider.
  2. Paste the API key into the API key field. Keys must be between 20 and 500 characters.
  3. Click Save and continue.

Mate encrypts the key at rest using AES-256-GCM. The key is not retrievable after submission.

To replace the key, re-run the onboarding wizard from the tenant overview and submit a new key in the LLM credentials step — submitting a new key overwrites the previous one. A dedicated settings panel for LLM credentials does not exist yet; the onboarding flow is currently the only path.

Next: Register a webhook