Project secrets use ref:env/NAME. The provider defaults below come from the installed provider catalog; a project may point api_key at a different environment variable.
| Provider prefix | Default variable | Required |
|---|---|---|
openai | OPENAI_API_KEY | Yes |
openai-chat | OPENAI_API_KEY | Yes |
openai-responses | OPENAI_API_KEY | Yes |
openrouter | OPENROUTER_API_KEY | Yes |
deepseek | DEEPSEEK_API_KEY | Yes |
together | TOGETHER_API_KEY | Yes |
fireworks | FIREWORKS_API_KEY | Yes |
moonshotai | MOONSHOTAI_API_KEY | Yes |
nebius | NEBIUS_API_KEY | Yes |
ovhcloud | OVHCLOUD_API_KEY | Yes |
alibaba | ALIBABA_API_KEY | Yes |
sambanova | SAMBANOVA_API_KEY | Yes |
vercel | VERCEL_AI_GATEWAY_API_KEY | Yes |
heroku | HEROKU_INFERENCE_KEY | Yes |
litellm | — | No |
vllm | VLLM_API_KEY | No |
ollama | OLLAMA_API_KEY | No |
cerebras | CEREBRAS_API_KEY | Yes |
crusoe | CRUSOE_API_KEY | Yes |
zai | ZAI_API_KEY | Yes |
anthropic | ANTHROPIC_API_KEY | Yes |
google | GOOGLE_API_KEY | Yes |
groq | GROQ_API_KEY | Yes |
mistral | MISTRAL_API_KEY | Yes |
cohere | CO_API_KEY | Yes |
bedrock | — | No |
huggingface | HF_TOKEN | Yes |
xai | XAI_API_KEY | Yes |