Setup
- API Keys → Provider keys (also under Settings → Workspace): pick the provider, paste your API key. It’s encrypted at rest and write-only: after saving, only the key’s prefix is ever shown again, to anyone.
- Point your SDK at the gateway and prefix the model with the provider:
Supported providers
Any model id the vendor offers works; new launches work day one. (Bedrock
and Vertex use cloud credentials rather than a single API key and aren’t
supported this way.)
Billing
Your provider bills your key directly — Omnia charges nothing for these tokens. Telemetry and logs still record full usage. Judging and evals you run over this traffic bill as normal Omnia usage, like any judging.When your key stops working
A rotated or revoked provider key returns401 with code
provider_key_rejected and a message telling you where to update it, never
a generic upstream error. Fix it on the API Keys page (or Settings → Workspace); a saved or deleted key takes effect at the gateway within seconds.