BYO-LLM

Create an LLM provider (owner-only) · 0 credits

Creates a BYO-LLM configuration. The credential (api_key, or aws:{…} for kind bedrock) is WRITE-ONLY: it travels in the body, is encrypted server-side (AES-256-GCM) and is NOT returned — the response includes only key_fingerprint (non-secret). base_url (openai_compatible/anthropic) is validated against SSRF. Limit of 20 providers per firm. Firm-scoped OWNER-ONLY; it NEVER accepts firm_owner_id from the client. No charge. Scope: mcp | * (NOT cases).

post/api/v1/llm-providers

Request

  • Base URL: https://legal.nexusquantum.legal
  • URL: https://legal.nexusquantum.legal/api/v1/llm-providers
  • Auth: HTTP bearer

Request body

labelstring required
kind'openai_compatible' | 'anthropic' | 'bedrock' required
model_defaultstring required
base_urlstring

Required for openai_compatible; optional for anthropic; ignored for bedrock. Validated against SSRF.

model_mapobject

Role→model map, no silent defaults. Recommendation (not a default): A → claude-fable-5 · B → claude-opus-4-8 · C → claude-opus-4-8 or an equally strong reasoning model; any model of the 3 kinds works in any node. B ≠ A recommended.

extra_headersobject
routing_policy'own_only' | 'own_then_platform'
role'A' | 'B' | 'C' nullable

Node this engine is assigned to: 'A' (primary analysis), 'B' (adversarial audit) or 'C' (adversarial counterparty). Omit or null = the firm's DEFAULT engine, which serves every node and role (consulta, chat, draft…). Precedence: node engine → default engine → (when the policy forbids platform) Node A engine → platform. Allows a DIFFERENT engine per node: B and C should not share a model with A, or the cross-audit loses its value.

billing_modestring
api_keystring

Credential (openai_compatible/anthropic). WRITE-ONLY: never returned in responses.

Response

Provider created (non-secret projection + secret_at_rest).

idstring uuid
labelstring

Human-readable name, unique within the firm.

kind'openai_compatible' | 'anthropic' | 'bedrock'

Adapter family.

base_urlstring nullable

Endpoint (openai_compatible: required; anthropic: optional; bedrock: null, derived from region). Validated against SSRF.

model_defaultstring

Default model.

model_mapobject

Role→model map (e.g. { "A": "claude-opus-4-8", "B": "gpt-4o" }). No silent defaults: each node uses exactly the declared model (or model_default when the role is not mapped). Recommendation (not a default): Node A → claude-fable-5 · Node B → claude-opus-4-8 · Node C → claude-opus-4-8 or another equally strong reasoning model; any model of the 3 kinds works in any node. B ≠ A is recommended to preserve the independence of the audit.

key_fingerprintstring nullable

NON-secret, NON-reversible fingerprint of the credential (hash, e.g. sha256:a1b2c3d4e5f6; older rows may show the legacy format sk-p…a1b2). The ONLY representation of the key that leaves the API.

extra_headersobject

Optional extra headers for the provider.

routing_policy'own_only' | 'own_then_platform'

own_then_platform leaves the platform chain as a fallback if your provider fails recoverably.

role'A' | 'B' | 'C' nullable

Node this engine is assigned to: 'A' (primary analysis), 'B' (adversarial audit) or 'C' (adversarial counterparty). Omit or null = the firm's DEFAULT engine, which serves every node and role (consulta, chat, draft…). Precedence: node engine → default engine → (when the policy forbids platform) Node A engine → platform. Allows a DIFFERENT engine per node: B and C should not share a model with A, or the cross-audit loses its value. Additive (per-node BYO, 2026-07-24).

billing_modestring

Billing mode (default platform).

enabledboolean

Whether it is active for routing firm traffic.

last_verified_atstring date-time nullable

Last successful /test health check.

created_atstring date-time
updated_atstring date-time
secret_at_rest'encrypted_aes_256_gcm' | 'plaintext'

Creation response only: at-rest encryption status of the credential.

Changes

No recorded changes to this operation across all 1 revision of this API.