> ## Documentation Index
> Fetch the complete documentation index at: https://docs.costa.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Providers

> Use your own LLM API key with Costa

## What is Setup your provider keys?

Bring Your Own Key allows you to use your own providers API keys with Costa. Instead of using Costa's shared keys, you can configure your agents to use your personal or enterprise API keys from providers like Anthropic, OpenAI, etc.

<Frame>
  <img src="https://docs-cdn.costa.security/images/byok.png" alt="Codex CLI interface" style={{ borderRadius: '0.5rem' }} />

  <figcaption>bring your own key</figcaption>
</Frame>

## How it works

1. You obtain API keys from your preferred LLM providers
2. You add these keys to your Costa settings in the dashboard
3. When agents make requests, they use your keys instead of Costa's shared keys
4. Billing and usage stay directly tied to your provider accounts

## Adding your keys

To configure Provider keys in Costa:

1. Go to your **Settings** in the Costa dashboard
2. Navigate to the **Providers** section
3. Click **Add Provider Key**
4. Select your provider (Anthropic, OpenAI, etc.)
5. Enter your API key
6. Save the configuration

## Supported providers

* Anthropic
* OpenAI
* Gemini
* Openrouter
* Z.ai

## Benefits

* **Cost control**: You're billed directly by the provider
* **Rate limits**: Your usage is subject to your provider's limits, not shared ones
* **Privacy**: Requests use your credentials
* **Flexibility**: Use keys with specific permissions or quotas

## Best practices

* Use keys with appropriate permissions for your use case
* Monitor your provider's usage and billing dashboards
* Rotate keys regularly for security
* Use different keys for different projects or environments

## Technical notes

When using your own provider keys, Costa routes requests directly to the LLM provider using your credentials. Costa does not store or intermediate your keys - they are used solely for authenticating requests to the provider APIs.
