Configuration
LLM Providers
Configure the LLM provider behind your agents: Anthropic, OpenRouter, AWS Bedrock, or the Gamut platform. Manage API keys, the model catalog, and defaults in Settings > LLM Provider.
Supported providers
| Provider | Description | API key field | Environment variable |
|---|---|---|---|
| Anthropic | Direct access to Claude via the Anthropic API. This is the primary provider. | anthropicApiKey | ANTHROPIC_API_KEY |
| OpenRouter | Routes requests through OpenRouter, giving access to Claude models (and others) via a single API key. | openrouterApiKey | OPENROUTER_API_KEY |
| AWS Bedrock | Enterprise-grade Claude inference through Amazon Bedrock. Supports both simple bearer token auth and full IAM credentials. | bedrockApiKey | AWS_BEARER_TOKEN_BEDROCK |
A fourth option, Platform, is available when connected to the Gamut platform. It uses managed credentials and requires no separate API key.
Switching providers
Select the active provider in Settings > LLM Provider. Only one provider is active at a time. Running agents keep using the previous provider until restarted; the UI shows a notice about this when switching.
API key management
API keys can be configured in two ways:
- Settings UI: Enter the key in Settings > LLM Provider under the credentials section. Keys saved this way are stored locally in
settings.jsonwith file permissions restricted to the current user (mode0600). - Environment variables: Set the matching variable before starting Gamut. If both exist, the saved key takes precedence.
A badge shows the current key's source ("Using saved setting" or "Using environment variable"). Remove a saved key to fall back to the environment variable, or save a new key to override it.
Key validation
When a key is entered in the Settings UI, Gamut validates it with a minimal API call (a single-token request to Claude Haiku) and saves it only if validation succeeds. This catches expired keys, incorrect prefixes, and insufficient permissions.
Anthropic (primary)
The Anthropic provider sends requests directly to the Anthropic API at https://api.anthropic.com.
Environment variable: ANTHROPIC_API_KEY
When a container starts, the key is injected via the ANTHROPIC_API_KEY environment variable so the Claude Code process inside the container can authenticate.
OpenRouter
OpenRouter provides an Anthropic-compatible endpoint that routes requests to multiple model providers. Useful for a single API key covering Claude alongside other models, or for routing traffic through OpenRouter for billing or quota reasons.
Environment variable: OPENROUTER_API_KEY
When a container starts, three environment variables are injected:
ANTHROPIC_API_KEYis set to an empty string (prevents the SDK from sending thex-api-keyheader).ANTHROPIC_BASE_URLis set tohttps://openrouter.ai/api.ANTHROPIC_AUTH_TOKENcarries the OpenRouter key via theAuthorization: Bearerheader.
Under OpenRouter, the agent default is sonnet (Claude Sonnet 5) rather than opus, as a cost-conscious default.
AWS Bedrock
AWS Bedrock provides Claude inference through Amazon's managed AI infrastructure. This is the recommended option for enterprises that route all AI traffic through their AWS account for compliance, cost allocation, or network isolation.
Authentication methods
Simple auth (Bearer Token):
- Set the
AWS_BEARER_TOKEN_BEDROCKenvironment variable or enter the token in Settings > LLM Provider. - The simplest option when a Bedrock-specific API key is available.
Full AWS credentials (Access Key + Secret):
- Set
AWS_ACCESS_KEY_IDandAWS_SECRET_ACCESS_KEYas environment variables, or enter them in Settings > LLM Provider. - Configure the AWS region (defaults to
us-east-1) via theAWS_REGIONenvironment variable or in settings.
If neither method is configured, Bedrock falls back to the default AWS credential chain (~/.aws/credentials or an instance profile).
When a container starts with Bedrock active, it receives CLAUDE_CODE_USE_BEDROCK=1 to put the Claude Code SDK in Bedrock mode. ANTHROPIC_API_KEY is explicitly cleared so the container cannot fall back to the direct Anthropic API. Bedrock uses cross-region model IDs (the us.anthropic. prefix); the catalog lists these when Bedrock is active.
Models
Each provider exposes a dynamic model catalog in Settings > LLM Provider. Models can be selected two ways:
- Family aliases (
opus,sonnet,haiku): Resolve to the latest version of that family, so new releases apply without a settings change. - Version pinning: Pin an exact version from the catalog when a workflow depends on stable model behavior.
The catalog covers the Claude Opus, Sonnet, and Haiku families, Fable 5 at all effort levels, and GPT models (gpt-5.4, gpt-5.5) through OpenRouter and the Platform provider.
Defaults
| Purpose | Default | Resolves to |
|---|---|---|
| Agent (Default Model) | opus | Claude Opus 4.8 |
| Browser agent | sonnet | Claude Sonnet 5 |
| Summarizer Model | haiku | Claude Haiku 4.5 |
The Default Model applies to new agent sessions when no per-message model is selected. The Summarizer Model handles lightweight work such as session name generation and API key validation.
Per-message model selector
The message composer can switch between the three Claude families on a per-message basis:
- Opus: Most capable; best for complex, multi-step tasks.
- Sonnet: Balanced speed and capability.
- Haiku: Fastest and most affordable.
The family selected in the composer applies to that message and persists for subsequent messages in the same session until changed.
Tool search
The Tool Search toggle in Settings > LLM Provider controls whether agent containers load tool definitions on demand via a meta-tool or all at once upfront. Enabled by default, it saves roughly 15,000 to 20,000 context tokens per turn across Gamut's 60+ tool surface. Tool search requires Sonnet 4+ or Opus 4+ and is ignored on Haiku.
Disable this only when debugging tool-loading behavior.
Environment variables reference
| Variable | Description |
|---|---|
ANTHROPIC_API_KEY | Anthropic API key (direct provider). |
OPENROUTER_API_KEY | OpenRouter API key. |
AWS_BEARER_TOKEN_BEDROCK | AWS Bedrock bearer token (simple auth). |
AWS_ACCESS_KEY_ID | AWS access key ID (Bedrock full credentials). |
AWS_SECRET_ACCESS_KEY | AWS secret access key (Bedrock full credentials). |
AWS_REGION | AWS region for Bedrock (default: us-east-1). |