Settings & Configuration
LLM Connections
Connect LLM provider API keys to enable evaluations and the playground.
LLM Connections
Access via Settings → LLM Connections in your project.
LLM Connections store provider API keys at the project level. These keys are used by:
- LLM-as-judge evaluators — the platform calls the LLM on your behalf to score traces
- Playground — interactive prompt testing using your provider credentials
- Default evaluation model — the model selected for evaluations that don't specify a model
Supported Providers
| Provider | Notes |
|---|---|
| OpenAI | Standard + Azure OpenAI |
| Anthropic | Claude models |
| Azure OpenAI | Requires endpoint URL + deployment name |
| Google (Vertex AI) | Requires project ID and region |
| Google Generative AI | Gemini models via Google AI API |
| AWS Bedrock | Requires access key, secret key, and region |
| Custom / Self-Hosted | Any OpenAI-compatible API endpoint |
Adding an LLM Connection
- Go to Settings → LLM Connections
- Click Add LLM API Key
- Select your provider from the dropdown
- Enter the required fields:
- Display name — a label for this connection (e.g.,
"OpenAI Production") - API key — your provider API key
- Base URL — for Azure or custom endpoints
- Extra headers — optional additional headers (e.g., for proxy authentication)
- Display name — a label for this connection (e.g.,
- Click Save
For Azure OpenAI, you also need to specify the deployment name and API version in the base URL.
Default Evaluation Model
Select which LLM connection and model to use by default when running evaluators. This setting is project-wide and can be overridden on individual evaluator configurations.
To set the default:
- Go to Settings → LLM Connections
- Find the Default Evaluation Model section
- Select the provider connection and model name
- Click Save
The default model is used by LLM-as-judge evaluators that don't specify an explicit model.
Setting a fast, cost-efficient model here (e.g., gpt-4o-mini) can significantly reduce evaluation costs.
Security
LLM Connection API keys are:
- Encrypted at rest using AES-256
- Never returned in plaintext after creation — only the key name and creation date are shown
- Scoped to the project — they cannot be used to access other projects
To rotate a key:
- Add a new connection with the updated key
- Update any evaluators that reference the old connection
- Delete the old connection
Permissions
| Action | Required Role |
|---|---|
| View connections (name/date only) | MEMBER and above |
| Add connection | OWNER or ADMIN |
| Update connection | OWNER, ADMIN, or MEMBER |
| Delete connection | OWNER or ADMIN |
| Set default evaluation model | MEMBER and above |