BYOK
Basalt Open and Desktop both support Bring-Your-Own-Key for hosted LLMs. The key never leaves your machine; your machine talks directly to the provider. The hosted Pro cockpit also supports BYOK, with keys AES-GCM encrypted at rest in our KV store (see Overview).
| Provider | Used for | Page |
|---|---|---|
| OpenAI | Embeddings, Implicit Thesis synthesis | openai |
| Anthropic | Implicit Thesis synthesis | anthropic |
| Embeddings, synthesis | ||
| Mistral | Embeddings, synthesis | (coming) |
| Cohere | Embeddings | (coming) |
Key storage
- CLI / Desktop: OS keychain via the platform native API.
- Plugin: stored encrypted in the plugin’s data file using a key derived from a passphrase you set on first run.
- MCP: read from environment at process start (no on-disk persistence).