Home / Help centre / Workspace settings
Workspace settings
Should I use an API key or a subscription OAuth token for my AI provider?
Choose an AI provider API key. Subscription tokens carry rate limits. A scan can get throttled part-way through, so the agents cover less of your code. That matters most if you pick a premium model for any tier. Cyberlop shows an amber warning when you select the OAuth option.
The short version
Use an AI provider API key. It is the safer choice for scans that matter, and it is the only choice that makes sense if you pick a premium model for any tier. An OAuth token from a subscription is built for one person at a desk. That makes it a poor fit for agents working through a whole codebase.
How it works in Cyberlop
Under Settings → AI Provider, the Provider type list offers an API key for each of two providers and an OAuth token for one of them. When you pick the OAuth option, an amber box appears with this advice: use an API key for high-tier models.
The reason is rate limits. Throttling can cut in part-way through a scan, so the agents cover less of the codebase, and that is the main cost. Cyberlop waits out rate limits rather than failing the scan, so the scan becomes slower, and the app warns that results are unlikely to beat the built-in defaults.
| Choice | Good for | Watch out for |
|---|---|---|
| API key | Any tier, including premium models | You pay your provider for usage |
| OAuth token | Trying Cyberlop on the default models | Throttling, so less code covered |
What to do next
Choose the provider type, paste the secret into Replace credential and click Save credential. Then click Verify to check it works. Cyberlop encrypts the secret and never shows it again.
Usage on your own key shows next to your included allowance. Your provider bills you for it. See how to use your own AI key and why the amber warning appears.
Related questions
- How do I use my organization's own AI provider key?
- Why did an amber warning appear when I chose the OAuth token option?
- How do I check that my AI provider credential works?
- I picked a premium model, but the results aren't any better. Why?
- Why did my scan cover less of my codebase than expected?
AI provider settings: included allowance, your own credential and models
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.