How do I check that my AI provider credential works?

Steps

You need permission to change settings. Ask an admin if you cannot reach this tab.

STEPS

Good to know

Cyberlop stores the secret encrypted at rest and never shows it again after you save. You cannot read it back to check it. That is why Verify exists.

Run it after you paste a key, after your provider rotates one, and whenever scans stop making progress. Scripts can run the same check through POST /api/settings/verify-provider, which needs the settings:update permission.

Watch the provider type as well. The OAuth token option shows an amber warning. A subscription token can be throttled part-way through a scan, so the agents cover less of the code. Choose an API key if you pick a premium model for any tier.

Verify tests the workspace credential only. A personal credential on My Account is a separate thing. Read the difference between the two to see which one a scan uses.

Verify does not report spend. Open the AI usage this month panel on the same tab for that. Still failing? Send us a note on the contact page.

A good habit is to verify right after you save a new key, and again before a large scheduled run, because a key that your provider has revoked will only fail when a scan needs it. A quick check beats a failed scan. Keep it simple.

Related questions

• How do I use my organization's own AI provider key?
• How do I remove the organization's AI credential?
• Should I use an API key or a subscription OAuth token for my AI provider?
• How do I add my own AI credential for scans I start?
• How do I see how much model usage went on our own AI key this month?

Full tutorial

AI provider settings: included allowance, your own credential and models

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre