Provider credentials
Workspace admins manage external model providers under Settings → Models. Credentials are write-only in the product interface and encrypted at rest. Choosing an external provider’s model routes that run directly through the workspace credential; it does not spend Ara-included inference credits.
Subscription pools
A workspace can connect multiple subscription accounts for the same provider. Each account remains a separate row in Models, can be reconnected or removed independently, and is tried newest-first.
Ara changes accounts only when the active account reports quota or usage exhaustion before returning output. It does not round-robin healthy accounts, and it does not replay a request after partial output. Every account transition emits the structured provider_credentials.quota_failover event with workspace, provider, model, pool size, and account positions; credential values are never logged.
OpenAI subscription sign-in exposes a stable account identifier, so reconnecting the same ChatGPT account updates its existing slot. Anthropic’s OAuth credential does not expose an account identifier, so Ara assigns a durable opaque slot when it is connected. Use Reconnect on that account’s row to renew the exact slot.
Confirm that each provider permits its consumer subscription to be used through a third-party application before connecting it. For Anthropic, review the notice and linked policy shown before sign-in.
