> ## Documentation Index > Fetch the complete documentation index at: https://ara-90a60a07.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Provider credentials > Connect workspace-owned API keys and subscription accounts to Ara's model router. # Provider credentials Workspace admins manage external model providers under **Settings → Models**. Credentials are write-only in the product interface and encrypted at rest. Choosing an external provider's model routes that run directly through the workspace credential; it does not spend Ara-included inference credits. ## Subscription pools A workspace can connect multiple subscription accounts for the same provider. Each account remains a separate row in Models, can be reconnected or removed independently, and is tried newest-first. Ara changes accounts only when the active account reports quota or usage exhaustion before returning output. It does not round-robin healthy accounts, and it does not replay a request after partial output. Every account transition emits the structured `provider_credentials.quota_failover` event with workspace, provider, model, pool size, and account positions; credential values are never logged. OpenAI subscription sign-in exposes a stable account identifier, so reconnecting the same ChatGPT account updates its existing slot. Anthropic's OAuth credential does not expose an account identifier, so Ara assigns a durable opaque slot when it is connected. Use **Reconnect** on that account's row to renew the exact slot. Confirm that each provider permits its consumer subscription to be used through a third-party application before connecting it. For Anthropic, review the notice and linked policy shown before sign-in. API-key credentials remain single-account unless the provider's product contract explicitly supports a pool.