Provider settings (API keys, BYOK, connection test)

To use chat (AI features), register an API key in Settings (⚙) → AIs (BYOK = bring your own key).

• Supported providers: Anthropic (Claude) / OpenAI (GPT) / Google (Gemini). Pick the provider you want and enter its key.
• OpenAI-compatible (custom): use any service that exposes an OpenAI-compatible API (DeepSeek, OpenRouter, a local LLM server, and so on) by entering the endpoint URL and a model name (an API key only if the service requires one; a local LLM server that needs none works with the key left empty). Type the model name directly into the Model field (suggestions appear when the list can be fetched). If the service needs no key, leave the key box empty and use "Test connection" to check that it responds. Behavior depends on the model behind the endpoint; monthlet only guarantees the request shape.
• Connection test: you can run a connection test to check that the provider responds (it also runs automatically when you save a key).
• Where keys are stored: API keys are encrypted with the secure credential-protection facility provided by your OS (Keychain on macOS, DPAPI on Windows) and saved in the app data folder on this device. They are never written to notes or logs.
• You can register keys for multiple providers and switch the active one.
• Usage (cumulative): at the bottom of Settings (⚙) → AIs, the tokens consumed in this Vault with your own keys are shown per provider as ↑input ↓output. Each row has a "Reset" button to set it back to 0 (irreversible, with confirmation). Switching Vault shows that Vault's totals.