Workspace AI providers

For admins

Atlato ABC runs on AI you bring: your provider bills you for the model, not Atlato. Each member can connect their own keys and subscriptions, and Admin → AI providers adds a second kind: API keys the workspace owns. Workspace keys can be shared with everyone, keep working when the person who added them leaves, and are what scheduled and automated work runs on.

Before you begin

Your role template needs ai-providers. The Owner always has it.
Anyone who can open this page can change or delete any workspace key, whoever added it.
Have an API key from the provider ready, such as OpenAI, Anthropic (Claude), Google Gemini, xAI (Grok), DeepSeek, Kimi, GLM or OpenRouter. Workspace keys are API keys only: a subscription is one person’s sign-in, so it can’t belong to the workspace.

Workspace keys and members’ own keys

	Workspace key	A member’s own key
Who it belongs to	The workspace	The member who added it
Added in	Admin → AI providers	Settings → AI providers
Who can use it	Everyone, or the people you choose	The member, and anyone they share it with
Who pays the provider	The workspace’s account with the provider	The member’s account

Members see the workspace keys shared with them in Settings → AI providers, tagged Workspace. They can chat on them but can’t edit them or see the key itself. See Your AI providers.

Add a workspace key

Select Admin in the rail, then AI providers.
Select Add API key. The steps open in a column beside the list.
On The provider, choose the Provider and paste the API key. It’s stored encrypted and never shown again. For Custom, also enter the Base URL of your own compatible service.
On Name it, give the key a Name that says what it’s for, such as “Company OpenAI”.
On Models, keep All models, or choose Only selected models and pick the ones people may use.
On Who can see this key, choose Anyone for the whole workspace, or Shared with and pick people.
To run scheduled and automated work on this key, turn on Use for unattended work (see below).
Select Add API key.

The key is approved as it’s added, and appears under Workspace keys with its provider, the end of the key, its models and who can see it.

Unattended work

Some work runs with nobody waiting on it. It never uses a member’s own keys or subscriptions; it runs on the workspace’s keys for unattended work instead:

scheduled and triggered workflow runs;
workflow and agent runs started by another system with an API key;
Atlato One, wherever it runs.

Each provider has one key for unattended work. Choose it in any of these ways:

turn on Use for unattended work while adding or editing a workspace key;
open the ⋮ menu on a key’s row and select Use for unattended work (or Stop using for unattended work);
in the Unattended work card, pick a key for each provider. You can pick a workspace key, or an approved key of yours or one shared with everyone.

Turning it on for a second key from the same provider replaces the first; the switch tells you which key it replaces. Keys for a Custom service can’t run unattended work. Keys used for it are marked Unattended.

Edit or delete a workspace key

Open the ⋮ menu on the key’s row:

Edit opens the same steps. Leave API key blank to keep the stored key, or paste a new one to replace it. Select Save changes.
Delete removes the key after you confirm. Members it was shared with lose it at once. If unattended work ran on it, that work fails until you choose another key for the provider.

Keys and credits

The provider bills the workspace’s own account for the AI itself, at the provider’s prices. Atlato credits count separately, for using the platform around it. Unattended work uses the workspace’s credits and shows as Workspace (background) in usage. See Credits and top-ups.