> ## Documentation Index
> Fetch the complete documentation index at: https://docs.os.meetluno.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Managed services

> Bring your own LLM provider API keys for organization-wide inference.

Managed services let your organization bring its own LLM provider API keys (BYOK). When a key is connected for a provider, every agent and workflow model call to that provider — across all projects in the organization — routes through your key instead of Luno OS's platform credentials.

Use **Governance → Managed services** (`/settings/managed-services`) in the web app to connect, rotate, and disconnect provider keys for the active organization.

> [!NOTE]
>
> Managed services are **not** app credentials. The [credentials system](https://docs.os.meetluno.ai/learn/credentials/overview.md) (`luno connect`, `luno credentials create`) stores keys for integrations your automations call as tools — Slack, GitHub, Exa, and the rest of the apps catalog. LLM provider keys for model inference are connected here instead.

## Supported providers

| Provider | Slug |
| - | - |
| OpenAI | `openai` |
| Anthropic | `anthropic` |
| Google | `google` |
| Groq | `groq` |
| xAI | `xai` |

One key per provider per organization. Keys are encrypted at rest; after connecting, Luno OS only shows a non-secret key preview.

## How routing works

Model ids carry a vendor prefix (for example `openai/gpt-5.6-sol` or `anthropic/claude-sonnet-5.5`). When a model call reaches the platform:

1. The vendor prefix is matched against your connected providers.
2. If a key is connected for that vendor, the request runs on your key.
3. Otherwise the request runs on Luno OS platform credentials at the platform rate.

No code changes are needed — agents and workflows keep referencing models the same way.

## Billing

Model usage on your own keys is **not billed by Luno OS** — your provider bills you directly under your own agreement. Run history still records the provider cost for reference, labeled **Your API key**, and the run's **Total billed** only includes what Luno OS charged (run fees, sandbox time, and any usage on platform keys).

Requests on platform credentials are billed at provider cost with the platform markup, and run with ZDR-only (zero data retention) routing. BYOK requests run under your provider agreement, so ZDR routing is not forced.

## Connect a provider

Connect from the web app (**Governance → Managed services**) or the CLI:

```bash theme={null}
luno managed-services connect xai --api-key "xai-..."
luno managed-services list
```

Rotate or disconnect at any time:

```bash theme={null}
luno managed-services update xai --api-key "xai-..."   # rotate the key
luno managed-services disconnect xai                   # fall back to platform keys
```

| Command | Key flags | Description |
| - | - | - |
| `managed-services list` | `--kind <kind>` | List connected provider keys |
| `managed-services connect <provider>` | `--api-key <key>` | Connect a provider with your API key |
| `managed-services update <provider>` | `--api-key <key>` | Rotate the key for a connected provider |
| `managed-services disconnect <provider>` | | Disconnect a provider |

## Permissions

| Role | What it can do |
| - | - |
| **Owner** | View, connect, rotate, and disconnect keys |
| **Admin** | View, connect, rotate, and disconnect keys |
| **Builder** | View connected providers |

## Next steps

> **[Billing](https://docs.os.meetluno.ai/learn/settings/billing.md)**
>
> Review usage and billing for the organization.

> **[Run history](https://docs.os.meetluno.ai/learn/logs/overview.md)**
>
> See per-run usage, including which key source served each model call.

> **[Credentials](https://docs.os.meetluno.ai/learn/credentials/overview.md)**
>
> Store integration credentials for the tools your automations call.

> **[Build agents](https://docs.os.meetluno.ai/learn/agents/build-agents.md)**
>
> Configure models on your agents.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.