/enterprise/orgs/{org_id}/api-keys) doesn’t manage generic org API keys — it’s the configuration screen for the Enterprise LLM Gateway: storing provider credentials, discovering provider models, and issuing team-scoped gateway keys.
What you’ll see
- Provider Credentials cards for OpenAI, Azure OpenAI, Anthropic, Gemini, Moonshot, and DeepSeek, each showing whether the provider is configured or disabled.
- Models under each provider, collapsed by default, showing the provider model names available to that org.
- Sync models for configured providers, so admins can refresh the org’s model list after a provider releases new models.
- Team Gateway Keys — a creation form (name, team, allowed providers, and optional concrete model allowlists) and a table of existing keys (Name, Team, Providers, Last used, Revoke/Delete).
- A copy-pasteable curl example for calling the gateway (OpenAI, Moonshot, Azure OpenAI chat, and Azure embeddings).
Proxy request examples (curl)
These match the Use this proxy with curl panel on the LLM Gateway page. Replaceacme with your org slug and use your team gateway key.
OpenAI chat
Moonshot chat
Azure OpenAI chat
Embeddings (Azure OpenAI)
Request models must be LiteLLM-prefixed. Org catalog and key allowlists store the bare name. See the model naming contract.
Provider credentials and model discovery
When an admin saves a provider API key, ReclaimLLM calls that provider’s list-models API from the backend using the saved credential. Any returned model names that are not already present for the org are inserted into the org’s gateway model registry. The stored model name is the provider’s returned model name as-is (bare, no LiteLLM prefix). Clients must still call the gateway with a prefixed request model (for example cataloggpt-5.6-luna → request openai/gpt-5.6-luna). See the model naming contract.