> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dari.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Provider Keys

> Choose managed or BYOK credentials for router traffic.

Each built-in provider used by a router needs a key source:

* **Dari-managed** uses Dari's provider account.
* **Bring Your Own Key (BYOK)** uses your provider key, stored encrypted.

Open the router's **Keys** page and choose a source for OpenAI, Anthropic, or Fireworks. Enter a key only for BYOK providers.

In YAML, use `managed` or `user`. Keep BYOK secrets in environment variables:

```yaml theme={null}
provider_key_sources:
  openai: managed
  fireworks: user
provider_key_envs:
  fireworks: FIREWORKS_API_KEY
```

Your application sends only its Dari Routing API key. Dari uses the configured provider credential after selecting a model.

Organization-registered custom models use the credential saved with the model, not a router-level provider key.