> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usehenry.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Bring your own model key

> Enterprise workspaces can bill LLM usage through their own Anthropic or OpenAI account.

<Note>
  Available on Enterprise workspaces, to owners and admins, in **Settings → Models** under **Your own model API key**.
</Note>

With your own key, Henry sends requests for that provider's models directly to your account. Your provider bills you for the tokens; Henry records no LLM cost and no LLM-derived credits for those turns.

## Supported providers

* **Anthropic**: keys starting `sk-ant-`.
* **OpenAI**: standard, project (`sk-proj-`), and service account (`sk-svcacct-`) keys.

Leave the provider on **Detect from key** or choose one explicitly. Keys from other vendors, including OpenRouter, are refused without any network call.

## Saving a key

Paste the key and click **Save key**. Henry makes one authenticated models-list call to the provider before storing anything. A key that fails that check is rejected rather than saved.

The key is encrypted under your workspace's own key and never shown again. The card displays the provider and the last four characters.

## What the key applies to

* Only models from the key's provider. If you save an Anthropic key, Claude models use it and every other model keeps using Henry's gateway.
* Not to models served by a self-hosted endpoint (see [Self-hosted](/developer-guide/self-hosted)).
* Gateway failover is disabled on your-key turns. Henry uses the model you chose.

## Billing

Turns served through your key record zero LLM cost and no LLM credits, and are tagged as such in usage records. Charges that are not model tokens, such as per-request web search fees, still apply. Models the key does not cover charge credits as usual.

## Rotate and remove

* **Rotate**: paste a new key. It takes effect on the next turn; there is no cache.
* **Remove**: future turns bill through Henry's gateway again, starting with the next turn. Removal is allowed even if the workspace is no longer Enterprise.

If a stored key can no longer be decrypted, the card says so and turns bill Henry's gateway until you remove and re-add it.

## Audit

Saving and removing a key writes an audit event recording the provider and key tail only. See [Exports](/developer-guide/exports) for the audit log.