Skip to content

Models and providers

Deciding rather than configuring?

This page is the machinery. Choosing a model answers which model an agent should use — open weights or closed, what actually drives the bill, and why the choice is reversible.

The template this platform grew from built one model from environment variables.

That stops working the moment several organizations share a deployment: each needs its own key, its own default, and the ability to rotate either without a redeploy.

So a model is constructed per run, out of the database:

model profile → credential → unsealed secret → provider client → Model

Nothing about which model an agent uses lives in .env.

A model profile

A row in an organization: a label, a provider, a model id, default settings, and which vault secret to authenticate with.

An agent's spec names one by model_profile_id, and the run resolves it.

The model id is free text on purpose

There is a picker to help, but the field accepts anything you type.

A provider ships something the morning after any list here was warmed, and a field that cannot express "that one" is a field people work around by editing the spec by hand.

Fallbacks

A profile may list fallback profiles, tried in order. One provider's outage should not take an organization's agents down when it has a second key or a second provider configured.

A fallback is invisible in the run record

The run row is written before the first request, carrying the primary profile's label, provider and secret id. If a fallback served the turn, the run still names the primary.

So "what did we spend at OpenAI" and "which key is costing the most" answer with the profile that was asked first, not the one that answered. Worth knowing before you rely on those numbers during an outage.

Model settings

Per profile, and overridable per agent through the spec's model_settings: temperature, top_p, max_tokens, parallel_tool_calls, timeout. See the spec reference.

Reasoning effort is not here. It is the thinking capability, because "reason harder" is a decision about what the agent is for rather than a knob on a connection — and because a spec that sets it as a model setting stops being portable across a model swap.

Providers

Twenty-seven, which is everything Pydantic AI ships that a chat profile can point at.

There is no per-provider builder here. Pydantic AI infers the provider class and the model wrapper from the id, and what this platform still has to know is the part inference cannot: which credential shape a provider wants.

What Custom URL means

The provider's SDK names an endpoint parameter, so you can point a profile at a gateway, a LiteLLM proxy or a model server on your own network instead of the vendor's public API.

It is a field on the profile, not on the key. A key says what authenticates, an endpoint says where the request goes — so the same key can front a staging proxy and a production one as two profiles.

Set it under Agents → add a model → Endpoint, which appears only for the providers marked below. Storing one for a provider that has none is refused, rather than accepted and dropped.

Hosted

Provider id Credential Custom URL
OpenAI openai API key, or none
Anthropic anthropic API key
Google Gemini google API key
OpenRouter openrouter API key
Alibaba Cloud alibaba API key
Cerebras cerebras API key
DeepSeek deepseek API key
Fireworks AI fireworks API key
GitHub Models github API key
Groq groq API key
Heroku AI heroku API key
Mistral mistral API key
Moonshot AI moonshotai API key
Nebius AI Studio nebius API key
OVHcloud AI Endpoints ovhcloud API key
SambaNova sambanova API key
Together AI together API key
Vercel AI Gateway vercel API key
Z.AI zai API key
xAI (Grok) xai API key ✓ (api_host)
Cohere cohere API key
Hugging Face huggingface API key

Self-hosted

Provider id Credential Custom URL
Ollama ollama none
LiteLLM proxy litellm none ✓ (api_base)

These two are why "no credential" is a stored kind rather than an empty string. A model server on your own network usually has nothing to authenticate against, and the vault refuses an empty secret — so the resolver switches on a total set instead of treating a missing value as a special case.

A keyless profile needs its endpoint, and that is the only thing it needs. The key field goes optional as soon as one is filled in. Without an endpoint the profile is refused: there is no public API to fall back on and nothing to authenticate with.

The endpoint is what marks a profile self-hosted, not keyless

keyless is true of openai as well. OpenAI-compatible servers (vLLM, LM Studio, a LiteLLM proxy) speak its Chat Completions API, which is why an openai profile is built as openai-chat.

So "no key" alone does not distinguish a deliberate local model from a profile whose key was deleted — and the secret foreign key is ON DELETE SET NULL, which makes the second case ordinary. A run resolves a keyless profile only when it carries an endpoint; otherwise it is refused with the same "no key configured" message it always had.

When the credential is not an API key

Provider id Credential
Azure OpenAI azure key + endpoint + pinned API version
AWS Bedrock bedrock access key id, secret key, region, optional session token
Google Vertex AI google_cloud service account JSON

These three are the reason a secret has a kind at all. A form that collected one opaque token for Azure would collect something fillable-in-correctly that still fails at the first run. See secret kinds.

Two ids are rewritten on the way to the SDK

An openai profile is built as openai-chat, because plain openai infers the Responses API and OpenAI-compatible servers — vLLM, LM Studio, a LiteLLM proxy — do not implement it.

google_cloud is built as google-cloud. Neither changes what you store.

Deliberately absent

Four names Pydantic AI knows are not here. sentence-transformers and voyageai are embedding models, bedrock-mantle is not a chat provider a profile can point at, and gateway does not resolve to a provider class — it is a routing prefix over the others.

tests/test_model_profiles.py constructs every entry in the catalog, so a provider cannot be selectable in the Builder without being constructible at run time.

Which list answers which question

Six things in this repository know something about models and providers, and they are not six copies of one list. Each answers a different question, and the one they are all derived from is the first:

Ask Answered by
Which providers may a profile point at, and what credential does each want? PROVIDERS in backend/app/agents/model_resolver.pythe source of truth, and only for the part model inference cannot know
How do I construct the client? pydantic_ai's own infer_provider_class / infer_model. Not this platform's business, and deliberately not restated here
How do I read this provider's live model list? backend/app/core/catalog/model_listings.json
What do I suggest when the provider cannot be asked? backend/app/core/catalog/curated_models.json
What does this model cost, and how much context does it take? the genai-prices snapshot, through model_catalog.priced_model
Which models draw images? backend/app/core/catalog/image_models.json, plus the SDK's own answer about which providers can draw at all

Everything below the first row is derived from it

A derived copy that drifts fails nothing at run time. It shows a picker for a provider that does not exist, or leaves out one that does.

tests/test_model_catalog.py::TestOneAnswerPerQuestion is what makes that a failing build instead — and it requires every provider to appear on this page.

Every key in either catalog file has to name a provider PROVIDERS has. So does every entry in the image catalog. And every provider has to appear on this page. Adding the twenty-eighth is one edit plus whatever that test then asks for.

Two crossings are worth knowing about, because they are lookups that can answer nothing:

  • The price snapshot spells three providers differently — xai is x-ai, bedrock is aws, google_cloud is google — and _PRICE_PROVIDER_ALIASES bridges them.
  • The image catalog carries its own provider and prefix pair, which is a third vocabulary again.

Which models a provider offers

The model-id field is populated from two sources, in this order — and from neither, for seven providers, which the answer says out loud.

Live

Twenty providers publish a list endpoint, and it is the only source that knows about a model released this morning:

anthropic, openai, google, openrouter, groq, mistral, together, cohere, deepseek, xai, sambanova, vercel, ovhcloud, huggingface, cerebras, fireworks, nebius, moonshotai, zai, alibaba.

The response shapes disagree — the array sits at data, at models or at the document root; the id is id, name or model; Gemini prefixes it with models/ — so each is described by data rather than by a branch. Cached in-process for an hour; these lists move on the order of weeks.

Five of them need no credential at allopenrouter, sambanova, vercel, ovhcloud and huggingface — which is what makes them worth having: the picker fills in before anybody has stored a key for that provider. The other fifteen are asked with the organization's own key when there is one.

Six providers still publish nothing this can read: github (its catalog path is gone), heroku, azure, bedrock, google_cloud, and a litellm proxy whose list is whatever the deployment put behind it. ollama answers on the deployment's own network rather than at a fixed host, so it is not listed either.

An empty modality list means not stated, never 'text only'

openrouter and the Hugging Face router both carry architecture.output_modalities, and a listing entry may name that path. Nobody else states it.

A client filtering on it must treat absence as unknown, or it hides models that work. It is metadata a client may narrow on; it is not how the image capability picks its models, which is a catalog file plus the SDK's own answer about which providers can draw at all — see Image generation.

Curated

A short list per provider, used when the provider publishes nothing, when the call fails, or when there is no key to make it with.

It lives in backend/app/core/catalog/curated_models.json beside the other deployment catalogs, so adding a model is one entry rather than a Python edit — and the listings themselves are model_listings.json in the same directory, which is what makes a new provider's endpoint data too.

It is deliberately short, and deliberately not taken from genai-prices, which is already a dependency and does list models.

That is a price dataset. It carries ada and babbage under OpenAI, claude-2 under Anthropic, 690 rows under OpenRouter, and it marks almost nothing deprecated — sorted alphabetically, the first thing a picker would offer for OpenAI is ada. A short current list beats a long misleading one.

What the library is used for is the half that rots. Every context length comes from the snapshot at read time, so no window is written down here; two that were had already gone stale, one of them recorded twice with two different figures.

And a curated id the snapshot has never heard of fails the test suite, which is how a typo or a retired model is caught rather than shipped as a dropdown the provider answers 404 to. A model the snapshot knows but does not price simply has no window, which is the null described below.

Provider Curated ids
anthropic claude-opus-5, claude-sonnet-5, claude-fable-5, claude-haiku-4-5
openai gpt-5.6-sol, gpt-5.6-terra, gpt-5.6-luna, gpt-5.3-codex
google gemini-3.6-flash, gemini-3.5-flash, gemini-3.5-flash-lite, gemini-3.1-pro-preview
deepseek deepseek-v4-pro, deepseek-v4-flash
xai grok-4.5, grok-4.3
groq openai/gpt-oss-120b, llama-3.3-70b-versatile
openrouter five common cross-provider ids

Neither, and it says so

Seven providers publish no listing this platform can read and have no curated entry — github, heroku, ollama, litellm, azure, bedrock and google_cloud.

The response's source is unlisted for those, not curated. An empty shortlist is not a shortlist, and claiming one is what turns "this platform cannot enumerate this provider" into "this provider has no models" (#923). The picker asks for the id instead.

ollama and litellm are the ones worth wiring — both publish an OpenAI-shaped /v1/models at the endpoint the profile already stores — and that needs the listing to be told a base URL, which a fixed ListingSpec.url cannot be.

Neither source is authoritative, which is why the field stays free text.

The window a model accepts is read once and kept

A listing usually carries how many tokens the model accepts, and the profile records it as context_length when it is created.

That number is what context management triggers on: compacting at a fraction of the window is the only setting that stays right when an agent moves to another model.

Why it is stored rather than resolved per run

The request path must not call a provider, and the only thing it could otherwise consult is the bundled price snapshot — which is wrong here in the direction that breaks a run.

That snapshot records 1,000,000 for anthropic:claude-sonnet-4-5 against a real 200,000, so a trigger at 90% lands above the real ceiling and compaction never fires before the provider refuses the request. A profile with fallbacks is worse: it builds a FallbackModel whose composite id resolves to nothing at all.

Null means not recorded, not zero: a profile older than the column, a provider that publishes no length, a curated list, or a listing that could not be reached. The capability then resolves the window itself, exactly as it did before.

If you know better than both, set context_window on the binding. A provider publishes the maximum a model can be made to accept, and a beta- or tier-gated deployment gets less.

A chain of fallbacks carries the primary's number. A FallbackModel has no window of its own, and which model a run reaches is not known until one has refused.

What a run costs

Prices come from a bundled genai-prices snapshot. Nothing phones home for them, which means two things worth knowing:

  • A model too new for the snapshot is unpriced, and a run containing one is recorded as partially priced rather than as costing nothing. A budget that silently treated an unknown model as free would be a budget with a hole in it.
  • Updating prices is a dependency bump.

A keyless provider records no spend

Spend is attributed to the vault secret the run resolved to, and a keyless provider has none to attribute it to.

Cost is checked before each model request and recorded even when the run fails. See Budgets.

A delegation resolves its own profile

One run can involve several models.

A delegate runs on the profile its own spec names, resolved when the runner walks the delegation tree. An inline specialist that names none runs on the profile of the agent that called it — both the least surprising answer and the only one that works when the parent's is the only profile the author chose.

Those requests are metered against the parent run's single ledger, but they are priced per provider: the delegate's guard shares the ledger, the caps and the month's baselines, and takes its own provider.

Sharing the parent's outright would price an Anthropic delegate against OpenAI's catalog — silently, and usually as unpriced, which under-reports the run and flags a perfectly priceable one as a floor.

The child run row a delegation writes names the model that answered it, so the cost dashboard groups a delegated turn under the model that actually ran rather than under the parent's.

Recap

  • A profile is a named model plus a named key, and agents point at profiles so that rotating either touches one row.
  • 27 providers, and the only thing this platform knows about each is the credential shape — construction is Pydantic AI's job.
  • The model id is free text, because no list is authoritative.
  • Context length is read once and stored, because the price snapshot is wrong about it in the direction that breaks a run.
  • Cost comes from a bundled snapshot, an unknown model is recorded as unpriced rather than free, and a keyless provider records no spend at all.

Setting one up

The first-agent walkthrough does this end to end. In short: store a provider key under Settings → Secrets, add a model profile naming it, then point an agent's spec at the profile.

make platform-bootstrap BOOTSTRAP_API_KEY=sk-...

does all three for a new deployment.