AI provider settings

Provider, policy & BYOK.

watsonx is the default and only provider used for governed work. Optional providers and BYOK are admin-controlled.

Heads up. Document analysis, summarization, classification, scope-of-work and any saved/shared deliverable always runs on watsonx. BYOK + alternate providers apply only to drafting workflows. Government tenants are pinned to watsonx.

Defaults

Default providerwatsonx
Subscription tier—
Tenant typestandard
Government restrictionoff

BYOK

BYOK enabledfalse
Allowed for governednever
Allowed providerswatsonx
Stored keysnone

Provider health

Run GET /api/v1/ai/health as admin to populate.

Endpoint contract

All admin actions require role admin on the active workspace.

GET /api/v1/ai/policyread tenant AI policy
PUT /api/v1/ai/policyupdate tenant AI policy
GET /api/v1/ai/allowedproviders permitted for a workflow
POST /api/v1/ai/resolvepolicy decision (no execution)
POST /api/v1/ai/executerun an AI workflow
GET /api/v1/ai/byoklist masked BYOK keys for current user
POST /api/v1/ai/byokregister a BYOK key (admin)
DELETE /api/v1/ai/byok/:providerrevoke BYOK key
GET /api/v1/ai/healthper-provider health summary

Strategy & full reference

See /docs/sourcedeck/ and AI_PROVIDER_STRATEGY.md.