Manage your AI provider

After you add a provider connection, you can verify it still works, rotate the API key, point the project at a different provider, or remove connections from Settings → Global Settings → AI Provider. Organization-wide AI mode (your key vs Encatch-managed AI) is controlled separately under Manage Org & Projects → Settings → AI settings.

Before you begin

• Your organization is on the Growth or Enterprise plan.
• You have global settings access for the project (or a role that includes it).
• An organization admin has enabled Bring your own key under Manage Org & Projects → Settings → AI settings. See Availability on the overview.
• You have an active account with a supported provider (Vercel AI Gateway, OpenRouter, Amazon Bedrock, Google Vertex AI, Azure OpenAI, or Azure AI Foundry), with billing enabled.

Check the connection

1. Open the project and go to Settings → Global Settings → AI Provider.
2. Find the connection in the list. Each saved connection shows its Provider name and the fields you configured (for example default Model ID). Encatch does not show the secret again after save.
3. To run a live check, enter or confirm a Model ID and click Test on the connection, or click Test on a capability row that uses that connection. Tests call your provider’s API; your provider may charge for each test.
4. If the test fails, you see an error in the UI—fix the key, model id, or provider status and test again. See Connection Test fails in troubleshooting.

Tests also run when you Save project AI settings in some cases. A successful test means that connection, model, and capability requirements work together for that check.

Replace your API key

Follow this order to rotate a key without interrupting AI features:

1. Create a new key in your provider’s console. Keep the old key active for now.
2. In Encatch, go to Settings → Global Settings → AI Provider and edit the connection (open the connection and update Secret). If edit is unavailable, remove the connection and add it again with the same provider and the new key.
3. Paste the new key and click Save.
4. Click Test with a known-good Model ID and confirm the test succeeds. Then Save project AI settings if you have unsaved capability changes.
5. Revoke the old key in your provider’s console.

Encatch never displays a saved secret again. You replace it by editing Secret with a new value—there is no separate “view key” action.

Switch to a different provider

Projects can have multiple connections. Capabilities use the default connection and model, or an Override that points at a specific connection.

1. Create an API key with the new provider.
2. On Settings → Global Settings → AI Provider, click Add connection, select the new Provider, paste the key, optionally Test, and Save.
3. Set default connection and default model to the new connection (or set Override on each capability that should use it). Pick models that work for each capability you configure (for example structured output or streaming).
4. Save project AI settings. Confirm Test succeeds for the default and any overrides you rely on.
5. Remove or delete the old connection when nothing points at it anymore. Revoke the old provider’s key in its console.

Result: New AI work uses the new connection and model. Wording and quality can differ by model. Insights and themes already stored in Encatch stay as they are; new runs (filters, categorisation, chat, and so on) use the new configuration.

Go back to Encatch’s built-in AI

Bring-your-own-key is an organization-level setting. Removing a project connection alone does not turn Encatch-managed AI back on if the organization still uses Bring your own key.

For the whole organization

1. An organization admin opens Manage Org & Projects → Settings → AI settings.
2. Switch from Bring your own key to Encatch-managed AI (not AI off, unless you intend to disable AI entirely).
3. In each project, remove provider connections you no longer need on Settings → Global Settings → AI Provider.

Result: AI features run on Encatch’s built-in AI again and consume your organization’s AI credits where applicable. Encatch deletes stored connection secrets when you remove a connection or when BYOK is no longer in use for the organization—revoke keys in your provider’s console as well.

Remove one connection from a project

1. Go to Settings → Global Settings → AI Provider.
2. Before you delete, check whether the connection is the project default or used in any capability Override. Update the default and overrides to another connection first.
3. Remove or delete the connection and Save project AI settings.

If the organization still uses Bring your own key and this was the only working connection, AI features in that project may stop until you add and configure another connection. See the overview callout on missing connections.

After you change connections

When you add, rotate, or remove connections:

1. Confirm the default connection and model still exist and match what you expect.
2. Review each capability set to Override so it still points at a valid connection and model.
3. Save project settings.

For Use default, Override, and Disabled, see How it works.