By default, every NookDocs LLM call (writing agent, AI assistant) uses the AI included in your plan, managed by NookDocs. Enterprise customers can flip this — paste your own provider key and calls bill to your account instead. Compliance teams love it (data residency, SOC 2 vendor list), cost-conscious teams use it to consolidate spend.
Where to manage
Project → Settings → AI / Models. Three providers supported today: OpenAI, Anthropic, OpenRouter.
Paste a key per provider, click Save. Keys are encrypted with AES-256-GCM before hitting storage and we display only the last 4 characters after save (we never see plaintext again).
Plan availability
| Plan | BYOK |
| Free | — |
| Pro | — |
| Team | — |
| Enterprise | ✅ |
How resolution works
Every LLM call from your org runs this resolver:
Look up
org_llm_credentialsfor an active key matching the call's provider.If found, decrypt and use it.
If missing, fall back to the platform key.
The fallback is per-provider — having an OpenAI key on file doesn't switch your Anthropic calls; both providers route independently.
Removing a key
Click the trash icon on the row. Future calls fall back to the platform key immediately. The encrypted ciphertext is hard-deleted (no soft-delete or recovery — paste again to re-enable).
Billing impact
| State | Who pays |
| BYOK active for provider | Your provider account |
| BYOK missing for provider | NookDocs platform pool — counted against your monthly agent_credits_monthly quota |
| BYOK key invalid (rotated, revoked) | Call fails with provider-specific error; no automatic fallback today (planned for next release) |
If you're using BYOK to bypass the platform quota, expect that limit to relax once you've been on Enterprise for ≥30 days — contact your CSM for a quota override.