All AI keys live in Settings. They are stored locally in encrypted settings on your machine and never sent anywhere except to the provider you configured.
Open Settings
Click the gear icon in the top-right corner of the app, or press Cmd / Ctrl-,.
The Settings panel has these sections:
- Telegram — bot token.
- AI Models — OpenAI, Anthropic, Google, Kling (access + secret), WaveSpeed, GeminiGen.
- Other — SerpAPI.
- Cloudflare Sharing — Worker URL and API token (for private sharing)
- GitHub Keys – for Board sync with Github and version control
Paste a key
Click the field for the provider you want to configure. Paste the key. Click Save at the bottom of the panel.
Keys are masked by default. Click the eye icon to reveal a key for verification.
How keys are stored
The desktop app encrypts settings with the OS-level keyring (macOS Keychain, Windows Credential Vault).
Keys never leave your machine. Every AI call goes directly from your machine to the provider’s HTTPS endpoint.
When a key is invalid
If the key is wrong, expired, or out of quota, the generation panel surfaces a short error and the cost estimate is replaced with a warning. The error text is provider-specific (401 invalid_api_key, 429 quota_exceeded, etc.) so you can act on it directly.
Rotating keys
Replace the key in the field, click Save, and start generating again. There is no caching; the next request uses the new key immediately.
Removing a key
Empty the field, click Save. Models that depend on that provider disappear from the model pickers.
Where to go next
- Bring Your Own Keys — billing model.
- Image Generation — first generation flow.
- Telegram Bot Setup — separate flow for the Telegram token.
- Cloudflare Account Setup — separate flow for the sharing token.
Leave a Reply