Choose where Paladin and Opal’s other AI features run inference: on Opal’s Anthropic account, your own Anthropic account, or your own Amazon Bedrock account.
Paladin and Opal’s other AI features run on Anthropic’s Claude models. You choose whose account the requests run through. The setting applies to your whole organization, under Configuration > Settings > AI Features > LLM Provider.
Provider
Who pays for inference
Where inference runs
Available on
Anthropic - Opal managed
Opal
Anthropic, on Opal’s account
Opal cloud
Anthropic - Your account
You
Anthropic, on your account
Opal cloud and self-hosted
Amazon Bedrock - Your account
You
Your AWS account
Opal cloud and self-hosted
Opal managed is the default on Opal cloud and needs no setup. If you choose your own account and that provider is unavailable, Opal does not fall back to its own account. Use your own account when you want:
Inference usage billed to your own Anthropic or AWS account.
Data retention governed by your own agreement with the provider.
Your own spend and rate limits.
Inference kept inside your AWS boundary (Bedrock only).
Inference runs on Anthropic’s hosted API, on your own Anthropic account.
Don’t add your key under Inventory > +App > Anthropic. That’s the Anthropic Platform integration, which manages access to your Anthropic workspaces. Its Admin Key and Enterprise API Key fields don’t connect Paladin to your account. To run Paladin on your account, connect the key under Configuration > Productivity Integrations instead, as described below.
1
Create an API key
On the Claude platform, create an API key. Use a service account key scoped to a single workspace, not an Admin API key or a personal key. A personal key stops working when the person who created it leaves your organization. A dedicated workspace for Opal lets you set its own spend and rate limits.
2
Connect Anthropic API in Opal
Go to Configuration > Productivity Integrations. In the AI section, select Connect next to Anthropic API, paste the key, and select Create. Opal checks the key with Anthropic when you save it, and stores it encrypted.
Paste your Anthropic API key when you connect the Anthropic API integration.
3
Select it as your provider
Go to Configuration > Settings > AI Features, and under LLM Provider, select Anthropic - Your account. The option stays disabled until the Anthropic API integration is connected.
Choose Anthropic - Your account as the LLM provider.
Inference stays inside your own AWS account.
1
Enable Claude in Bedrock
In your AWS account, make sure Amazon Bedrock and the Claude models are enabled.
2
Connect Amazon Bedrock in Opal
Go to Configuration > Productivity Integrations. In the AI section, select Connect next to Amazon Bedrock, and paste a long-lived Bedrock API key generated in your AWS account. Opal stores the key encrypted.
Paste a Bedrock API key when you connect the Amazon Bedrock integration.
3
Select it as your provider
Go to Configuration > Settings > AI Features, and under LLM Provider, select Amazon Bedrock - Your account and choose the AWS region. Bedrock uses cross-region inference. The default region is us-west-2.
Choose Amazon Bedrock - Your account, then set the Bedrock region.
Prompts go only to the provider you selected. With your own account, usage, billing, and data retention fall under your agreement with that provider. For a full data-flow and subprocessor breakdown for a security or compliance review, contact your Opal representative.
Last modified on October 19, 2026
Was this page helpful?
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Opal Security Docs","colors":{"primary":"#0C7997","light":"#EDFCFC","dark":"#074055"},"logo":{"light":"https://mintcdn.com/opalsecurity/FBbZyeMPZrA69UcV/logo/logo-dark.svg?fit=max\u0026auto=format\u0026n=FBbZyeMPZrA69UcV\u0026q=85\u0026s=93a4bd75f157f9f0ab43cdf4d715b5cd","dark":"https://mintcdn.com/opalsecurity/FBbZyeMPZrA69UcV/logo/logo-light.svg?fit=max\u0026auto=format\u0026n=FBbZyeMPZrA69UcV\u0026q=85\u0026s=1774b545e4f1c5cad647f5194f7b26d9"},"favicon":{"light":"https://mintcdn.com/opalsecurity/DRAwGKUXMxLRQouh/logo/icon-opal-black.svg?fit=max\u0026auto=format\u0026n=DRAwGKUXMxLRQouh\u0026q=85\u0026s=9c8bd1204b6b5b83542c2ab5be549858","dark":"https://mintcdn.com/opalsecurity/DRAwGKUXMxLRQouh/logo/icon-opal-white.svg?fit=max\u0026auto=format\u0026n=DRAwGKUXMxLRQouh\u0026q=85\u0026s=73b53b4ceab6ae0b00e30b2042a6020a"},"icons":{"library":"lucide"},"styling":{"eyebrows":"breadcrumbs","latex":false},"integrations":{"ga4":{"measurementId":"G-1PPPM1WF6D"}},"errors":{"404":{"redirect":false,"title":"Page can't be found","description":"Sorry! This page might have been moved, or the link might be broken. Go back to our documentation via https://docs.opal.dev/docs/welcome."}},"metadata":{"timestamp":true},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"opalsecurity","hasAudioNarration":false,"actualSubdomain":"opalsecurity","customDomains":["docs.opal.dev"],"gitSource":{"type":"github","owner":"opalsecurity","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ae8cca77c5b68a05f6f53c7","collectionId":"a085caf3-f575-4df6-baf0-9ac3eca2cf15","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ae8cca77c5b68a05f6f53c7"},"feedback":{"thumbs":true},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6ae8cca77c5b68a05f6f53c7","clientVersion":"0.0.4045","searchFilterCounts":[{"language":"default","tag":"API Reference","count":212},{"language":"default","tag":"Opal API","count":207},{"language":"default","tag":"Documentation","count":99},{"language":"default","tag":"Integrations","count":94},{"language":"default","tag":"Entitlement Management","count":63},{"language":"default","tag":"resources","count":34},{"language":"default","tag":"groups","count":32},{"language":"default","tag":"Getting Started","count":25},{"language":"default","tag":"Access Management","count":22},{"language":"default","tag":"Infrastructure","count":22}]},"assistantConfig":{"enableStarterQuestions":true,"enableContextualStarterQuestions":true,"deflection":{"enabled":true,"email":"support@opal.dev","showHelpButton":true}},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"docs/paladin/model-providers","slug":"/docs/paladin/model-providers","pageMetadata":{"title":"Model providers","description":"Choose where Paladin and Opal's other AI features run inference: on Opal's Anthropic account, your own Anthropic account, or your own Amazon Bedrock account.","sidebarTitle":"Model Providers","href":"/docs/paladin/model-providers"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Choose where Paladin and Opal’s other AI features run inference: on Opal’s Anthropic account, your own Anthropic account, or your own Amazon Bedrock account.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,li:`li`,p:`p`,strong:`strong`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,ul:`ul`,..._provideComponents(),...props.components},{Frame,Heading,OptimizedImage,Step,Steps,Tab,Table,Tabs,Warning}=_components;if(!Frame)_missingMdxReference(`Frame`,true);if(!Heading)_missingMdxReference(`Heading`,true);if(!OptimizedImage)_missingMdxReference(`OptimizedImage`,true);if(!Step)_missingMdxReference(`Step`,true);if(!Steps)_missingMdxReference(`Steps`,true);if(!Tab)_missingMdxReference(`Tab`,true);if(!Table)_missingMdxReference(`Table`,true);if(!Tabs)_missingMdxReference(`Tabs`,true);if(!Warning)_missingMdxReference(`Warning`,true);return _jsxs(_Fragment,{children:[_jsx(Heading,{level:`2`,id:`overview`,children:`Overview`}),`\n`,_jsxs(_components.p,{children:[`Paladin and Opal’s other AI features run on Anthropic’s Claude models. You choose whose account the requests run through. The setting applies to your whole organization, under `,_jsx(_components.strong,{children:`Configuration`}),` > `,_jsx(_components.strong,{children:`Settings`}),` > `,_jsx(_components.strong,{children:`AI Features`}),` > `,_jsx(_components.strong,{children:`LLM Provider`}),`.`]}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Provider`}),_jsx(_components.th,{children:`Who pays for inference`}),_jsx(_components.th,{children:`Where inference runs`}),_jsx(_components.th,{children:`Available on`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Anthropic - Opal managed`})}),_jsx(_components.td,{children:`Opal`}),_jsx(_components.td,{children:`Anthropic, on Opal’s account`}),_jsx(_components.td,{children:`Opal cloud`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Anthropic - Your account`})}),_jsx(_components.td,{children:`You`}),_jsx(_components.td,{children:`Anthropic, on your account`}),_jsx(_components.td,{children:`Opal cloud and self-hosted`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Amazon Bedrock - Your account`})}),_jsx(_components.td,{children:`You`}),_jsx(_components.td,{children:`Your AWS account`}),_jsx(_components.td,{children:`Opal cloud and self-hosted`})]})]})]}),`\n`,_jsx(_components.p,{children:`Opal managed is the default on Opal cloud and needs no setup. If you choose your own account and that provider is unavailable, Opal does not fall back to its own account. Use your own account when you want:`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsx(_components.li,{children:`Inference usage billed to your own Anthropic or AWS account.`}),`\n`,_jsx(_components.li,{children:`Data retention governed by your own agreement with the provider.`}),`\n`,_jsx(_components.li,{children:`Your own spend and rate limits.`}),`\n`,_jsx(_components.li,{children:`Inference kept inside your AWS boundary (Bedrock only).`}),`\n`]}),`\n`,_jsxs(_components.p,{children:[`If you self-host Opal, you must connect your own account. See `,_jsx(_components.a,{href:`/docs/paladin/self-hosted-setup`,children:`Set up Paladin on self-hosted Opal`}),`.`]}),`\n`,_jsx(Heading,{level:`2`,id:`connect-a-provider`,children:`Connect a provider`}),`\n`,_jsxs(Tabs,{children:[_jsxs(Tab,{title:`Anthropic API`,id:`anthropic-api`,children:[_jsx(_components.p,{children:`Inference runs on Anthropic’s hosted API, on your own Anthropic account.`}),_jsx(Warning,{children:_jsxs(_components.p,{children:[`Don’t add your key under `,_jsx(_components.strong,{children:`Inventory`}),` > `,_jsx(_components.strong,{children:`+App`}),` > `,_jsx(_components.strong,{children:`Anthropic`}),`. That’s the `,_jsx(_components.a,{href:`/integrations/anthropic`,children:`Anthropic Platform`}),` integration, which manages access to your Anthropic workspaces. Its `,_jsx(_components.strong,{children:`Admin Key`}),` and `,_jsx(_components.strong,{children:`Enterprise API Key`}),` fields don’t connect Paladin to your account. To run Paladin on your account, connect the key under `,_jsx(_components.strong,{children:`Configuration`}),` > `,_jsx(_components.strong,{children:`Productivity Integrations`}),` instead, as described below.`]})}),_jsxs(Steps,{children:[_jsx(Step,{title:`Create an API key`,children:_jsxs(_components.p,{children:[`On the `,_jsx(_components.a,{href:`https://platform.claude.com/settings/keys`,children:`Claude platform`}),`, create an API key. Use a service account key scoped to a single workspace, not an Admin API key or a personal key. A personal key stops working when the person who created it leaves your organization. A dedicated workspace for Opal lets you set its own spend and rate limits.`]})}),_jsxs(Step,{title:`Connect Anthropic API in Opal`,children:[_jsxs(_components.p,{children:[`Go to `,_jsx(_components.strong,{children:`Configuration`}),` > `,_jsx(_components.strong,{children:`Productivity Integrations`}),`. In the `,_jsx(_components.strong,{children:`AI`}),` section, select `,_jsx(_components.strong,{children:`Connect`}),` next to `,_jsx(_components.strong,{children:`Anthropic API`}),`, paste the key, and select `,_jsx(_components.strong,{children:`Create`}),`. Opal checks the key with Anthropic when you save it, and stores it encrypted.`]}),_jsx(Frame,{caption:`Paste your Anthropic API key when you connect the Anthropic API integration.`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-anthropic-api-key.png?fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=35808913f9d780056e32234f4c602b1f`,alt:`The Link Anthropic API dialog, with a field for the Anthropic API key and a Create button.`,\"data-og-width\":`972`,width:`972`,\"data-og-height\":`581`,height:`581`,\"data-path\":`images/docs/paladin-anthropic-api-key.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-anthropic-api-key.png?w=280\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=3705aba1f3557431ab78aade06492ca6 280w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-anthropic-api-key.png?w=560\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=cd18a7204076e8a557b44d504607281f 560w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-anthropic-api-key.png?w=840\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=527324a983b48cc4fe1f69058273e43a 840w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-anthropic-api-key.png?w=1100\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=608fe1afc956d446701d1adc4e179ba0 1100w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-anthropic-api-key.png?w=1650\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=bf4dc0593a704598a3270dd3fc3a074f 1650w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-anthropic-api-key.png?w=2500\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=30487512a4a361ef04659b430f6e4f2b 2500w`})})]}),_jsxs(Step,{title:`Select it as your provider`,children:[_jsxs(_components.p,{children:[`Go to `,_jsx(_components.strong,{children:`Configuration`}),` > `,_jsx(_components.strong,{children:`Settings`}),` > `,_jsx(_components.strong,{children:`AI Features`}),`, and under `,_jsx(_components.strong,{children:`LLM Provider`}),`, select `,_jsx(_components.strong,{children:`Anthropic - Your account`}),`. The option stays disabled until the Anthropic API integration is connected.`]}),_jsx(Frame,{caption:`Choose Anthropic - Your account as the LLM provider.`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-ai-provider-options.png?fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=12bcbce780ef79532dfbcfe1f0dedf69`,alt:`The LLM Provider dropdown in AI Features settings, listing Anthropic - Opal managed, Anthropic - Your account, and Amazon Bedrock - Your account.`,\"data-og-width\":`1464`,width:`1464`,\"data-og-height\":`382`,height:`382`,\"data-path\":`images/docs/paladin-ai-provider-options.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-ai-provider-options.png?w=280\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=30e0f8bee23a776aa6ad1c41eaf7a6ee 280w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-ai-provider-options.png?w=560\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=07d901dcbb9f2065973edbc5ddc82bac 560w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-ai-provider-options.png?w=840\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=6dcb97b50ac446ed0ff7e7d289240f3d 840w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-ai-provider-options.png?w=1100\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=1aa78e00fb0d1112ca0593e21fc0e238 1100w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-ai-provider-options.png?w=1650\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=1a3da4c4be1d90c54dc3ec9419f91d7b 1650w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-ai-provider-options.png?w=2500\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=69790aafac5ea4307379ac69d5baef6d 2500w`})})]})]})]}),_jsxs(Tab,{title:`Amazon Bedrock`,id:`amazon-bedrock`,children:[_jsx(_components.p,{children:`Inference stays inside your own AWS account.`}),_jsxs(Steps,{children:[_jsx(Step,{title:`Enable Claude in Bedrock`,children:_jsx(_components.p,{children:`In your AWS account, make sure Amazon Bedrock and the Claude models are enabled.`})}),_jsxs(Step,{title:`Connect Amazon Bedrock in Opal`,children:[_jsxs(_components.p,{children:[`Go to `,_jsx(_components.strong,{children:`Configuration`}),` > `,_jsx(_components.strong,{children:`Productivity Integrations`}),`. In the `,_jsx(_components.strong,{children:`AI`}),` section, select `,_jsx(_components.strong,{children:`Connect`}),` next to `,_jsx(_components.strong,{children:`Amazon Bedrock`}),`, and paste a long-lived Bedrock API key generated in your AWS account. Opal stores the key encrypted.`]}),_jsx(Frame,{caption:`Paste a Bedrock API key when you connect the Amazon Bedrock integration.`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-token.png?fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=bffb96358dbc33a98cbc63015b61af59`,alt:`The Link Bedrock dialog, with a field for the Bedrock token and a Create button.`,\"data-og-width\":`972`,width:`972`,\"data-og-height\":`503`,height:`503`,\"data-path\":`images/docs/paladin-bedrock-token.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-token.png?w=280\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=3efd4b00ccc2ef459d6a2005befc57bd 280w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-token.png?w=560\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=4c717fbd2de8edcd1d2563d9dba4c894 560w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-token.png?w=840\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=d615ec4be8321a6a29b9d5197c88dafe 840w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-token.png?w=1100\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=6d2654ed2068d1f6fb258bc198d3de07 1100w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-token.png?w=1650\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=fce0fe06775ad78e3f7dca058abef676 1650w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-token.png?w=2500\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=2208f8e12b0c45ade9aeaa956b0db127 2500w`})})]}),_jsxs(Step,{title:`Select it as your provider`,children:[_jsxs(_components.p,{children:[`Go to `,_jsx(_components.strong,{children:`Configuration`}),` > `,_jsx(_components.strong,{children:`Settings`}),` > `,_jsx(_components.strong,{children:`AI Features`}),`, and under `,_jsx(_components.strong,{children:`LLM Provider`}),`, select `,_jsx(_components.strong,{children:`Amazon Bedrock - Your account`}),` and choose the AWS region. Bedrock uses cross-region inference. The default region is `,_jsx(_components.code,{children:`us-west-2`}),`.`]}),_jsx(Frame,{caption:`Choose Amazon Bedrock - Your account, then set the Bedrock region.`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-provider.png?fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=705d84d75919e2873484b5d969903aed`,alt:`The LLM Provider setting set to Amazon Bedrock - Your account, with the Bedrock region field below it.`,\"data-og-width\":`1464`,width:`1464`,\"data-og-height\":`320`,height:`320`,\"data-path\":`images/docs/paladin-bedrock-provider.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-provider.png?w=280\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=d426d2a5407bdb9c24bbb0df9b3298b6 280w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-provider.png?w=560\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=4ce436e72164936c73e18814e81ecb1d 560w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-provider.png?w=840\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=9477f55ca424069cd3867d7dbcaeed7f 840w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-provider.png?w=1100\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=4fddb32986227ab99de8c54480ef5d85 1100w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-provider.png?w=1650\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=79d52be7dfc5e4542efcd871730912b9 1650w, https://mintcdn.com/opalsecurity/PfcD7_PQsnIjFDg6/images/docs/paladin-bedrock-provider.png?w=2500\u0026fit=max\u0026auto=format\u0026n=PfcD7_PQsnIjFDg6\u0026q=85\u0026s=911b3e7d77fa3322800e565be59ecef5 2500w`})})]})]})]})]}),`\n`,_jsx(Heading,{level:`2`,id:`data-handling`,children:`Data handling`}),`\n`,_jsx(_components.p,{children:`Prompts go only to the provider you selected. With your own account, usage, billing, and data retention fall under your agreement with that provider. For a full data-flow and subprocessor breakdown for a security or compliance review, contact your Opal representative.`})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Model providers","description":"Choose where Paladin and Opal's other AI features run inference: on Opal's Anthropic account, your own Anthropic account, or your own Amazon Bedrock account.","sidebarTitle":"Model Providers","href":"/docs/paladin/model-providers"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Overview","slug":"overview","depth":2,"children":[]},{"title":"Connect a provider","slug":"connect-a-provider","depth":2,"children":[]},{"title":"Data handling","slug":"data-handling","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":["/_mintlify/custom/opalsecurity/d0e14c3cf9bbd682/changelog-scraper.js"],"subdomain":"opalsecurity","siteName":"Opal Security Docs","title":"Model providers - Opal Security Docs","contextualStarterQuestions":[{"_id":"6ad68beec635537553908054","deploymentId":"68ddaa9a3f8b7de5bc3a7b47","questionText":"How do I choose a model provider?","status":"active","generatedBy":"contextual","path":"docs/paladin/model-providers","createdAt":"2026-10-19T21:30:22.080Z","updatedAt":"2026-10-19T21:30:22.080Z","__v":0},{"_id":"6ad68beec635537553908056","deploymentId":"68ddaa9a3f8b7de5bc3a7b47","questionText":"How do I set up my own account?","status":"active","generatedBy":"contextual","path":"docs/paladin/model-providers","createdAt":"2026-10-19T21:30:22.080Z","updatedAt":"2026-10-19T21:30:22.080Z","__v":0},{"_id":"6ad68beec635537553908055","deploymentId":"68ddaa9a3f8b7de5bc3a7b47","questionText":"What's the difference between providers?","status":"active","generatedBy":"contextual","path":"docs/paladin/model-providers","createdAt":"2026-10-19T21:30:22.080Z","updatedAt":"2026-10-19T21:30:22.080Z","__v":0}],"navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-19T21:30:08.494Z","gitLastModified":"2026-10-19T21:29:57.000Z","originalFileLocation":"docs/paladin/model-providers.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Choose where Paladin and Opal\u0026#x27;s other AI features run inference: on Opal\u0026#x27;s Anthropic account, your own Anthropic account, or your own Amazon Bedrock account.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Opal Security Docs\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Model providers - Opal Security Docs\">\u003cmeta data-mint-head property=\"og:description\" content=\"Choose where Paladin and Opal\u0026#x27;s other AI features run inference: on Opal\u0026#x27;s Anthropic account, your own Anthropic account, or your own Amazon Bedrock account.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Opal Security Docs\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.opal.dev/docs/paladin/model-providers\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://opalsecurity.mintlify.app/_mintlify/api/og/v2?division=Paladin\u0026amp;title=Model+providers\u0026amp;description=Choose+where+Paladin+and+Opal%27s+other+AI+features+run+inference%3A+on+Opal%27s+Anthropic+account%2C+your+own+Anthropic+account%2C+or+your+own+Amazon+Bedrock+account.\u0026amp;theme=287ef1256bbb1bf2a61f3fd2\u0026amp;signature=d674b8e882f47938517547b0c66a936c0101867a12efd950d5c354ccf3821cba\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Model providers - Opal Security Docs\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Choose where Paladin and Opal\u0026#x27;s other AI features run inference: on Opal\u0026#x27;s Anthropic account, your own Anthropic account, or your own Amazon Bedrock account.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://opalsecurity.mintlify.app/_mintlify/api/og/v2?division=Paladin\u0026amp;title=Model+providers\u0026amp;description=Choose+where+Paladin+and+Opal%27s+other+AI+features+run+inference%3A+on+Opal%27s+Anthropic+account%2C+your+own+Anthropic+account%2C+or+your+own+Amazon+Bedrock+account.\u0026amp;theme=287ef1256bbb1bf2a61f3fd2\u0026amp;signature=d674b8e882f47938517547b0c66a936c0101867a12efd950d5c354ccf3821cba\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/opalsecurity/t501z2uOx-XXqevB/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Opal Security Docs\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#0C7997\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.opal.dev/docs/paladin/model-providers\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/docs/paladin/model-providers.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.opal.dev/#organization\",\"name\":\"Opal Security Docs\",\"url\":\"https://docs.opal.dev\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/opalsecurity/FBbZyeMPZrA69UcV/logo/logo-dark.svg?fit=max\u0026auto=format\u0026n=FBbZyeMPZrA69UcV\u0026q=85\u0026s=93a4bd75f157f9f0ab43cdf4d715b5cd\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.opal.dev#website\",\"name\":\"Opal Security Docs\",\"url\":\"https://docs.opal.dev\",\"publisher\":{\"@id\":\"https://docs.opal.dev/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.opal.dev/docs/paladin/model-providers#webpage\",\"url\":\"https://docs.opal.dev/docs/paladin/model-providers\",\"name\":\"Model providers\",\"description\":\"Choose where Paladin and Opal's other AI features run inference: on Opal's Anthropic account, your own Anthropic account, or your own Amazon Bedrock account.\",\"dateModified\":\"2026-10-19T21:29:57.000Z\",\"isPartOf\":{\"@id\":\"https://docs.opal.dev#website\"},\"breadcrumb\":{\"@id\":\"https://docs.opal.dev/docs/paladin/model-providers#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.opal.dev/docs/paladin/model-providers#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Paladin\",\"item\":\"https://docs.opal.dev/docs/paladin/overview\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Model providers\",\"item\":\"https://docs.opal.dev/docs/paladin/model-providers\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://docs.opal.dev/docs/paladin/model-providers#article\",\"headline\":\"Model providers\",\"name\":\"Model providers\",\"description\":\"Choose where Paladin and Opal's other AI features run inference: on Opal's Anthropic account, your own Anthropic account, or your own Amazon Bedrock account.\",\"url\":\"https://docs.opal.dev/docs/paladin/model-providers\",\"mainEntityOfPage\":{\"@id\":\"https://docs.opal.dev/docs/paladin/model-providers#webpage\"},\"dateModified\":\"2026-10-19T21:29:57.000Z\",\"publisher\":{\"@id\":\"https://docs.opal.dev/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.opal.dev#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Opal Security Docs\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Opal Security Docs","nav":{"global":null,"tabs":[{"tab":"Documentation","groups":[{"group":"Welcome","icon":"leaf","pages":[{"title":"Quickstart","mode":"wide","href":"/docs/welcome"},{"title":"Overview","href":"/docs/opal-overview"},{"title":"Concepts","href":"/docs/opal-101"},{"title":"Opal architecture","href":"/docs/opal-architecture"},{"group":"Best practices","pages":[{"title":"Best practices for access requests","href":"/docs/best-practices-for-access-requests"},{"title":"Best practices for access reviews","href":"/docs/best-practices-for-user-access-reviews"}]}]},{"group":"End user","icon":"book-open","pages":[{"title":"Access Request FAQs","sidebarTitle":"How to request access","href":"/docs/end-user-faq"},{"title":"Tips on searching","href":"/docs/tips-on-searching"},{"title":"Complete Access Reviews","sidebarTitle":"How to complete access reviews","href":"/docs/complete-access-reviews"}]},{"group":"Getting Started","icon":"rocket","pages":[{"title":"Set up Cloud","href":"/docs/set-up-cloud"},{"group":"Set up Self-Hosted","pages":[{"title":"Set up Self-Hosted","href":"/docs/self-host-overview"},{"title":"Self-Hosted on AWS EKS","href":"/docs/self-host-opal-aws-guide"},{"title":"Self-Hosted on GKE","href":"/docs/self-host-opal-gke-guide"},{"title":"Disaster recovery guide","href":"/docs/disaster-recovery-guide"},{"title":"Update your Opal installation","href":"/docs/update-self-hosted-opal"},{"title":"Install Opal using Helm","href":"/docs/install-opal-using-helm"},{"title":"Set up an Airgapped Opal Environment","href":"/docs/setup-an-airgapped-opal-environment"},{"title":"Configure Async Exports Storage (Self-Hosted)","href":"/docs/configure-async-exports-storage"},{"title":"Kubernetes Components and Health Monitoring","href":"/docs/kubernetes-components-and-health-monitoring-guide"}]},{"group":"Connect Identity or HR Providers","pages":[{"title":"Connect Identity or HR Providers","sidebarTitle":"Overview","href":"/docs/connect-your-identity-provider-idp"},{"title":"Add your first IDP/HR provider","href":"/docs/add-your-first-idphr-provider"},{"title":"Add additional IDP/HR providers","href":"/docs/add-additional-idphr-providers"},{"title":"Import user secondary emails","href":"/docs/importing-user-secondary-email"}]},{"title":"Connect Productivity Tools","sidebarTitle":"Connect Productivity Tools","href":"/docs/connect-your-productivity-tools"},{"group":"Connect Apps and Infrastructure","pages":[{"title":"Connect Apps and Infrastructure","sidebarTitle":"Overview","href":"/docs/set-up-connections"},{"title":"Import and configure resources","href":"/docs/import-and-configure-resources-and-groups"},{"title":"Opal's server IP ranges","href":"/docs/ip-ranges"}]},{"group":"Configure SSO and MFA","pages":[{"title":"Configure SSO and MFA","sidebarTitle":"Overview","href":"/docs/configure-sso-and-mfa"},{"group":"SSO with SAML","pages":[{"title":"SSO with SAML","href":"/docs/sso-with-saml"},{"title":"Google SAML Setup","href":"/docs/google-saml-setup"},{"title":"Okta SAML Setup","href":"/docs/okta-saml-setup"}]},{"title":"Okta Multifactor Authentication","href":"/docs/okta-multifactor-authentication"},{"title":"Okta SCIM: Provision Opal Users","href":"/docs/okta-scim-integration"},{"title":"OIDC Provider Setup for Opal Actions","href":"/docs/oidc-provider-setup-for-opal-actions"}]}]},{"group":"Access Management","icon":"shield","pages":[{"group":"Manage end-user catalog","pages":[{"title":"Curate end-user catalog","href":"/docs/curate-catalog"},{"title":"Bundles","href":"/docs/bundles"},{"title":"Configure reviewers","href":"/docs/configure-reviewers"},{"title":"Escalate if no response","href":"/docs/escalate-if-no-response"},{"title":"Request on behalf rules","href":"/docs/request-on-behalf"},{"title":"Delegate reviews","href":"/docs/delegate-reviews"}]},{"title":"Configuration templates","href":"/docs/configuration-templates"},{"title":"Manage access with ticketing","href":"/docs/ticket-propagation"},{"title":"Access Rules","href":"/docs/access-rules"},{"title":"Risk Center","href":"/docs/least-privilege-posture-management"},{"group":"Manage groups in Opal","pages":[{"title":"Overview","href":"/docs/manage-groups-in-opal"},{"title":"Manage break-glass access","href":"/docs/manage-breakglass-access"},{"title":"Nested groups","href":"/docs/nested-groups"},{"title":"Group aliasing","href":"/docs/okta-group-aliasing"},{"title":"Linked groups","href":"/docs/linked-groups"},{"title":"Group leaders","href":"/docs/group-projects"}]},{"title":"Notifications","href":"/docs/notifications"},{"title":"Special roles in Opal","href":"/docs/roles-in-opal"},{"title":"Owner Permissions","href":"/docs/owner-permissions"},{"title":"Custom Opal roles","href":"/docs/custom-opal-roles"},{"title":"User provisioning","href":"/docs/user-provisioning"},{"title":"Access Comparison","sidebarTitle":"Access Comparison","tag":"NEW","href":"/docs/access-comparison"}]},{"group":"AI Agent Governance","icon":"cpu","pages":[{"title":"Agent Inventory","href":"/docs/agent-inventory"},{"title":"OpenAI and ChatGPT","href":"/docs/openai-chatgpt-setup"},{"title":"Anthropic Setup","href":"/docs/anthropic-agent-setup"}]},{"group":"OpalScript","icon":"scroll","tag":"NEW","pages":[{"title":"Use OpalScript to automate access workflows","sidebarTitle":"Overview","href":"/docs/opalscript-overview"},{"title":"Work with scripts in the OpalScript editor","sidebarTitle":"Using the editor","href":"/docs/opalscript-editor"},{"title":"Write OpalScript with AI","sidebarTitle":"Write with AI","href":"/docs/opalscript-ai-assistant"},{"title":"Utility Modules for OpalScript","sidebarTitle":"Utility Modules","href":"/docs/opalscript-utilitymodules"},{"group":"Request Review Scripts","pages":[{"title":"Start automating workflows around requests","sidebarTitle":"Request Review","href":"/docs/requestreview-getstarted"},{"title":"Request Review Example Scripts","sidebarTitle":"Examples","href":"/docs/requestreview-examples"}]},{"title":"Control who can cover a request with delegation conditions","sidebarTitle":"Delegation Conditions","href":"/docs/opalscript-delegation-conditions"},{"title":"Give Paladin extra context with context provider scripts","sidebarTitle":"Paladin Context","tag":"BETA","href":"/docs/opalscript-context-provider"},{"title":"Manage OpalScripts with Terraform","sidebarTitle":"Terraform","href":"/docs/opalscript-terraform"},{"title":"OpalScript Reference","sidebarTitle":"Reference","href":"/docs/opalscript-reference"}]},{"group":"Paladin","icon":"bot","tag":"NEW","pages":[{"title":"Use Paladin to scale your security function","sidebarTitle":"Overview","href":"/docs/paladin/overview"},{"title":"Review access requests with Paladin","sidebarTitle":"Access Requests","href":"/docs/paladin/access-request"},{"title":"Review access campaigns with Paladin Insights","description":"Use Paladin Insights to group similar access in an access campaign and suggest bulk approve or revoke decisions to reviewers.","sidebarTitle":"Access Reviews","href":"/docs/paladin/access-reviews"},{"title":"Model providers","sidebarTitle":"Model Providers","href":"/docs/paladin/model-providers"},{"title":"Set up Paladin on self-hosted Opal","description":"Turn on Paladin in a self-hosted Opal deployment: connect a model provider, create the agent, run it on every request in monitor mode, and go live when you're ready.","sidebarTitle":"Self-Hosted Setup","href":"/docs/paladin/self-hosted-setup"}]},{"group":"OpalQuery","icon":"search","tag":"NEW","pages":[{"title":"Overview","href":"/docs/opal-query"},{"title":"Node queries","href":"/docs/opal-query-node"},{"title":"Access queries","href":"/docs/opal-query-access"},{"title":"Query API","href":"/docs/opal-query-api"}]},{"group":"Auditing and Security","icon":"user-round-search","pages":[{"group":"Access Campaigns","tag":"NEW","pages":[{"title":"Create Access Campaigns","sidebarTitle":"Create access campaigns","href":"/docs/access-campaigns"},{"title":"Manage Access Campaign","sidebarTitle":"Manage your access campaign","href":"/docs/managing-access-campaigns"},{"group":"Legacy UARs","pages":[{"title":"Create Access Reviews","tag":"LEGACY","href":"/docs/access-reviews-legacy"},{"title":"Assign and complete reviews","tag":"LEGACY","href":"/docs/assigning-and-completing-reviews-legacy"},{"title":"Manage reviews","tag":"LEGACY","href":"/docs/managing-user-access-reviews-legacy"}]}]},{"title":"Events","href":"/docs/event-types"},{"title":"Events Streaming","href":"/docs/events-streaming"},{"title":"Metrics dashboard","href":"/docs/metrics"},{"title":"Sync schedules and triggers","href":"/docs/sync-schedules-and-triggers"}]},{"group":"Custom Integrations","icon":"pencil-line","pages":[{"title":"Overview","href":"/docs/custom-integrations-overview"},{"title":"Create your own connector","href":"/docs/how-to-create-your-own-connector"},{"title":"Custom Connector API Spec","href":"/docs/api-spec"},{"title":"Webhooks","href":"/docs/webhooks"}]},{"group":"For Developers","icon":"terminal","pages":[{"title":"Opal CLI","href":"/docs/opal-cli"},{"title":"Use Terraform with Opal","href":"/docs/use-terraform-with-opal"},{"group":"Model Context Protocol (MCP) Server","tag":"NEW","pages":[{"title":"Model Context Protocol (MCP)","mode":"wide","sidebarTitle":"Overview","href":"/docs/mcp/overview"},{"title":"End User MCP Server","sidebarTitle":"End Users","href":"/docs/mcp/end-user"},{"title":"Admin Provisioning MCP Server","sidebarTitle":"Admin Provisioning","href":"/docs/mcp/admin-provisioning"},{"title":"Admin Auditing MCP Server","sidebarTitle":"Admin Auditing","href":"/docs/mcp/admin-auditing"},{"title":"Okta Cross App Access (XAA)","sidebarTitle":"Okta Cross App Access","href":"/docs/mcp/okta-cross-app-access"},{"title":"Legacy MCP","deprecated":true,"href":"/docs/mcp/gram-mcp-servers"}]}]}]},{"tab":"Integrations","pages":[{"title":"Integrations","href":"/integrations/overview"}]},{"tab":"API Reference","pages":[{"title":"API Reference","href":"/reference/authentication"}]},{"tab":"Changelog","pages":[{"title":"Changelog","href":"/changelog/changelog"}]}]},"basePath":"","title":"Model providers - Opal Security Docs","buildId":"dpl_36EDyZCDfRuoUD9af5CH4M1bqY2h","deploymentId":"dpl_36EDyZCDfRuoUD9af5CH4M1bqY2h","dynamics":["07c022d89b","a74be98ba7"],"chunks":["Frame-DW6UFrUy.js","DynamicMarkdown-B62XqCSI.js","zoom-image-lightbox-eHyQ0tlO.js","lightbox-handle-r17bVUz3.js"]}