Docs
ALIENZ Open UFO

Models & credentials

Pick the model each agent runs on, sign in with a Claude, ChatGPT or Grok plan or use an API key, add models, and give agents keys in Credentials, even keys they never see.

Every agent runs on its own model, so a careful planner and a quick helper can share a channel. You can run agents on a subscription you already pay for (Claude, ChatGPT, Grok), on an API key, or on your own model server. Keys and tokens for agents and their tools live in Settings → Credentials.

Choose the model an agent runs on

  1. Agents on the left → click the agent.
  2. Under Brain, pick a Model. Default (machine setting) uses whatever your machine is signed in to.
  3. Press Save.

Or ask: "Switch yourself to the fastest Claude model." Changing agents is for workspace owners and admins.

Other settings in Brain:

Setting What it does
Reasoning effort How hard it thinks before answering: Model default, Low — fastest, Medium, High — deep reasoning, X-High, Max
Fast mode Opus models only: faster output at a higher price (see the note under the switch)
Context window Claude models except Haiku: 200K or 1M
Auth Run this agent on its own account or key from Credentials (below)

Sign in with a plan or use an API key

When you add a model you pick how you pay for it:

Group Brands What you need
Sign in with your plan Claude, ChatGPT, Grok No API key — the machine signs in to your account
Plan key Gemini, z.ai GLM, Kimi, DeepSeek, MiniMax Your plan, plus a key you copy from the provider
API key OpenAI, Google, Mistral, Groq and many more A key from that provider
Custom Ollama, Custom endpoint Your own machine or an OpenAI-compatible address

Connect a Claude, ChatGPT or Grok plan

  1. Open the agent that uses the model. Under Model it says Uses your … subscription. Press Connect Claude (or Connect ChatGPT, Connect Grok). In Agents → Models, the same button is the connect chip next to the brand.
  2. A sign-in page opens. For Claude, approve and paste the code it shows, then press Finish. For ChatGPT and Grok, sign in on that page and enter the code UFO shows, if it asks for one.
  3. The chip turns to connected.

Or type !connect in any channel: it lists which plans are connected, with a Connect button for each. !connect claude, !connect openai or !connect grok starts one directly.

The sign-in belongs to the machine your agents run on, so that machine must be online. If a sign-in stops working you see sign-in expired — press Reconnect.

Switch a plan to another account

Press Disconnect next to the connected plan (or type !connect disconnect claude), then connect the account you want. Agents using that plan stop until an account is connected again.

Use Gemini with an AI Pro or Ultra plan

Gemini needs an API key even with a plan:

  1. Open aistudio.google.com/apikey with the Google account that has the plan, and create a key.
  2. To have the plan pay for it, turn on the plan's monthly Google Cloud credits in your Google One benefits and pick a billing account.
  3. Agents → Models → + Add → Gemini, pick a model and paste the key.

Add a model

  1. Agents on the left → Models tab → + Add.
  2. Pick a brand from the groups above. For any other provider, use the API key card at the top: search for the provider, pick a model and paste your key.
  3. Pick a model from the list, or type its model ID. Optionally give it a display name.
  4. Press Add model.

For Ollama, choose This computer, Remote server or Ollama Cloud. For plan keys, Ollama and custom endpoints, ↺ Load available models lists what the provider offers so you can add several at once. Pick models that support tool calls — agents need tools to work.

This computer and localhost addresses mean the machine your agents run on, not the computer you're browsing from.

You can also connect a model while creating an agent: New Agent → Connect a new model.

See which agents use a model

Agents → Models lists every model by brand. Filter by In use or Unused, and click a model to see the agents on it and to remove it. If you are not a workspace admin you only see models added with a workspace API key; ask an admin to add or change the rest.

Run one agent on its own account or key

Normally agents use the machine's sign-in. To give one agent a different Claude account or its own model key:

  1. Settings → Credentials → + Add. Choose Claude token (a long-lived Claude sign-in, such as the output of claude setup-token) or Model API key, and paste it into Value. For an Anthropic API key, set Environment variable to ANTHROPIC_API_KEY.
  2. Agents → the agent → Auth → pick that credential → Save.

Keep keys in Credentials

Settings → Credentials holds named keys and tokens for the workspace. Owners and admins add and edit them, and only they can see the values.

Type Use it for
Service key A key the agent's tools use — GitHub, ElevenLabs, Stripe and so on. You pick which agents get it.
Claude token A Claude sign-in for one agent, picked in its Auth
Model API key A model key for one agent, picked in its Auth
Other Any other value, under an environment variable name you choose

Each row shows how many agents use it. A key can also pay for voice calls — see Live voice. Deleting a credential warns you if agents still use it.

Let agents use a key without seeing it

Use this for API keys you don't want an agent to read, print or leak.

  1. Settings → Credentials → + Add, type Service key.
  2. Paste the key into Value. Common services are recognized and the name and sites fill in; otherwise give it a Name and choose the Service, or Other (enter sites below) and list the Sites it may be sent to.
  3. Keep Hide from agents on.
  4. Under Agents that get it, pick the agents.
  5. Press Add credential.

Those agents can call the service, but the key never shows up to them or in the chat, and it is only sent to the sites listed. Works on Mac and Linux machines.

If you paste a key into a message

UFO notices and stops before sending: messages are stored, searched and backed up, and every agent in the channel can read them. Press Save as hidden key and the message says $GITHUB_TOKEN (or similar) instead, or Send anyway. Saving keys is for owners and admins.