Harness
Providers & Accounts
The harness owns auth: OAuth flows and API keys, stored locally in an encrypted file vault.
Supported providers#
Auth is harness-owned - OAuth and API keys are handled locally, never through a middleman:
| Provider | Auth |
|---|---|
| Anthropic | Claude subscription OAuth or API key |
| OpenAI | codex OAuth or API key |
| Google Gemini | API key |
| DeepSeek | API key |
| xAI Grok | API key or SuperGrok OAuth |
| Kimi | OAuth |
| AWS Bedrock | AWS credentials |
| Google Vertex | GCP credentials |
| OpenAI-compatible | any endpoint - see below |
Custom endpoints#
Any OpenAI-compatible server - local, remote, or private - becomes a provider:
haider provider configure <name> \ --kind openai-compatible \ --origin <url> \ --api-key <key>
This is exactly how Go is wired, too.
Live model catalogs#
Model lists come from each provider live, not from a table baked into the binary - new models appear without a harness update.
Vault and switching#
Credentials are stored in an encrypted file vault on your machine. Switch providers at any time without losing the session - the conversation carries over to the new model.