Harness
Providers & Accounts
The harness owns auth: OAuth flows and API keys, stored locally in an encrypted file vault.
Supported providers
Auth is harness-owned — OAuth and API keys are handled locally, never through a middleman:
| Provider | Auth |
|---|---|
| Anthropic | Claude subscription OAuth or API key |
| OpenAI | codex OAuth or API key |
| Google Gemini | API key |
| DeepSeek | API key |
| xAI Grok | API key or SuperGrok OAuth |
| Kimi | OAuth |
| AWS Bedrock | AWS credentials |
| Google Vertex | GCP credentials |
| OpenAI-compatible | any endpoint — see below |
Custom endpoints
Any OpenAI-compatible server — local, remote, or private — becomes a provider:
haider provider configure <name> \ --kind openai-compatible \ --origin <url> \ --api-key <key>
This is exactly how Go is wired, too.
Live model catalogs
Model lists come from each provider live, not from a table baked into the binary — new models appear without a harness update.
Vault and switching
Credentials are stored in an encrypted file vault on your machine. Switch providers at any time without losing the session — the conversation carries over to the new model.