Controls

Settings

Routing defaults, broker connection, and API key access.

Routing defaults

Connect OpenClaw

Private modelecho-infer/echo-private
Private supplier orderBankr :private → fail closed

Add Echo Infer as an OpenAI-compatible provider, then point OpenClaw at one of these route models. Privacy routes use Bankr private inference directly and never downgrade to public or local-node routing.

Access control

API key access

keys required

Scoped keys let us give clients only the routes they need while keeping the legacy master key path intact for production compatibility. No raw key values are exposed here.

Scoped keys2
Legacy master keyenabled
Read endpoint authpublic
Scoped-key envECHO_INFER_API_KEYS
Protect read endpointsECHO_INFER_REQUIRE_READ_API_KEY=1
chat:writenodes:readproviders:readmodels:readruns:read
desktop-clientchat:write, models:read
dashboard-readonlynodes:read, providers:read, models:read, runs:read
Key rotation

Generate scoped API key

local only

Generate a browser-local key for a client or desktop install, choose the least-privilege scopes, then copy the JSON record into the broker `ECHO_INFER_API_KEYS` env var. The dashboard never sends the raw key anywhere.

Pick scopes and generate a key when you are ready to rotate or onboard a client. Use separate keys for desktop, node operators, and read-only dashboards.