Notes for AI agents

When to use this page

Use this page if you are an AI assistant configuring Quotaflow for a user.

Required values

• Base URL: https://api.quotaflow.ai/openai/v1
• Auth header: Authorization: Bearer <QUOTAFLOW_API_KEY>
• Preferred endpoint: POST /responses
• Model discovery: GET /models

Safe setup algorithm

1. Ask the user for the environment variable name where their key is stored.
2. Do not ask the user to paste a production key into chat unless unavoidable.
3. For Codex App hosts, preserve ChatGPT OAuth in ~/.codex/auth.json; use a user-level model provider with env_key for Quotaflow coding requests.
4. Configure the OpenAI-compatible base URL.
5. Run GET /models to validate the key.
6. Run a one-line non-streaming POST /responses smoke test.
7. Add a stable session id for long-running coding tasks.
8. If 429 appears, retry with backoff and preserve the same session id.

Do not do this

• Do not overwrite ~/.codex/auth.json or remove ChatGPT OAuth when configuring Codex App remote-control hosts.
• Do not run codex login --with-api-key when the user needs ChatGPT mobile or remote control to keep working.
• Do not commit keys.
• Do not print keys in logs.
• Do not expose keys to frontend code.
• Do not assume development keys work in production.