From 82c9d75a4478297fd89f1797943f46af78cb0dee Mon Sep 17 00:00:00 2001 From: ShionElia Date: Fri, 20 Mar 2026 14:33:27 +0000 Subject: [PATCH 1/2] docs: clarify Media Understanding apiKey sources --- docs/nodes/media-understanding.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/docs/nodes/media-understanding.md b/docs/nodes/media-understanding.md index 9d20c0c83d4..cb5bf61a068 100644 --- a/docs/nodes/media-understanding.md +++ b/docs/nodes/media-understanding.md @@ -92,6 +92,19 @@ Each `models[]` entry can be **provider** or **CLI**: } ``` +Provider entries reuse the standard model-provider auth flow. `tools.media` +model entries do **not** take an inline `apiKey`. Configure credentials through +one of these supported sources instead: + +- an `auth-profiles.json` profile selected by `profile` / `preferredProfile` +- the provider's standard environment variable (for example `OPENAI_API_KEY`, + `GOOGLE_API_KEY`, `GROQ_API_KEY`) +- `models.providers..apiKey` in config, including plaintext, + `${ENV_VAR}` substitution, or a SecretRef object + +If none of those sources resolve for a provider entry, media understanding skips +that entry and falls back to the next configured model. + ```json5 { type: "cli", @@ -152,6 +165,10 @@ working option**: - Image: OpenAI → Anthropic → Google → MiniMax - Video: Google +Provider auto-detection uses the same auth sources listed above. A provider only +counts as available when OpenClaw can resolve its credential from auth +profiles, env, or `models.providers..apiKey`. + To disable auto-detection, set: ```json5 From b4eafe9430228451d5d52516e41178dbf585d3f0 Mon Sep 17 00:00:00 2001 From: ShionElia Date: Fri, 20 Mar 2026 15:50:15 +0000 Subject: [PATCH 2/2] docs: tighten Media Understanding auth guidance --- docs/nodes/media-understanding.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/nodes/media-understanding.md b/docs/nodes/media-understanding.md index cb5bf61a068..4624bf7cb46 100644 --- a/docs/nodes/media-understanding.md +++ b/docs/nodes/media-understanding.md @@ -97,10 +97,10 @@ model entries do **not** take an inline `apiKey`. Configure credentials through one of these supported sources instead: - an `auth-profiles.json` profile selected by `profile` / `preferredProfile` -- the provider's standard environment variable (for example `OPENAI_API_KEY`, - `GOOGLE_API_KEY`, `GROQ_API_KEY`) -- `models.providers..apiKey` in config, including plaintext, - `${ENV_VAR}` substitution, or a SecretRef object +- the provider's standard environment variable (for example `GOOGLE_API_KEY`, + `GROQ_API_KEY`, `OPENAI_API_KEY`) +- `models.providers..apiKey` in config when it resolves to a usable + string value, including plaintext or `${ENV_VAR}` substitution If none of those sources resolve for a provider entry, media understanding skips that entry and falls back to the next configured model.