Skip to main content

AI Model Settings

The settings menu for the AI model service shows different connection items depending on the analyses in use. For how to open the settings screen and common behavior, see Service settings.

MenuSettings
GeneralBasic info (service name · description), delete service
Connection > Model repository connectionRepository access token (when AI BOM is used)
Connection > Model server for evaluationModel server URL · model name · API key (when AI attack simulation is used)
Analysis > AnalysesAI attack simulation · AI BOM

Which connection items appear is determined by the analyses in use. Using AI BOM shows the model repository connection; using AI attack simulation shows the model server for evaluation.

General​

Basic information common to all types. Change the service name and description; administrators see a delete-service area at the bottom. (Delete a service)

Model repository connection​

The model repository used for AI BOM analysis.

  • The repository type · URL · revision are fixed at registration and cannot be changed. The only thing you can change is the access token.
  • It is replaced only when you enter a new token; leaving it empty keeps the existing token. A stored token is shown masked as a hint only.
  • After changing the token, confirm access with Connection test. A Hugging Face gated model may show "This model is gated. Enter a token from an account that has been granted access on Hugging Face."

Model server for evaluation​

The model server used for AI attack simulation. It is separate from the model repository connection, and leaving it empty means AI attack simulation cannot run.

  • Model server URL : The URL of an OpenAI-compatible inference API (https://..., POST /chat/completions).
  • Model name : The model name to use on the server.
  • API key environment variable name (optional) : You can register an environment variable name instead of the key value.
  • API key value (optional) : When entered directly, it is stored encrypted and never shown again. The field shows "Saved (enter only to change)," and leaving it empty keeps the existing key.
  • Response timeout (optional) : How long (seconds) to wait for a model server response.

Apply with Save model server. If AI attack simulation is on but there is no model server, "You turned on AI attack simulation. To run the evaluation, you must register a model server." appears.

Keys are never shown in plaintext

A stored API key is shown masked, indicating only its presence, and the value is never returned again. Do not record plaintext keys or environment-variable values in documents · settings.

Analyses​

Turn on the analyses to use among AI attack simulation · AI BOM and click Save. At least one must be used. Turning analyses on and off also changes which connection items above are shown.