Overview

Connect your tools

The Sentilai Endpoint app configures your AI tools to route through the Gateway. On a governed machine, open the app and use Govern all detected tools — everything below happens automatically. This page documents what each adapter actually does, for transparency and troubleshooting.

Claude Code

The adapter points ANTHROPIC_BASE_URL at the Gateway (session-wide), so Claude Code's own credential — your Claude subscription session or API key — passes through unchanged. Claude Code reads this at startup: fully quit and reopen it after connecting.

Cursor

Cursor is routed via its custom endpoint mechanism, which can only carry an API key — so Cursor runs in managed key mode: the Gateway injects your organization's provider key from the Provider Vault. Cursor picks the change up on a full restart (the app offers a one-click restart).

GitHub Copilot

• Copilot CLI: configured via environment (COPILOT_PROVIDER_BASE_URL + a device credential). Managed key mode.
• Copilot in VS Code: a guided card in the app — VS Code's BYOK settings need one manual paste (VS Code offers no API for another extension to do it). Requests still transit GitHub's servers; routing adds governance on the model call.

Gemini CLI

Configured via GOOGLE_GEMINI_BASE_URL + GEMINI_API_KEY (the device credential). Managed key mode — the Gateway injects your organization's Gemini key upstream.

Codex CLI

The adapter adds a managed provider block to ~/.codex/config.toml pointing at the Gateway, reversible byte-for-byte on disconnect. Managed key mode with your organization's OpenAI key.

Verifying

Every governed tool shows connected in the app, and its traffic appears on the Activity screen within seconds of use.