Skip to content

thv_llm_setup.md

Latest commit

 

History

History
116 lines (93 loc) · 7.37 KB

thv_llm_setup.md

File metadata and controls

116 lines (93 loc) · 7.37 KB
Raw
title thv llm setup
hide_title true
description Reference for ToolHive CLI command `thv llm setup`
last_update
author
autogenerated
slug thv_llm_setup
mdx
format
md

thv llm setup

Configure detected AI tools to use the LLM gateway

Synopsis

Detect installed AI tools (Claude Code, Gemini CLI, Pi, Cursor, VS Code, Xcode, Claude Desktop, Codex) and patch each tool's configuration to route through the LLM gateway.

Token-helper tools (Claude Code, Gemini CLI) are configured to call "thv llm token" to obtain a fresh OIDC token on demand.

Claude Desktop is configured via its third-party inference credential helper, which also calls "thv llm token". It reads its configuration only at launch, so fully quit and relaunch it after setup. Pass --models to list the models it should offer until the gateway serves model discovery itself.

Codex CLI and the ChatGPT desktop app use the same user configuration: ~/.codex/config.toml by default, or %USERPROFILE%.codex\config.toml on Windows. ToolHive adds a custom model_provider whose auth command invokes "thv llm token" directly (no shell), keeping existing model_providers and mcp_servers entries untouched. Desktop app detection is supported on macOS and Windows; the canonical --client target remains "codex". If the desktop app is running, fully quit and reopen it after setup.

Pi is configured with OpenAI-compatible and Anthropic providers in ~/.pi/agent/models.json (or $PI_CODING_AGENT_DIR/models.json). It runs "thv llm token" for each request; authenticated setup discovers models and context sizes from both gateway APIs and Anthropic thinking support when advertised. --models filters the discovered models. Pi does not support --lazy because model discovery determines each model's API. Pi defaults to short prompt caching: start Pi with PI_CACHE_RETENTION=long in its environment for long retention (Anthropic: 1h; OpenAI: 24h). This cannot be persisted in models.json. The gateway does not currently provide image-input or max-output metadata, so Pi defaults to text-only input and 16K max output tokens. OpenAI models without reasoning metadata default to no reasoning. If Pi cannot refresh its gateway token, run "thv llm token" in a terminal to log in again.

Proxy-mode tools (Cursor, VS Code, Xcode) are configured to send requests to the localhost reverse proxy started by "thv llm proxy start".

Use --client to configure only a single named tool instead of all detected tools. An error is returned if the named client is not installed.

Inline flags (--gateway-url, --issuer, --client-id, etc.) are applied for this run and persisted to config only after login and tool patching succeed. This lets you combine "config set" and "setup" into a single command.

For a gateway that forwards to AWS Bedrock, add --bedrock-compat to configure Claude Code with CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS=1 and pin each model tier to the newest Bedrock model the gateway advertises (override a tier with --models; add --enable-1m for the 1M context window on opus/sonnet). The pins repoint Claude Code's built-in Opus/Sonnet/Haiku/Fable rows in the /model picker (via ANTHROPIC_DEFAULT_*_MODEL), so selecting a built-in row routes to Bedrock. Setup also enables Claude Code's gateway model discovery, which adds any further models the gateway serves as separate picker rows without re-running setup. If the gateway's model list cannot be fetched, or has no Bedrock model IDs, setup does not configure Claude Code (unless --models pins every tier). The setting is persisted and only affects Claude Code. To add it to an already-configured Claude Code, re-run:

thv llm setup --client claude-code --bedrock-compat

Re-running is idempotent and uses the cached token (no browser prompt).

Run "thv llm teardown" to revert all changes.

thv llm setup [flags]

Options

      --anthropic-path-prefix string   Path prefix appended to the gateway URL for Anthropic API tools (e.g. /anthropic). Also used for Pi model discovery. When omitted, the gateway is probed automatically.
      --audience string                OIDC audience (optional)
      --bedrock-compat                 Configure Claude Code for a gateway that forwards to AWS Bedrock: write CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS=1 (Bedrock rejects the experimental anthropic-beta headers) and pin each tier to the newest Bedrock model the gateway advertises (override with --models). Persisted, so a later plain "thv llm setup" keeps it; clear with --bedrock-compat=false. Only affects Claude Code.
      --callback-port int              OIDC callback port (omit to keep current; default: ephemeral)
      --client string                  Configure only this AI tool by name (e.g. claude-code, cursor, codex). Omit to configure all detected tools.
      --client-id string               OIDC client ID
      --enable-1m                      With --bedrock-compat, append the [1m] suffix to the opus and sonnet model IDs to opt into the 1M-token context window on Bedrock (never haiku, which is 200K). Off by default.
      --gateway-url string             LLM gateway base URL (must use HTTPS)
  -h, --help                           help for setup
      --issuer string                  OIDC issuer URL
      --lazy                           Skip the interactive OIDC login and defer it until the first time a configured tool accesses the gateway. Tool config and persisted settings are written normally. Useful for unattended provisioning (e.g. an MDM profile).
      --models strings                 Model IDs to configure, comma-separated or by repeating the flag, e.g. --models=us.anthropic.claude-opus-4-8,us.anthropic.claude-sonnet-5. For Pi these filter its discovered models (Pi does not support --lazy). For credential-helper clients (Claude Desktop) these become inferenceModels. With --bedrock-compat, each ID overrides a Claude Code tier by matching 'haiku', 'opus', 'sonnet', or 'fable' in the ID (IDs matching no tier are ignored with a warning). Omit to pin each tier to the newest Bedrock model discovered from the gateway.
      --proxy-port int                 Localhost proxy listen port (omit to keep current; default: 14000)
      --scopes strings                 OIDC scopes to request, comma-separated or by repeating the flag. offline_access is always requested; pass openid explicitly if the provider needs it (the default scopes are openid and offline_access). Omit to keep the current scopes; an empty value restores the defaults. Changing the list clears cached tokens so the next sign-in requests the new scopes
      --short-prompt-cache             Use Claude Code's five-minute prompt cache instead of ToolHive's one-hour default. Persisted, so a later plain "thv llm setup" keeps it; use --short-prompt-cache=false to restore one-hour caching.
      --skip-browser                   Print the OIDC authorization URL instead of opening a browser, then wait for the callback. Use in headless/SSH/CI environments where no system browser is available.
      --tls-skip-verify                Skip TLS certificate verification for the upstream gateway (local dev only). For direct-mode tools (Claude Code, Gemini CLI) this sets NODE_TLS_REJECT_UNAUTHORIZED=0, disabling TLS for ALL of that tool's outbound connections. For proxy-mode tools only the proxy-to-gateway connection is affected.

Options inherited from parent commands

      --debug   Enable debug mode

SEE ALSO

  • thv llm - Manage LLM gateway authentication