scriptoriumadmin/strix
1
0
Fork 0
mirror of https://github.com/usestrix/strix.git synced 2026-11-01 07:02:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

docs: recommend Vercel AI Gateway alongside OpenRouter and update model ids

Browse source 
Quickstart, providers overview and docs index show GLM-5.3 through Vercel AI Gateway and OpenRouter side by side, Vercel first. Model ids across the provider pages move to the current releases, including DeepSeek V4.1 Flash 1017, and the OpenAI, Anthropic and Gemini pages note the Daybreak, CVP and Fairwind access programs. Docs only, README unchanged.

Closes STR-1686
This commit is contained in:
Ahmed Allam 2026-10-26 15:38:43 +00:00 • committed by Ahmed Allam
parent 200a501f15
commit 2c9e9f3444
13 changed files with 142 additions and 55 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
docs/advanced/configuration.mdx
View file

@ -8,7 +8,7 @@ Configure Strix using environment variables or a config file.
## LLM Configuration
<ParamField path="STRIX_LLM" type="string" required>
Model name in LiteLLM format (e.g., `openrouter/z-ai/glm-5.3`, `openai/gpt-5.4`).
Model name in LiteLLM format (e.g., `openrouter/z-ai/glm-5.3`, `openai/gpt-6.1-sol`).
</ParamField>
<ParamField path="LLM_API_KEY" type="string">

2
docs/docs.json
View file

@ -35,8 +35,8 @@
"llm-providers/overview",
"llm-providers/openai",
"llm-providers/anthropic",
"llm-providers/openrouter",
"llm-providers/vercel-ai-gateway",
"llm-providers/openrouter",
"llm-providers/vertex",
"llm-providers/bedrock",
"llm-providers/azure",

17
docs/index.mdx
View file

@ -73,7 +73,21 @@ Strix uses a graph of specialized agents for comprehensive security testing:
## Quick Example
```bash
<CodeGroup>
```bash Vercel AI Gateway
# Install
curl -sSL https://strix.ai/install | bash
# Configure
export STRIX_LLM="openai/zai/glm-5.3"
export LLM_API_KEY="your-api-key"
export LLM_API_BASE="https://ai-gateway.vercel.sh/v1"
# Scan
strix --target ./your-app
```
```bash OpenRouter
# Install
curl -sSL https://strix.ai/install | bash
@ -84,6 +98,7 @@ export LLM_API_KEY="your-api-key"
# Scan
strix --target ./your-app
```
</CodeGroup>
## Community

10
docs/llm-providers/anthropic.mdx
View file

@ -6,7 +6,7 @@ description: "Configure Strix with Claude models"
## Setup
```bash
export STRIX_LLM="anthropic/claude-sonnet-4-6"
export STRIX_LLM="anthropic/claude-sonnet-5-5"
export LLM_API_KEY="sk-ant-..."
```
@ -14,8 +14,12 @@ export LLM_API_KEY="sk-ant-..."
| Model | Description |
|-------|-------------|
| `anthropic/claude-sonnet-4-6` | Best balance of intelligence and speed |
| `anthropic/claude-opus-4-6` | Maximum capability for deep analysis |
| `anthropic/claude-sonnet-5-5` | Best balance of intelligence and speed |
| `anthropic/claude-opus-5-5` | Maximum capability for deep analysis |
<Note>
Security testing with Claude needs the [Cyber Verification Program](https://support.claude.com/en/articles/14604842-cyber-verification-program) (CVP). Without it the safety classifiers block most offensive tasks. Red Team Access covers authorized penetration testing.
</Note>
## Get API Key

10
docs/llm-providers/azure.mdx
View file

@ -6,7 +6,7 @@ description: "Configure Strix with OpenAI models via Azure"
## Setup
```bash
export STRIX_LLM="azure/your-gpt5-deployment"
export STRIX_LLM="azure/your-gpt6-deployment"
export AZURE_API_KEY="your-azure-api-key"
export AZURE_API_BASE="https://your-resource.openai.azure.com"
export AZURE_API_VERSION="2025-11-01-preview"
@ -24,7 +24,7 @@ export AZURE_API_VERSION="2025-11-01-preview"
## Example
```bash
export STRIX_LLM="azure/gpt-5.4-deployment"
export STRIX_LLM="azure/gpt-6.1-sol-deployment"
export AZURE_API_KEY="abc123..."
export AZURE_API_BASE="https://mycompany.openai.azure.com"
export AZURE_API_VERSION="2025-11-01-preview"
@ -33,5 +33,9 @@ export AZURE_API_VERSION="2025-11-01-preview"
## Prerequisites
1. Create an Azure OpenAI resource
2. Deploy a model (e.g., GPT-5.4)
2. Deploy a model such as GPT-6.1 Sol
3. Get the endpoint URL and API key from the Azure portal
<Note>
Security testing with OpenAI models needs [Daybreak](https://openai.com/daybreak/) access, also on Azure.
</Note>

13
docs/llm-providers/bedrock.mdx
View file

@ -6,7 +6,7 @@ description: "Configure Strix with models via AWS Bedrock"
## Setup
```bash
export STRIX_LLM="bedrock/anthropic.claude-4-5-sonnet-20251022-v1:0"
export STRIX_LLM="bedrock/us.anthropic.claude-sonnet-5-5"
```
No API key required—uses AWS credentials from environment.
@ -36,10 +36,13 @@ Automatically uses instance role credentials.
| Model | Description |
|-------|-------------|
| `bedrock/anthropic.claude-4-5-sonnet-20251022-v1:0` | Claude 4.5 Sonnet |
| `bedrock/anthropic.claude-4-5-opus-20251022-v1:0` | Claude 4.5 Opus |
| `bedrock/anthropic.claude-4-5-haiku-20251022-v1:0` | Claude 4.5 Haiku |
| `bedrock/amazon.titan-text-premier-v2:0` | Amazon Titan Premier v2 |
| `bedrock/us.anthropic.claude-sonnet-5-5` | Claude Sonnet 5.5 |
| `bedrock/us.anthropic.claude-opus-5-5` | Claude Opus 5.5 |
| `bedrock/us.anthropic.claude-haiku-5-5` | Claude Haiku 5.5 |
<Note>
Security testing with Claude needs the [Cyber Verification Program](https://support.claude.com/en/articles/14604842-cyber-verification-program) (CVP), also on Bedrock.
</Note>
## Prerequisites

9
docs/llm-providers/novita.mdx
View file

@ -8,7 +8,7 @@ description: "Configure Strix with Novita AI models"
## Setup
```bash
export STRIX_LLM="openai/moonshotai/kimi-k2.5"
export STRIX_LLM="openai/zai-org/glm-5.3"
export LLM_API_KEY="your-novita-api-key"
export LLM_API_BASE="https://api.novita.ai/openai"
```
@ -18,11 +18,12 @@ export LLM_API_BASE="https://api.novita.ai/openai"
| Model | Configuration |
|-------|---------------|
| GLM-5.3 | `openai/zai-org/glm-5.3` |
| Kimi K3.1 Pro | `openai/moonshotai/kimi-k3.1-pro` |
| Kimi K3 | `openai/moonshotai/kimi-k3` |
| DeepSeek V4.1 Flash | `openai/deepseek/deepseek-v4.1-flash-1017` |
| DeepSeek V4 Pro | `openai/deepseek/deepseek-v4-pro` |
| Kimi K2.5 | `openai/moonshotai/kimi-k2.5` |
| GLM-5 | `openai/zai-org/glm-5` |
| MiniMax M2.5 | `openai/minimax/minimax-m2.5` |
| MiniMax M3.1 Flash | `openai/minimax/minimax-m3.1-flash` |
| GLM-5.3 Flash | `openai/zai-org/glm-5.3-flash` |
## Get API Key

16
docs/llm-providers/openai.mdx
View file

@ -6,13 +6,23 @@ description: "Configure Strix with OpenAI models"
## Setup
```bash
export STRIX_LLM="openai/gpt-5.4"
export STRIX_LLM="openai/gpt-6.1-sol"
export LLM_API_KEY="sk-..."
```
## Available Models
See [OpenAI Models Documentation](https://platform.openai.com/docs/models) for the full list of available models.
| Model | Description |
|-------|-------------|
| `openai/gpt-6.1-sol` | Best balance of capability and cost for agentic security work |
| `openai/gpt-6-astra` | Flagship, maximum capability |
| `openai/gpt-6-luna` | Fast and cheap |
See [OpenAI Models Documentation](https://platform.openai.com/docs/models) for the full list.
<Note>
Security testing with OpenAI models needs [Daybreak](https://openai.com/daybreak/) (Trusted Access for Cyber). Without it the models refuse most offensive tasks. [Request access](https://openai.com/form/enterprise-trusted-access-for-cyber/).
</Note>
## Get API Key
@ -25,7 +35,7 @@ See [OpenAI Models Documentation](https://platform.openai.com/docs/models) for t
For OpenAI-compatible APIs:
```bash
export STRIX_LLM="openai/gpt-5.4"
export STRIX_LLM="openai/gpt-6.1-sol"
export LLM_API_KEY="your-key"
export LLM_API_BASE="https://your-proxy.com/v1"
```

18
docs/llm-providers/openrouter.mdx
View file

@ -18,13 +18,19 @@ Access any model on OpenRouter using the format `openrouter/<provider>/<model>`:
| Model | Configuration |
|-------|---------------|
| GLM-5.3 (default) | `openrouter/z-ai/glm-5.3` |
| GPT-5.4 | `openrouter/openai/gpt-5.4` |
| Claude Sonnet 4.6 | `openrouter/anthropic/claude-sonnet-4.6` |
| Gemini 3 Pro | `openrouter/google/gemini-3-pro-preview` |
| GLM-5.3 (recommended) | `openrouter/z-ai/glm-5.3` |
| GPT-6.1 Sol | `openrouter/openai/gpt-6.1-sol` |
| GPT-6 Astra | `openrouter/openai/gpt-6-astra` |
| Claude Opus 5.5 | `openrouter/anthropic/claude-opus-5.5` |
| Claude Sonnet 5.5 | `openrouter/anthropic/claude-sonnet-5.5` |
| Gemini 4 Argon | `openrouter/google/gemini-4-argon` |
| Gemini 3.8 Flash | `openrouter/google/gemini-3.8-flash` |
| DeepSeek V4.1 Flash | `openrouter/deepseek/deepseek-v4.1-flash-1017` |
| DeepSeek V4 Pro | `openrouter/deepseek/deepseek-v4-pro` |
| Kimi K3 | `openrouter/moonshotai/kimi-k3` |
| GLM-4.7 | `openrouter/z-ai/glm-4.7` |
| Kimi K3.1 Pro | `openrouter/moonshotai/kimi-k3.1-pro` |
| GLM-5.3 Flash | `openrouter/z-ai/glm-5.3-flash` |
OpenAI, Anthropic and Gemini models keep their provider safeguards on OpenRouter. Security testing with them needs [Daybreak](https://openai.com/daybreak/), [CVP](https://support.claude.com/en/articles/14604842-cyber-verification-program) or [Fairwind](https://deepmind.google/fairwind-program/) access.
## Get API Key

43
docs/llm-providers/overview.mdx
View file

@ -9,19 +9,34 @@ Strix uses [LiteLLM](https://docs.litellm.ai/docs/providers) for model compatibi
Set your model and API key:
| Model | Provider | Configuration |
| -------------------- | ----------------- | -------------------------------- |
| GLM-5.3 (default) | Z.ai (OpenRouter) | `openrouter/z-ai/glm-5.3` |
| GPT-5.4 | OpenAI | `openai/gpt-5.4` |
| Claude Sonnet 4.6 | Anthropic | `anthropic/claude-sonnet-4-6` |
| Gemini 3 Pro | Google Vertex | `vertex_ai/gemini-3-pro-preview` |
| DeepSeek V4 Pro | DeepSeek | `deepseek/deepseek-v4-pro` |
| Kimi K3 | Moonshot | `moonshot/kimi-k3` |
| Model | Provider | Configuration |
| --------------------- | ------------------------- | -------------------------------- |
| GLM-5.3 (recommended) | Vercel AI Gateway | `openai/zai/glm-5.3` |
| GLM-5.3 (recommended) | OpenRouter | `openrouter/z-ai/glm-5.3` |
| GPT-6.1 Sol | OpenAI | `openai/gpt-6.1-sol` |
| Claude Opus 5.5 | Anthropic | `anthropic/claude-opus-5-5` |
| Claude Sonnet 5.5 | Anthropic | `anthropic/claude-sonnet-5-5` |
| Gemini 4 Argon | Google Vertex | `vertex_ai/gemini-4-argon` |
| DeepSeek V4.1 Flash | DeepSeek | `deepseek/deepseek-flash` |
| DeepSeek V4 Pro | DeepSeek | `deepseek/deepseek-v4-pro` |
| Kimi K3.1 Pro | Moonshot | `moonshot/kimi-k3.1-pro` |
```bash
<Note>
Frontier OpenAI, Anthropic and Gemini models need a cyber access program for security testing: [Daybreak](https://openai.com/daybreak/) for OpenAI, the [Cyber Verification Program](https://support.claude.com/en/articles/14604842-cyber-verification-program) for Anthropic, and the [Fairwind Program](https://deepmind.google/fairwind-program/) for Gemini.
</Note>
<CodeGroup>
```bash Vercel AI Gateway
export STRIX_LLM="openai/zai/glm-5.3"
export LLM_API_KEY="your-api-key"
export LLM_API_BASE="https://ai-gateway.vercel.sh/v1"
```
```bash OpenRouter
export STRIX_LLM="openrouter/z-ai/glm-5.3"
export LLM_API_KEY="your-api-key"
```
</CodeGroup>
## Local Models
@ -47,7 +62,7 @@ See the [Local Models guide](/llm-providers/local) for setup instructions and re
Access 100+ models through a single API.
</Card>
<Card title="Vercel AI Gateway" href="/llm-providers/vercel-ai-gateway">
Access models from multiple providers through one endpoint.
Access 100+ models through one OpenAI-compatible endpoint.
</Card>
<Card title="Google Vertex AI" href="/llm-providers/vertex">
Gemini 3 models via Google Cloud.
@ -69,9 +84,9 @@ Use LiteLLM's `provider/model-name` format:
```
openrouter/z-ai/glm-5.3
openai/gpt-5.4
anthropic/claude-sonnet-4-6
vertex_ai/gemini-3-pro-preview
bedrock/anthropic.claude-4-5-sonnet-20251022-v1:0
openai/gpt-6.1-sol
anthropic/claude-sonnet-5-5
vertex_ai/gemini-4-argon
bedrock/us.anthropic.claude-sonnet-5-5
ollama/llama4
```

33
docs/llm-providers/vercel-ai-gateway.mdx
View file

@ -1,16 +1,16 @@
---
title: "Vercel AI Gateway"
description: "Configure Strix with models via Vercel AI Gateway"
description: "Configure Strix with models through Vercel AI Gateway"
---
[Vercel AI Gateway](https://vercel.com/docs/ai-gateway) provides an OpenAI-compatible API for models from multiple providers.
[Vercel AI Gateway](https://vercel.com/docs/ai-gateway) provides access to 100+ models from multiple providers through one OpenAI-compatible API.
## Setup
Create an [AI Gateway API key](https://vercel.com/docs/ai-gateway/authentication-and-byok), then configure Strix:
```bash
export STRIX_LLM="openai/anthropic/claude-opus-5"
export STRIX_LLM="openai/zai/glm-5.3"
export LLM_API_KEY="your-ai-gateway-api-key"
export LLM_API_BASE="https://ai-gateway.vercel.sh/v1"
```
@ -19,14 +19,30 @@ The first `openai/` segment tells Strix to use its OpenAI-compatible client. The
## Available Models
Use any language model returned by the AI Gateway models endpoint:
Access any model on the Gateway using the format `openai/<provider>/<model>`:
| Model | Configuration |
|-------|---------------|
| GLM-5.3 (recommended) | `openai/zai/glm-5.3` |
| GPT-6.1 Sol | `openai/openai/gpt-6.1-sol` |
| GPT-6 Astra | `openai/openai/gpt-6-astra` |
| Claude Opus 5.5 | `openai/anthropic/claude-opus-5.5` |
| Claude Sonnet 5.5 | `openai/anthropic/claude-sonnet-5.5` |
| Gemini 4 Argon | `openai/google/gemini-4-argon` |
| Gemini 3.8 Flash | `openai/google/gemini-3.8-flash` |
| DeepSeek V4.1 Flash | `openai/deepseek/deepseek-v4.1-flash-1017` |
| DeepSeek V4 Pro | `openai/deepseek/deepseek-v4-pro` |
| Kimi K3.1 Pro | `openai/moonshotai/kimi-k3.1-pro` |
| GLM-5.3 Flash | `openai/zai/glm-5.3-flash` |
OpenAI, Anthropic and Gemini models keep their provider safeguards on the Gateway. Security testing with them needs [Daybreak](https://openai.com/daybreak/), [CVP](https://support.claude.com/en/articles/14604842-cyber-verification-program) or [Fairwind](https://deepmind.google/fairwind-program/) access.
The full list is at the [AI Gateway models page](https://vercel.com/ai-gateway/models) or the models endpoint:
```text
https://ai-gateway.vercel.sh/v1/models
```
Prefix its model ID with `openai/` when setting `STRIX_LLM`. For example, the Gateway model ID `anthropic/claude-opus-5` becomes `openai/anthropic/claude-opus-5` in Strix.
## Get API Key
1. Open the [AI Gateway API key settings](https://vercel.com/docs/ai-gateway/authentication-and-byok)
@ -35,5 +51,6 @@ Prefix its model ID with `openai/` when setting `STRIX_LLM`. For example, the Ga
## Benefits
- Access models from multiple providers through one endpoint
- Track Gateway usage and cost in Vercel
- **Single API** — Access models from OpenAI, Anthropic, Google, Z.ai, and more
- **Bring your own keys** — Route through your own provider accounts when you want
- **Cost tracking** — Monitor Gateway usage and cost in Vercel

10
docs/llm-providers/vertex.mdx
View file

@ -6,7 +6,7 @@ description: "Configure Strix with Gemini models via Google Cloud"
## Setup
```bash
export STRIX_LLM="vertex_ai/gemini-3-pro-preview"
export STRIX_LLM="vertex_ai/gemini-4-argon"
```
No API key required—uses Google Cloud Application Default Credentials.
@ -29,8 +29,12 @@ export GOOGLE_APPLICATION_CREDENTIALS="/path/to/service-account.json"
| Model | Description |
|-------|-------------|
| `vertex_ai/gemini-3-pro-preview` | Best overall performance for security testing |
| `vertex_ai/gemini-3-flash-preview` | Faster and cheaper |
| `vertex_ai/gemini-4-argon` | Best overall performance for security testing |
| `vertex_ai/gemini-3.8-flash` | Faster and cheaper |
<Note>
Security testing with Gemini needs the [Fairwind Program](https://deepmind.google/fairwind-program/). Without it the cyber guardrails block most offensive tasks.
</Note>
## Project Configuration

14
docs/quickstart.mdx
View file

@ -25,15 +25,23 @@ description: "Install Strix and run your first security scan"
## Configuration
Set your LLM provider:
Set your LLM provider. We recommend GLM-5.3 through [Vercel AI Gateway](/llm-providers/vercel-ai-gateway) or [OpenRouter](/llm-providers/openrouter):
```bash
<CodeGroup>
```bash Vercel AI Gateway
export STRIX_LLM="openai/zai/glm-5.3"
export LLM_API_KEY="your-api-key"
export LLM_API_BASE="https://ai-gateway.vercel.sh/v1"
```
```bash OpenRouter
export STRIX_LLM="openrouter/z-ai/glm-5.3"
export LLM_API_KEY="your-api-key"
```
</CodeGroup>
<Tip>
For best results, use `openrouter/z-ai/glm-5.3` (the default pick), `openai/gpt-5.4`, `anthropic/claude-opus-4-6`, or `openai/gpt-5.2`.
For best results, use `zai/glm-5.3`, `deepseek/deepseek-v4.1-flash-1017`, `anthropic/claude-opus-5-5` (needs [CVP](https://support.claude.com/en/articles/14604842-cyber-verification-program) access), or `openai/gpt-6.1-sol` (needs [Daybreak](https://openai.com/daybreak/) access).
</Tip>
## Run Your First Scan