Cloud Credentials
Cloud Credentials lets you connect your company to external services that ANTE uses: AI providers, an email (SMTP) server, and a Multibook ERP connection. Each one has its own tab, can be enabled or disabled independently, and includes a built-in connection test.
π Object storage moved. File/object storage (S3 / DigitalOcean Spaces) is no longer configured per company here β the whole install now shares a single storage bucket, set up once by a developer. See Storage (Developer) to check its status or view per-company usage.
Overview
These credentials are scoped to your company. Each service is configured on its own tab, switched on with an Enable checkbox, and saved separately. A green check mark (β) appears next to a tab's name when that service is enabled, so you can see at a glance which integrations are active.
Getting There
Go to Settings β System β Cloud Credentials.
Page Layout
- Three tabs across the top:
- AI Services β AI provider
- SMTP Email β outgoing email server
- Multibook β connection to your Multibook ERP tenant
- Each tab shows a single form card with an Enable checkbox in its header.
- The AI Services and SMTP Email forms each have two buttons at the bottom: Test Connection and Save. The Multibook form has three: Test Read, Test Write, and Save (see below).
When a service is not enabled, its form fields are greyed out and can't be edited. Saved secret values (keys and passwords) are never shown back to you β the field shows a masked placeholder instead, and you only need to re-enter a secret when you want to change it.
π A secret field asking you to fill it in again, even though it was saved before? If this company's data was recently restored or copied in from another environment, some previously-saved keys or passwords may no longer be readable. ANTE treats that the same as not configured β the field shows a plain example hint instead of your masked value, and the field becomes required again. This is expected after a data restore, not a bug: just re-enter the value and Save.
AI Services Tab
Connects an AI provider that powers ANTE's intelligent features. Only one provider can be active at a time.
| Field | Description | Required when enabled |
|---|---|---|
| Enable | Turn AI services on or off | β |
| AI Provider | Pick one provider (see list below) | Yes |
| API Key | The provider's API key (hidden) | Yes (unless already saved) |
Provider options:
| Provider | Models |
|---|---|
| OpenAI | GPT-4.1, GPT-4o, o3-mini |
| Google Gemini | Gemini 2.0, 1.5 Pro/Flash |
| xAI Grok | Grok-2, Grok-2 Mini |
| Anthropic Claude | Claude 4.6, 4.5, 4, 3.5 Sonnet/Haiku |
After you pick a provider, the form notes that model selection is automatic β each feature picks the right tier (smartest / smart / fast) and the server resolves it to a current model for that provider. There is no model field to fill in.
SMTP Email Tab
Configures the email server ANTE uses to send notifications and system emails.
| Field | Description | Required when enabled |
|---|---|---|
| Enable | Turn SMTP email on or off | β |
| SMTP Host | Mail server hostname, e.g. smtp.gmail.com | Yes |
| Port | Pick from the dropdown (see list below) | Yes |
| Username | SMTP login username | Yes (unless already saved) |
| Password | SMTP / app password (hidden) | Yes (unless already saved) |
| From Email | Address emails are sent from, e.g. noreply@company.com | No |
| From Name | Display name shown on outgoing emails | No |
| Use SSL/TLS | Checkbox β enable for port 465, disable for STARTTLS (port 587) | β |
Port options: 587 (STARTTLS - Recommended), 465 (SSL/TLS), 25 (Unencrypted), 2525 (Alternative).
Multibook Tab
Connects this company to its Multibook ERP tenant through the mb-api wrapper, so ANTE can read (and optionally write) data from Multibook β for example, syncing the chart of accounts (see Treasury β Accounting β Chart of Accounts), or pushing an approved employee reimbursement into Multibook as an expense document from Treasury.
| Field | Description | Required when enabled |
|---|---|---|
| Enable | Turn the Multibook connection on or off | β |
| Endpoint URL | Your Multibook mb-api endpoint, e.g. https://your-tenant.mb-api.ante.ph | Yes (unless already saved) |
| Read API Key | The mb-api key used for read-only requests (hidden) | Yes (unless already saved) |
| Write API Key (Optional) | An mb-api key scoped for write requests (hidden). Required for write-dependent features, such as pushing a reimbursement to Multibook β leave empty and the connection stays read-only (the chart-of-accounts sync still works, since it only reads from Multibook). | No |
Two independent test buttons let you verify each key without saving first:
- Test Read β checks the Endpoint URL and Read API Key.
- Test Write β checks the Write API Key. Disabled until a write key is entered or already saved. Both tests call a non-mutating check on the Multibook side, so testing the write key never actually writes data.
π This connects the company, not each person. Setting up this tab only selects which Multibook tenant your company talks to β it makes the Multibook option appear on everyone's profile, but it doesn't sign anyone in. Each user must additionally link their own Multibook account from My Profile β Connections (see My Profile β Connections Tab) before Multibook features β like the chart-of-accounts sync β will work for them.
Once this connection is enabled, a Multibook item appears under Settings for a second, separate page β Settings β Multibook β where you choose how ANTE behaves with it, starting with whether employee reimbursements are approved in ANTE or in Multibook.
Common Tasks
Configuring a service
- Go to Settings β System β Cloud Credentials.
- Open the tab for the service you want (AI Services, SMTP Email, or Multibook).
- Tick the Enable checkbox in the card header to unlock the fields.
- Fill in the required fields for that service.
- Click Test Connection (or, on the Multibook tab, Test Read / Test Write) to verify (see below).
- Click Save. A confirmation message appears when it's saved.
Testing a connection
- With the fields filled in, click Test Connection (AI Services / SMTP Email) or Test Read / Test Write (Multibook).
- If you entered new credentials, ANTE tests those values directly. If the fields are left at their saved (masked) values, it tests the credentials already on file.
- The result appears as a pop-up message:
- A success message if the connection works.
- An error message (with details) if it doesn't β check your entries and try again.
- If a credential on file can no longer be read back (typically after this company's data was restored or copied in from another environment), the message says so directly and tells you to re-enter the value in Settings β retyping it and clicking Save fixes it.
Updating saved credentials
- Open the relevant tab. Secret fields (keys, passwords) appear blank with a masked placeholder β your saved values are still in place.
- To change a secret, type the new value over it. Leave it blank to keep the existing one.
- Update any other fields as needed.
- Click Test Connection (or Test Read / Test Write on Multibook), then Save.
Disabling a service
- Open the tab.
- Untick the Enable checkbox.
- Click Save. The β next to the tab name disappears.
Tips
- The β on a tab tells you the service is enabled β use it to confirm at a glance what's active.
- Always Test Connection before saving so a bad credential doesn't break AI features or email.
- Secrets are never displayed back to you; a blank secret field with a masked example (like
sk-a***wxyz) on an already-configured service is normal and keeps the saved value. - A blank secret field with a plain, generic example (no masked value) means ANTE can't read the saved credential back β usually after this company's data was restored from another environment. Re-enter the value and Save; the service won't work until you do.
- Looking for object storage settings? See Storage (Developer) β it's now a single install-wide bucket, not a per-company setting.
Related Pages
- About β system information
- Storage (Developer) β shared object-storage status and per-company usage
π‘ Note: Cloud credentials apply to your whole company. Only administrators should configure these.