Mistral API and Dome

1. 01

   Add the connections

   The provider id is mistral. Dome uses https://api.mistral.ai/v1 and Mistral's own model ids.

   $ dome models add mistral-large-eu \
     --provider mistral \
     --model mistral-large-latest \
     --api-key "$MISTRAL_API_KEY" \
     --attributes '{"region":"eu"}' \
     --gateway prod-gateway
    
   $ dome models add mistral-medium-eu \
     --provider mistral \
     --model mistral-medium-latest \
     --api-key "$MISTRAL_API_KEY" \
     --attributes '{"region":"eu"}' \
     --gateway prod-gateway

2. 02

   Pool them

   Large is priority 0 and Medium priority 1. Agents ask for mistral-large, the pool.

   $ dome models pool create mistral-large \
     --failover-max all --gateway prod-gateway
    
   $ dome models pool member add mistral-large mistral-large-eu --priority 0
   $ dome models pool member add mistral-large mistral-medium-eu --priority 1

3. 03

   Point your agent at the Gateway

   Swap Mistral's base URL for the Gateway's, and the Mistral key for the agent's Dome key.

   from openai import OpenAI
    
   client = OpenAI(base_url=f"{GATEWAY_URL}/v1", api_key=DOME_AGENT_KEY)
   client.chat.completions.create(
       model="mistral-large",
       messages=[{"role": "user", "content": "Draft a reply to this employee question."}],
   )

Commands and rules tested against a Dome workspace on October 1, 2026. For anything about Mistral itself, see Mistral AI's documentation.

forbid (principal, action == Dome::Action::"llm:invoke", resource is Dome::LLMModel)
when {
  principal has act_as &&
  principal.act_as.groups.contains("eu-staff")
}
unless { resource has region && resource.region == "eu" };