OpenAI API and Dome

1. 01

   Add the connection

   The provider id is openai. Dome fills in https://api.openai.com and adds the Bearer prefix to your key.

   $ dome models add gpt-openai \
     --provider openai \
     --model gpt-6-sol \
     --api-key "$OPENAI_API_KEY" \
     --gateway prod-gateway

2. 02

   Pool it with Azure for failover

   Add an Azure OpenAI connection for the same model and pool the two. Agents send the pool's name.

   $ dome models pool create gpt-6-sol \
     --failover-max all --gateway prod-gateway
    
   $ dome models pool member add gpt-6-sol gpt-openai --priority 0
   $ dome models pool member add gpt-6-sol gpt-azure --priority 1

3. 03

   Point your agent at the Gateway

   The OpenAI SDK takes the Gateway URL with /v1 as its base. The agent's Dome key replaces the OpenAI key.

   from openai import OpenAI
    
   client = OpenAI(base_url=f"{GATEWAY_URL}/v1", api_key=DOME_AGENT_KEY)
   client.responses.create(
       model="gpt-6-sol",
       input="Draft a reply to this ticket.",
   )

Commands and rules tested against a Dome workspace on October 1, 2026. For anything about OpenAI itself, see OpenAI's documentation.

forbid (principal, action == Dome::Action::"llm:invoke", resource is Dome::LLMModel)
unless { principal has act_as };