Skip to content
Cisco AI Defense logo
CiscoAI Security

Providers — DefenseClaw

Overview

The guardrail proxy is a LiteLLM-compatible endpoint on localhost:4000. It fans out to upstream LLM providers using format adapters that shape the request body and parse the streaming response. The matrix below is sourced from internal/configs/providers.json and the adapter files under internal/gateway/.

Provider names and model prefixes

The provider catalog below is the proxy-domain catalog from internal/configs/providers.json. Model routing uses the provider/model prefixes recognized by internal/config/config.go::recognizedLLMProviders. Most names line up directly, but some are intentionally different.

Catalog nameLLM model prefix
togethertogether_ai/...
vertexvertex_ai/...
openai-codexProvider-domain catalog entry only; not a recognized llm.model prefix.

Use the catalog names when reasoning about intercepted domains. Use the LLM prefixes when setting llm.model, guardrail.llm.model, or guardrail.judge.llm.model.

Reference

15 providers mapped; adapters auto-select the right request/response format per route.

ProviderDomainsProfile IDEnv vars
anthropicapi.anthropic.comanthropic:defaultANTHROPIC_API_KEY, ANTHROPIC_AUTH_TOKEN
openrouteropenrouter.aiopenrouter:defaultOPENROUTER_API_KEY
openaiapi.openai.comopenai:defaultOPENAI_API_KEY
openai-codexchatgpt.com/backend-api
groqapi.groq.comgroq:defaultGROQ_API_KEY
mistralapi.mistral.aimistral:defaultMISTRAL_API_KEY
cohereapi.cohere.com, api.cohere.aicohere:defaultCOHERE_API_KEY
deepseekapi.deepseek.comdeepseek:defaultDEEPSEEK_API_KEY
perplexityapi.perplexity.aiperplexity:defaultPERPLEXITY_API_KEY
togetherapi.together.xyztogether:defaultTOGETHER_API_KEY
xaiapi.x.aixai:defaultXAI_API_KEY
vertexaiplatform.googleapis.com
azureopenai.azure.comazure:defaultAZURE_OPENAI_API_KEY
geminigenerativelanguage.googleapis.com, googleapis.com/v1/projectsgoogle:defaultGOOGLE_API_KEY, GEMINI_API_KEY
bedrockbedrock-runtime.

Format adapters

These adapters shape requests and parse streaming responses. internal/gateway/adapter_*.go.

AdapterSource
anthropicinternal/gateway/adapter_anthropic.go
bedrock_converseinternal/gateway/adapter_bedrock_converse.go
geminiinternal/gateway/adapter_gemini.go
ollamainternal/gateway/adapter_ollama.go
openai_chatinternal/gateway/adapter_openai_chat.go
openai_responsesinternal/gateway/adapter_openai_responses.go

Adding a new provider

See Developer › Architecture for the end-to-end flow, and Developer › Plugin protocol if you need a custom injection point.

Related