apollos-ai

Map Entra ID identities to LiteLLM teams and API keys.

1|Updated Feb 27, 2026

Search Tags:#authentication #usage #api-keys #portal #provisioning #lite-llm #entra-id

Ready to run

npx skills add https://github.com/jrmatherly/apollos-portal --skill apollos-ai

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: apollos-ai
Source: https://github.com/jrmatherly/apollos-portal/tree/main/docs
Command: npx skills add https://github.com/jrmatherly/apollos-portal --skill apollos-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates secure enrollment and management of LLM API access for users through Microsoft Entra ID, provisioning team memberships and API keys.

Core Features & Use Cases

Provision users into LiteLLM teams based on Entra ID groups and generate initial API keys
Manage API keys (create, rotate, revoke) and view usage and model access
Admin endpoints for auditing, deprovisioning, and system health

Quick Start

Frequently Asked Questions about apollos-ai

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I provision LiteLLM API keys using Microsoft Entra ID?▼

The system maps Entra ID identities to LiteLLM teams and API keys to enable secure access to LLM proxies. It automates user enrollment by applying provisioning, key lifecycle, and usage tracking across portal, CLI, and API interfaces.

What Microsoft Entra ID permissions are required to manage LLM proxy access?▼

Managing LLM proxy access requires a Microsoft Entra ID app registration with User.Read and GroupMember.Read.All permissions. These permissions allow the system to read user profiles and group memberships for mapping identities to LiteLLM teams.

How does Entra ID group membership map to LiteLLM teams for API access?▼

Entra ID group memberships are used to provision users into corresponding LiteLLM teams. When users sign in through the portal, their group memberships determine their team assignments and generate the appropriate initial API keys for LLM proxy access.

Do I need PostgreSQL and Python to set up self-service LLM access with Entra ID?▼

Yes, setting up self-service LLM access requires Python 3.12, PostgreSQL 18, and a running LiteLLM proxy. These components provide the runtime environment and data storage needed to manage API key lifecycles and track usage.

Can I rotate and revoke LiteLLM API keys through a self-service portal?▼

Yes, the self-service portal supports managing LiteLLM API keys including creating, rotating, and revoking them. Users can also view their usage statistics and model access permissions through the same interface.

What admin endpoints are available for auditing LLM API usage and deprovisioning users?▼

Admin endpoints provide capabilities for auditing LLM API usage, deprovisioning users, and monitoring system health. These endpoints allow administrators to oversee the entire key lifecycle and maintain secure access controls across the LLM proxy.