2. Configure keys in Settings → Plugins → Plugin configuration → Balance (see "Configuration" below)

Configuration

Graphical settings card (recommended)

Open Settings → Plugins → Plugin configuration → Balance. The card lists every configured provider — enter each API Key and optionally override its base URL, then save.

• Keys are written to DSH's credential store (write-only, never echoed back).
• base URL overrides land in the plugin's settings namespace and apply to the next balance read.

Manual credentials (alternative)

Under the hood the plugin reads the same credential references from ~/.dsh/.credentials.yaml:

DEEPSEEK_API_KEY: sk-your-key-here            # official DeepSeek route
OPENROUTER_MANAGEMENT_KEY: sk-or-v1-...       # OpenRouter account (Management Key, not the inference key)
ZAI_API_KEY: your-zai-key                     # Z.ai open platform

Moonshot / Kimi profiles under llm-pi-ai are discovered automatically and reuse their apiKeyEnv. Providers without a public balance API show an explicit "no public balance interface" state — never a guess.