| Provider | Status |
|---|---|
| AWS Bedrock | Available |
| Azure OpenAI | Coming soon |
| GCP Vertex AI | Coming soon |
AWS Bedrock
Prerequisites
- An AWS account with Bedrock model access enabled for the models you want to use
- Either the AWS CLI configured with SSO OR an IAM user with
bedrock:InvokeModelpermissions
Setup
- Open Settings > AI Text Enhancement > Enterprise > AWS Bedrock
-
Pick an authentication method:
- SSO profile (recommended)
- Access keys
Enter the name of your AWS CLI profile (e.g.default,my-sso-profile).OpenWhispr usesfromNodeProviderChainto resolve credentials — any profile configured viaaws configure ssooraws configureworks.If the profile uses SSO, runaws sso login --profile <name>before using OpenWhispr. The connection test will surface a copy-paste command if your session has expired. -
Pick a region (e.g.
us-east-1,eu-west-1) - Pick a model from the suggested list, click Browse all models to load your account’s full Bedrock catalog, or enter a custom Bedrock model ID
- Click Test Connection — a successful test means credentials resolve and the model is reachable
Curated models
| Model | Bedrock ID | Use case |
|---|---|---|
| Claude Fable 5 | us.anthropic.claude-fable-5 | Most capable Claude model (Mythos-class) — best for the hardest Agent Mode tasks |
| Claude Haiku 4.5 | us.anthropic.claude-haiku-4-5-20251001-v1:0 | Fast, cheap — recommended default for text cleanup |
| Claude Sonnet 5 | us.anthropic.claude-sonnet-5 | Balanced text cleanup and summarization |
| Claude Opus 4.8 | us.anthropic.claude-opus-4-8 | Complex text cleanup and summarization |
| GPT-OSS 120B | openai.gpt-oss-120b-1:0 | Open-weight OpenAI model |
| DeepSeek V3.2 | deepseek.v3.2 | Open-weight reasoning model |
| Qwen3 Next 80B | qwen.qwen3-next-80b-a3b | Open-weight, multilingual |
us., eu., or apac.) that matches your selected region, and changing the region rewrites an already-picked model to the new geography. Click Browse all models to load your account’s full Bedrock catalog live — resolved against your own credentials and region, so a picked model is always invocable — or enter a custom model ID for anything not in the list.
Troubleshooting
| Error | Cause | Fix |
|---|---|---|
AWS SSO session expired | SSO token timed out | Run aws sso login --profile <name> |
Model access not enabled | Model isn’t enabled for your account in this region | Enable it in the AWS Bedrock console |
Model not found | Wrong model ID or wrong region | Check the ID format and that the model is available in your region |
Invalid AWS credentials | Access key/secret don’t match an IAM user | Double-check your keys in AWS IAM |
Rate limited | Hit Bedrock quota | Wait a moment and retry |
Agent Mode
Agent Mode (the AI agent overlay with tool-calling) now works with AWS Bedrock, not just text cleanup. Configure Bedrock under Settings > AI Text Enhancement > Enterprise, then select it in Settings > Agent Mode. Enterprise model streams are proxied through the app’s main process for credential signing, so tools, step limits, and streaming behave the same as with the built-in providers.Credentials storage
Enterprise credentials are encrypted at rest using your OS keychain (Keychain on macOS, DPAPI on Windows, libsecret on Linux) via Electron’ssafeStorage API. They are never sent to OpenWhispr’s servers.
Encrypted blobs live alongside your other secrets under the user-data directory:
- macOS:
~/Library/Application Support/OpenWhispr/secure-keys/ - Windows:
%APPDATA%\OpenWhispr\secure-keys\ - Linux:
~/.config/OpenWhispr/secure-keys/
.env in the same directory. On Linux systems without a keyring, secrets fall back to plaintext in .env.