How an agent gets a 智谱 · 开放平台 (中国) key through KeyKeeper, what to choose on bigmodel.cn, and how KeyKeeper verifies it.

Template id	`zhipu-cn` (also `zhipu`, `bigmodel`, `glm`, `智谱`, `zhipu-ai`)
Field	`zai-api-key` → `ZAI_API_KEY` / `ZHIPUAI_API_KEY` · secret
Key looks like	whether it can be viewed again is unconfirmed
Created at	bigmodel.cn
Verified by KeyKeeper	not verified
Template checked	2026-09-15

What the agent does

keykeeper providers show zhipu-cn
keykeeper save --provider zhipu-cn --from-clipboard --create --purpose "what this task does"
keykeeper run -c zhipu-cn -- <your command>

--provider zhipu-cn fills in the credential id and the field. The environment variable is the one 智谱 · Z.AI's own tools read, so nothing has to be mapped.

What only you can do

Create a general API key

Activate pay-as-you-go billing or an API usage bundle if needed

Copy the key, then approve the save in KeyKeeper's window.

What to choose

中国通用 API 使用 https://open.bigmodel.cn/api/paas/v4，按开放平台合同计费。Coding Plan 使用专用 endpoint 和套餐授权，不能按通用 API 路径假定扣套餐额度。每个项目单独建 key，保留独立撤销能力。

The agent is told the same thing. It opens the page for you and says what to pick; it never logs in, passes 2FA or pays on your behalf.

What KeyKeeper checks

Before writing: the value must look like a 智谱 · 开放平台 (中国) key (whether it can be viewed again is unconfirmed). A wrong paste is refused before anything is stored, and the agent is told why — without the value.
After saving: 智谱 · 开放平台 (中国) offers no read-only endpoint KeyKeeper can use, so the first real call is the test.

Endpoints

The key is a bearer token for these endpoints. keykeeper run sets only the variables above; point your client at the base URL yourself.

OpenAI Chat Completions — https://open.bigmodel.cn/api/paas/v4 (China)

Rotation and expiry

No universal expiry policy was confirmed for this credential type. Record the date shown by the provider, or leave it unknown. Rotate or revoke at bigmodel.cn.

智谱 · 开放平台 (中国)