---
title: "Configuration"
manual: "AI Foundation"
version: "1.2"
permalink: "https://docs.typo3.org/permalink/nitsan/ns-t3af:configuration@1.2"
source: "Configuration/Index.rst"
modified: "2026-09-15T06:30:06+00:00"
---

# Configuration

Configure **AI Foundation** after installation. You need a minimum working setup
before connected extensions can use AI.

This section also covers the AI Foundation backend modules used day to day:
providers, context, prompts, features, usage, and access control.

-   [Dashboard](https://docs.typo3.org/permalink/nitsan/ns-t3af:dashboard-1@1.2)
-   [AI Providers](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-providers-1@1.2)
-   [AI Context](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-context-1@1.2)
-   [AI Prompts](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-prompts-1@1.2)
-   [AI Features](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-features-1@1.2)
-   [AI Usage & Logs](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-usage-logs@1.2)
-   [AI Label](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-label-1@1.2)
-   [AI Permissions](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-permissions-1@1.2)

## Two configuration areas

**AI Providers** — **Path:** **AI Foundation > AI Providers**. API keys,
models, and defaults.

**Extension settings** — Translation APIs, Basic Auth, notifications, and MCP
switches (including `enableMcpServer`). Prefer
**AI Foundation > MCP Server > Advanced** for MCP options. These keys
live in AI Foundation settings, not the classic TYPO3
**Admin Tools > Settings > Extension Configuration** form.

## Minimum working setup

1.  One AI provider with a valid key and model
1.  Test connection passes
1.  Provider marked **Default**
1.  (Optional) DeepL or Google keys for translation APIs
1.  (Optional) MCP enabled if you use AI agents

## AI Providers (primary)

**Path:** **AI Foundation > AI Providers**

Connect at least one provider, set a model, run **Test connection**,
and mark exactly one row as **Default**.

Full field reference: [Provider fields](https://docs.typo3.org/permalink/nitsan/ns-t3af:provider-fields@1.2). Guide:
[AI Providers](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-providers@1.2)

## Extension settings

AI Foundation stores translation helpers, Basic Auth, notifications, and MCP
switches in extension settings (including `enableMcpServer`). Prefer
**AI Foundation > MCP Server > Advanced** for MCP options.

Where a classic Extension Configuration form is still used for optional
keys, open **Admin Tools > Settings > Extension Configuration** and
select `ns_t3af`.

### Translation (optional)

-   `deepl_api_key` — DeepL translation
-   `google_api_key` — Google translation
-   `defaultModelForTranslation` — Default translation model

### OpenAI usage statistics (optional)

-   `openai_admin_api_key` — Organization usage charts (not the chat API key)

### HTTP Basic Auth (optional)

-   `basicAuthEnabled` — Enable helper
-   `basicAuthUsername` — Username
-   `basicAuthPassword` — Password

### MCP Server

-   `enableMcpServer` — Master switch (default: on)
-   `mcpBasePath` — HTTP endpoint (default: `/mcp`)
-   `requireAuth` — Require login (default: on)
-   `accessTokenLifetime` — OAuth token TTL

Full guide: [MCP Server](https://docs.typo3.org/permalink/nitsan/ns-t3af:mcp-server@1.2)

## Per-feature providers

**Path:** **AI Foundation > AI Features**

Override the default provider per task: SEO, Pages, Content, Translation.

See [AI Features](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-features@1.2).

## Security checklist

-   Limit backend admin access
-   Use HTTPS in production
-   Rotate API keys every 90 days
-   Enable [AI Permissions](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-permissions@1.2) for large teams
-   Never store keys in Git or email

## When to reconfigure

-   After key rotation — run **Test connection** again
-   When adding a new child extension — check [AI Features](https://docs.typo3.org/permalink/nitsan/ns-t3af:ai-features@1.2)
-   Before enabling MCP in production — read [MCP Server](https://docs.typo3.org/permalink/nitsan/ns-t3af:mcp-server@1.2) security section