All of it through TYPO3's own mechanisms: user groups, TSconfig, DataHandler, the Install Tool.
Nothing invents its own permission model.
Providers
Any provider, no lock-in
Install a Symfony AI bridge and AiM finds it, whoever published it. Models and capabilities are read from
the bridge itself. Endpoint URL and credential are separate fields, so a self-hosted gateway behind a token
works too.
Governance
Who may spend what
Capability permissions and provider access per backend group, privacy levels per configuration, budgets,
and a rate limit that is on by default. Credentials are encrypted and never shown again.
Tone
A site-wide tone of voice
Named prompt fragments on any page, inherited down the tree, reusable across sites, with a preview that
shows exactly what would be sent without spending a single request.
Routing
Cheaper when it can be
Simple prompts go to cheaper models, chosen from your own cost, reliability and quality history. A failed
provider is retried against the next one, and a configuration you pinned stays pinned.
Visibility
Every request, on the record
One log with tokens, cost, duration and the routing decision, optionally with a quality grade from a
second model acting as judge. Plus dashboard widgets for the totals.
Built for prod
Three TYPO3 versions, two engines
TYPO3 12.4, 13.4 and 14, Composer and Classic mode, tested on SQLite and MariaDB, with static analysis and
coding standards running in CI.