--- title: "Cline Setup for Security Models: OpenAI Compatible Guide" canonical: https://pentestllm.ai/agents/cline generated: 2026-11-11T18:04:54.945Z source: https://pentestllm.ai/agents/cline base_url: https://api.pentestllm.ai/v1 --- ![Patch cables in a network switch](https://pentestllm.ai/img/cables.webp) ## Steps 1. ### Open Cline’s settings In the Cline panel, click the gear icon. This opens the settings where the API provider is chosen. 2. ### Choose the OpenAI Compatible provider In the API Provider list, select OpenAI Compatible. This is the provider Cline documents for endpoints other than the official OpenAI API. 3. ### Enter the base URL and key Paste the PentestLLM base URL into Base URL, including the `/v1`, and your key from the console into API Key. Base URL ``` https://api.pentestllm.ai/v1 ``` 4. ### Enter the model id Type the model id into the Model field. The router id works here as written; a single build id from the models page works the same way. Model ``` auto/security ``` 5. ### Set the model configuration Open Model Configuration and set Context Window size and Max Output Tokens to the figures on the build’s model page, so Cline knows when to trim the conversation. If you pinned `gemma-4-26b-a4b-it-cybersecurity`, its context window in the catalog is 262,144 tokens. Input Price and Output Price are optional; filling them from the pricing page makes Cline’s cost display accurate. ## What each field does - API Provider: OpenAI Compatible. Tells Cline to send the OpenAI chat format to a URL you name. - Base URL: `https://api.pentestllm.ai/v1`. Cline’s docs note it must not be the official OpenAI URL. - API Key: Your PentestLLM key, sent as a bearer token. - Model: `auto/security`, or one build id exactly as the models page shows it. - Context Window size: How much conversation Cline keeps before trimming. Use the build’s real window. - Max Output Tokens: The cap Cline requests per answer. - Input Price, Output Price: Only used for Cline’s own cost readout. Billing happens on the API side. ## If something fails - Invalid API key: Re-copy the key from the console and check there is no space around it. - Model not found: The id is not one the API serves. Copy it from the models page; display names do not work. - Connection errors: Check the base URL ends in `/v1` and that your network can reach it. - Answers stop mid-task: The balance may be empty. A top-up in the console resumes service. These are the same checks Cline’s own troubleshooting list gives for any OpenAI-compatible provider. The curl command below tests the key and URL without the editor. shell ``` curl https://api.pentestllm.ai/v1/models -H "Authorization: Bearer sk-ptl-live-…" ``` ## Why the router suits Cline Cline works in a loop: it reads files, proposes an edit or a command, waits for your approval and continues. Requests in that loop vary from a few hundred tokens to tens of thousands. With `auto/security`, turns that carry tools and code go to a stronger build and short turns go to a fast one, each billed at its own price. If you want one model for the whole task, enter a single build id instead. ## Security review inside the editor On a security build, Cline becomes a code reviewer that does not decline the subject: ask it to read a module for injection or access control flaws, explain a dependency’s advisory, or draft the finding. The builds answer security questions other models decline; refusals are reduced, not gone, and its findings are leads to confirm. Leave Cline’s approval prompts on for commands. PentestLLM is for code and systems you own or have written permission to test, per the [acceptable use policy](https://pentestllm.ai/acceptable-use). For a terminal agent, see the [OpenCode guide](https://pentestllm.ai/agents/opencode); for prices, the [pricing page](https://pentestllm.ai/pricing). ## 9 security builds, priced per token Read from the live catalog on 2026-11-11. Prices are US dollars per million tokens, paid from a prepaid balance that starts at $10. The id `auto/security` has no price of its own: each request is billed at the build that answered. | Build | Input | Output | Context | | --- | --- | --- | --- | | [Qwen3.8 27B Cybersecurity](https://pentestllm.ai/models/qwen3.8-27b-cybersecurity) | $0.40 | $2.40 | 262,144 | | [Gemma 4 26B A4B Cybersecurity](https://pentestllm.ai/models/gemma-4-26b-a4b-it-cybersecurity) | $0.4224 | $1.3376 | 262,144 | | [GLM-5.3 Flash Cybersecurity](https://pentestllm.ai/models/glm-5.3-flash-cybersecurity) | $0.5093 | $1.6975 | 1,048,576 | | [Red Team (Flash)](https://pentestllm.ai/models/uplink-red-team-flash) | $0.90 | $3.00 | not published | | [Red Team (Pro)](https://pentestllm.ai/models/uplink-red-team-pro) | $1.50 | $6.00 | not published | | [OrcaCyber MiniMax M3.1 Flash](https://pentestllm.ai/models/minimax-m3.1-flash-cybersecurity) | $2.00 | $4.00 | 261,632 | | [OrcaCyber Qwen3.8 Flash Next](https://pentestllm.ai/models/orcacyber-qwen3.8-flash-next) | $2.00 | $4.00 | 261,632 | | [Cyber Frontier](https://pentestllm.ai/models/cyber-frontier) | $5.25 | $15.75 | 1,048,576 | | [OrcaCyber Zero 1.5](https://pentestllm.ai/models/orca-zero-1.5-cybersecurity) | $7.50 | $18.75 | 999,488 | [Full price list and tool fees](https://pentestllm.ai/pricing) · [Every model](https://pentestllm.ai/models) · [API docs](https://pentestllm.ai/docs) ## Questions - OpenAI Compatible. It takes a base URL, an API key and a model id, which are the three values PentestLLM needs. - Enter https://api.pentestllm.ai/v1 in the Base URL field, including the /v1 at the end. - Yes. Type auto/security in the Model field and the API chooses a security build for each request and names it in the response. - Cline uses that figure to decide when to trim the conversation. If it is larger than the build’s real window, long tasks fail; if it is smaller, Cline forgets earlier steps sooner than it needs to. - Per token from a prepaid balance. On 2026-11-11 input prices for security builds start at $0.40 per million tokens, and the minimum top-up is $10. ## Read next - [All agent guides The same three values in every supported client.](https://pentestllm.ai/agents) - [Cursor The OpenAI key and base URL override in Cursor Settings, and its limits.](https://pentestllm.ai/agents/cursor) - [OpenCode The opencode.json provider block for the security builds.](https://pentestllm.ai/agents/opencode) - [Bug bounty Models for scope reading, recon notes, code review and report drafting on programs you are enrolled in.](https://pentestllm.ai/bug-bounty) - [Vulnerability research Models for code review, CVE and patch analysis, and advisory writing.](https://pentestllm.ai/vulnerability-research) Facts about other products and tools on this page were read from their own pages on 11 November 2026: [Cline docs: OpenAI Compatible](https://docs.cline.bot/provider-config/openai-compatible). They change; check the source before relying on a figure. ## One key, from $10 PentestLLM is for systems you own or have written permission to test. The [acceptable use policy](https://pentestllm.ai/acceptable-use) says what is not allowed. [Get a key](https://app.pentestllm.ai/console) usage, 1,000 agent turns on Qwen3.8 27B Cybersecurity - Input, 8,000 tokens at $0.40 per million: $0.0032 - Output, 1,000 tokens at $2.40 per million: $0.0024 - One turn: $0.0056 - 1,000 turns: $5.60 output price per million tokens, 9 builds $1.3376 Gemma 4 26B A4B Cybersecurity OrcaCyber Zero 1.5 $18.75