Setup
Add your key as a GitHub secret, then map it into thepullfrog.yml workflow so the agent can access it at runtime.
1. Add the secret to GitHub
We recommend org-level secrets — add the key once and every repo in the org can use it. For personal accounts or single-repo setups, a repo secret works too. Org secret (recommended):- Go to github.com/organizations/your_org/settings/secrets/actions
- Click New organization secret
- Set the name to your provider’s env var (see supported providers)
- Paste your API key as the value
- Under Repository access, choose which repos can use it
- Click Add secret
- Go to github.com/your_org/your_repo/settings/secrets/actions
- Click New repository secret
- Set the name to your provider’s env var
- Paste your API key and click Add secret
2. Map the secret in pullfrog.yml
The secret must be explicitly passed to the action via the env: block. If it’s only in GitHub secrets but not in the workflow env, the agent won’t be able to access it.
Free models
Several models are completely free and work out of the box with zero configuration:- Big Pickle (OpenCode)
- GPT Nano (OpenAI)
- MiMo V2 Pro (Moonshot AI)
- MiniMax M2.5 (MiniMax)
- Nemotron 3 Super (NVIDIA)
Open source program
Open source maintainers can apply for free access to premium models. If you maintain a public repository, reach out to support@pullfrog.com with:- A link to your repository
- A brief description of how you’d use Pullfrog
Troubleshooting
“Missing API key” error in GitHub Actions The agent couldn’t find a valid key at runtime. Check that:- The secret exists in your repo or org settings
- The secret name matches the provider’s env var exactly (e.g.
ANTHROPIC_API_KEY) - The secret is mapped in your
pullfrog.ymlenv:block

