Auto-VFX
Capability · access · qualification are separate

Connections

Connecting a key does not mark qualification passed. A connection check never launches paid generation.

Workspace

Sign-in (Clerk)

What does this enable?
Organization-scoped projects and authenticated APIs.
What is missing?
Dedicated Clerk application keys and allowed origins.
Where do I configure it?
Vercel project auto-vfx. Production live keys for https://vfx.assemblybay.com; Preview/Development use the Auto-VFX development instance. Variables: CLERK_SECRET_KEY, NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY, NEXT_PUBLIC_APP_URL=https://vfx.assemblybay.com. Optional allowlist: CLERK_ORG_ID. Do not use clerk.assemblybay.com (Evuhl).
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
Sign-in, org membership, and tenant-scoped shots.

Setup instructionsView evidence

Database (Neon/Postgres)

What does this enable?
Durable shots, drafts, runs, and ledger entries.
What is missing?
DATABASE_URL and DIRECT_DATABASE_URL for this environment.
Where do I configure it?
Vercel env + local .env.local. Apply migrations with prisma migrate deploy. Do not db push in production.
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
Records survive reload. Presence of a URL is not a connectivity proof.

Setup instructionsView evidence

Private media (R2)

What does this enable?
Plates, proxies, candidates, and exports.
What is missing?
Bucket-scoped Object Read & Write token for auto-vfx-media / auto-vfx-media-dev.
Where do I configure it?
Cloudflare R2 → Manage API Tokens, then Vercel and worker env: R2_ACCOUNT_ID, R2_ENDPOINT, R2_BUCKET, R2_ACCESS_KEY_ID, R2_SECRET_ACCESS_KEY.
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
Authorized upload, freeze, Range playback.

Setup instructionsView evidence

Workers

CPU worker

What does this enable?
Probe, hash for large files, planar screen composite, export validation.
What is missing?
Worker host URL and WORKER_CREDENTIALS_JSON with explicit workerId, capabilities, resourceClasses.
Where do I configure it?
Worker process env and Vercel: WORKER_CREDENTIALS_JSON, CPU_WORKER_WAKE_URL, CRON_SECRET, MEDIA_SIGNING_SECRET.
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
Claim / heartbeat / complete for screen.unmix and media.verify.

Setup instructionsView evidence

GPU / RunPod worker

What does this enable?
Specific matting or interpolation operators only.
What is missing?
RUNPOD_API_KEY and the endpoint id for that operator. A GPU subscription alone is not a connection.
Where do I configure it?
Vercel env: RUNPOD_API_KEY, RUNPOD_RIFE_ENDPOINT_ID, TEMPORAL_MATTE_ENDPOINT.
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
That operator can be dispatched; not a generic GPU pool.

Setup instructionsView evidence

Generation and reasoning

Reasoning provider

What does this enable?
One bounded planner tool loop after media works.
What is missing?
OPENAI_API_KEY or GOOGLE_GEMINI_API_KEY or ANTHROPIC_API_KEY, plus OPENAI_ASTRA_MODEL if using that route.
Where do I configure it?
Vercel secret manager. Checking a connection does not call the model.
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
Authorized inspect → propose → execute traces. Model text cannot grant access.

Setup instructionsView evidence

Optional generators

What does this enable?
Generated insert or spatial routes when that workflow is selected.
What is missing?
Only the provider the selected shot needs (FAL_KEY, BYTEPLUS_API_KEY, HF_API_KEY_ID, WORLDLABS_API_KEY).
Where do I configure it?
Vercel env. Do not connect every vendor for a screen composite.
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
That provider can be dispatched with cost records. Connection check does not launch paid generation.

Setup instructionsView evidence

Native

After Effects

What does this enable?
Native AE project build / handoff on a licensed host.
What is missing?
Installed After Effects on a supported host, plus AE_HOST_PROBE_URL if a probe endpoint exists.
Where do I configure it?
The artist workstation or dedicated render host. There is no ADOBE_API_KEY that replaces a license.
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
Handoff package and reopen/render on that host.

Setup instructionsView evidenceOpen native handoff

Mocha

What does this enable?
Planar tracking on standalone Mocha when entitled.
What is missing?
Mocha standalone on the execution host (MOCHA_HOST_PROBE_URL).
Where do I configure it?
The same native host that will run the shot. Plug-in Python is not a substitute for standalone render.
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
Seeded or Mocha tracks labeled honestly.

Setup instructionsView evidenceOpen native handoff

Blender

What does this enable?
CG / camera / KeenTools FaceTracker lanes that use Blender.
What is missing?
Pinned Blender executable (BLENDER_BIN) and add-ons on the worker host.
Where do I configure it?
Worker host filesystem, not Vercel.
How do I check it?
Use Check connection. Workers also have Check worker. Neither spends provider budget.
What works after the check?
Save/reopen/render of a representative project.

Setup instructionsView evidenceOpen native handoff