Use AI Tools on Server
Set up and run AI Tools on Server 2026.1 with a service principal. Use this guide to create a service principal in Alteryx One and connect your AI tools. For more information on service principals in Alteryx One, go to the Service Principals page.
Requirements
A Workspace Admin must create and manage service principals.
You must be a Full User or have a custom role with the Gen AI Tools capability to use AI tools.
AMP must be enabled for Server. An admin must enable AMP from the System Settings. For more information on AMP and Server, go to AMP Engine.
First Time Setup
Complete these steps once to allow AI tools to connect to your LLM connection in Alteryx One.
Create a Service Principal in Alteryx One
Note
You must be a Workspace Admin to complete this step.
In Alteryx One, open your profile menu.
Go to Workspace Admin > Service Principals.
Select New.
Enter values:
Name: Enter a unique name.
Description: Enter a description.
Secret Lifetime (Days): Enter a value from 1 to 365.
In Roles, select a Full User role or a custom role with the Gen AI Tools capability.
Select Create.
After you create the service principal:
Copy the Client ID.
Copy the Client Secret.
Store these values securely.
Share the LLM Connection in Alteryx One
Go to Data.
Select Connections.
Locate the LLM connection.
Select the three-dot menu, then select Share.
From Select Users or Service Principals, select the service principal.
In the role dropdown, select Editor (or the required role).
Set credential sharing to Share Credentials.
Select Share.
Configure the Prompt or LLM Override Tool in Designer
Select the Service Principal Connection
In Designer, open your workflow.
Select the Prompt tool.
In the Connection Options section, select Service Principal (for Server).
Create a Connection
Select Create a New Connection.
In Data Connection Manager (DCM), select + New.
From the Select Technology dropdown, select Alteryx One OAuth Application.
Enter Credentials
Note
To enter these credentials, you must have access to the service principal’s Client ID and Client Secret. If you didn't create the service principal, ask a Workspace Admin to provide these values.
In Data Source Name, enter a name.
In Client ID, enter the service principal client ID.
In Client Secret, enter the service principal client secret.
Select Save.
Publish Workflow to Server
After you configure the service principal connection, publish your workflow to Server.
The workflow runs on Server using the service principal. AI tools use the shared LLM connection and run without requiring user authentication.
Rotate Service Principal Secrets
Client secrets for a service principal expire after 1 year. When the secret expires, update the service principal connection with a new client secret in Data Connection Manager. For more information on secrete rotation, go to the Service Principals page.
Note
If you didn't create the service principal, ask a Workspace Admin to provide a new Client Secret.
Generate a New Client Secret
From Alteryx One, go to Workspace Admin > Service Principals.
On the Service Principals page, select a service principal to open its details page.
Select Generate Secret.
Copy and securely store the new secret.
Update the Connection in Designer Desktop
In Designer Desktop, select File > Manage Connections.
On the Connections page, select the service principal connection.
Select Edit.
Enter the Client Secret and then select Save.
Review the connection to ensure it works as expected before you use it in workflows.