BYOK Provider Keys
Project defaults and agent overrides are stored in provider_keys with encrypted key material.
- Project key endpoint:
/v1/projects/:id/provider-keys - Agent override endpoint:
/v1/agents/:id/provider-keys
Listing agent keys returns merged view where agent-specific entry overrides project default for same provider.