Providers & Key Hosting
Dual-Layer Architecture
| Layer | Manager | Description |
|---|---|---|
| Official | System admin | Official providers + keys (cost borne by official), org enables to use |
| Org custom | Org admin | Private providers + keys (cost borne by org), own org only |
Security
- Keys encrypted with AES-256-GCM immediately upon entry
- Never displayed in plain text on any interface
- List shows only first 8 characters
- MASTER_KEY exists only in server environment variables
- Delivery via TLS (
/api/v1/config)
Official Provider Management (System Admin)
| Operation | Description |
|---|---|
| Publish | Slug, name, baseUrl, model list, key |
| Rotate key | Replace, takes effect immediately |
| Enable/disable | Disable makes it unavailable to orgs instantly |
Org Custom Keys (Org Admin)
| Operation | Description |
|---|---|
| Add | Name, provider type, baseUrl, key |
| Rotate | Replace key |
| Enable/disable/delete | Manage lifecycle |
Delivery Rules
- Official: must be enabled and not excluded by org policy
- Custom: must be in final policy allowlist and enabled
- Keys with un-decryptable ciphertext (after master key rotation) silently skipped