Keep the credential boundary clear
Your provider account remains yours from setup through execution.
- Provider keys are encrypted at rest and resolved only at execution time
- Keys are never returned in API responses or logged in clear text
- Same-origin API proxying keeps backend topology out of the browser bundle