Connect a provider once — the key is encrypted into your vault and never leaves it. Your agents then need only their Sanction seat key: point the SDK at the gateway URL and every call is metered, budgeted, and on the signed record.
Connected keys live in the credential vault under reserved provider:* labels — encrypted, rotation-in-one-step, never injectable by agents.