Docs
GET/POST/DELETE /v1/byok — org provider keys. Secrets are never returned.
BYOK API
GET /v1/byok
POST /v1/byok
DELETE /v1/byok/:id
Dashboard session routes (same objects): GET/POST /api/byok, DELETE /api/byok/:id.
providerSlug must be one of: vertex, together, openai, anthropic, google, cohere, mistral, deepseek, qwen, groq, xai, azure-foundry, cerebras, perplexity.
apiKey must be at least 8 characters. The create response is the public row only (keyPrefix, not the secret). Posting the same providerSlug again rotates the active row.
See Bring your own keys for the dashboard UI, Team GCP metadata, and chat provider.order.