Secrets stored here go straight into the encrypted vault on the server.
They never enter the chat, the transcript, or the sandbox — the
proxy attaches them to outbound requests after they leave the agent.
Never paste a secret into the conversation itself.
A backend receives the entire conversation.
Activate only endpoints you trust. Add a key only if the backend
needs one — it goes straight to the vault.