Tools: API keys stay on the server
Stored API keys of custom tools no longer leave the server, not even encrypted. Only company admins can see and edit tools and tool templates. If a key cannot be encrypted, nothing is saved.
- Status only The interface only learns whether a key is stored. Replacing and removing work without knowing the value.
- Never in plain text If encryption fails, saving stops with a message. Older unencrypted entries are encrypted by the next re-encryption run.
- Clean logs Tool calls log the target address without query parameters.