Provider API keys

The open agentic runtime (`praxec` TUI) can persist provider API keys to a mode-0600 file. The gateway also reads provider credentials straight from the environment.

The open-source platform reads provider credentials straight from the environment. Set ANTHROPIC_API_KEY, OPENAI_API_KEY, GEMINI_API_KEY, and friends in your shell rc or CI secrets, and the public aether-llm client and kind: llm executor pick them up. That’s all the gateway needs.

The open agentic runtime (praxec TUI) also ships a convenience command for persisting provider keys to a mode-0600 dotenv file (~/.praxec/providers.env), loaded at startup with existing environment variables always winning. It exists so the agentic runtime can spawn sub-agents without re-exporting keys per shell. Outside that runtime, plain environment variables are the supported path.

See also

• Agent configuration — agents.yaml model bindings and the eager auth preflight.