Storage
Provider keys are accepted only on subscribed workspaces and are stored encrypted.
Free users can use the teemd house agent within launch quotas instead of storing BYOK credentials.
Your provider keys
BYOK Disclosure
What happens when you bring your own model-provider keys.
Updated August 28, 2026
Use
A stored key is used only to proxy calls you authorize through teemd.
Usage on your own provider key is billed by that provider under your agreement with them, not by teemd as house-agent spend.
Access and recovery
Operational access to encrypted key material is limited to the launch custody procedure.
Key rotation and recovery are handled through the production key ceremony and inventory process.