Sign in without handing apps the raw key.
Manage split-key projects, third-party provider routes, scanner findings, and proxy activity from the same dark control plane.
- App value
vp-proj-…- At rest
- Two ciphertext shares
- At request
- Worker boundary
Protected requests cross the boundary. Raw provider keys do not remain in app code.