Bring Your Own Keys (BYOK)
CoderXP is being designed to let developers connect supported provider credentials directly. BYOK routing and provider streaming are planned for a future milestone.
AES-256-GCM Server Encryption Model (Planned)
Secrets in the BYOK vault will be encrypted at rest using server-side AES-256-GCM before database storage. Raw API keys will never be exposed in browser storage, client bundles, or telemetry logs. This is a planned architecture specification, not yet implemented.
Rotation & Scope Governance
Users will be able to instantly rotate, test connection latency, or revoke provider keys. Project-level scoping will ensure teams can isolate keys per project. (Planned)
Direct Provider Streaming
Requests are designed to stream directly from official provider endpoints (OpenAI, Anthropic, Google, DeepSeek) without intermediate proxy overhead. This is a planned capability, not yet implemented.