Corrections

Clarified Agent Master Key's scoped-access model — the local broker still authenticates outbound provider requests and does not replace provider-side spend controls — and added the official comparison link. (PR #1174)

Your AI Agent Can Drain Your OpenRouter Balance

Clarified Agent Master Key's local-custody scope — the broker still authenticates outbound provider requests, and centrally managed services fit remote hosts or organization-wide administration — and added the official comparison link. (PR #1174)

Local-First vs Cloud Credential Storage for AI Agents

Corrected the scope of AMK broker revocation — it denies new requests routed through the broker and does not undo completed work, in-flight provider requests, or credentials held outside the broker — and added the official revocation comparison link. (PR #1174)

How to Revoke an AI Agent’s Access