Bring your own API key or use SignalKit-hosted models. Every request routes through the backend — never directly from the browser.