Authorization: Bearer or x-api-key). User/session: W3C traceparent whose trace ID is a live flow. Missing or unresolvable traceparent → 403. Empty AGENT_JWT_SECRET → 401. See Providers and Cost attribution.
Library management (in the generated spec):
/api/llm-configs, /api/agents/{id}/llm-config, /api/agents/{id}/llm-token, /api/llm-router/providers, /api/model-registry, /api/custom-providers.