API integrations

Wire agents to real systems.
Keys never sit in the model.

Read paths can be free to plan. Write paths need allowlists and custody choices.