Tips
Clients should receive access only to approved routes, not broad provider credentials.
Read A local model your tools can call