'Any' (the default): the run's own credentials first, then the platform's — MJ Credentials
bound to the prompt, model or vendor, then the AI_VENDOR_API_KEY__<DRIVER> environment keys.
'RuntimeOnly': only what the caller supplied for this run — apiKeys, or a per-request
credentialId on a prompt. A driver class the run carries no key for has NO key, so that vendor
is not a candidate and failover cannot reach the platform account.
A host that runs work for a customer on the customer's own key sets 'RuntimeOnly', so a key the
customer did not supply is a visible failure rather than a silent charge to the platform.
Which credentials a run may spend.
'Any'(the default): the run's own credentials first, then the platform's — MJ Credentials bound to the prompt, model or vendor, then theAI_VENDOR_API_KEY__<DRIVER>environment keys.'RuntimeOnly': only what the caller supplied for this run —apiKeys, or a per-requestcredentialIdon a prompt. A driver class the run carries no key for has NO key, so that vendor is not a candidate and failover cannot reach the platform account.A host that runs work for a customer on the customer's own key sets
'RuntimeOnly', so a key the customer did not supply is a visible failure rather than a silent charge to the platform.