1 tutorial
Keep real API keys out of Hermes Agent Docker sandboxes: iron-proxy swaps opaque proxy tokens for real credentials on the host, with honest v1 limits.