TSM uses a BYOK model for expensive or tightly rate-limited providers. News is free and open. LLMs and premium market services can be brought in by the user, or by a limited guest configuration when we intentionally choose to cache and share a provider key.
The browser vault stores keys locally. That keeps credentials under user control while still letting the terminal, brief, monitor, and analytics layers call the right providers when needed.
Questions answered here: What is free? What is BYOK? What is guest mode? Which providers are supported? The page should function like a short setup guide, not a wall of policy text.