One vault across every app. Save your Gemini or OpenAI key once, every app you run on Floom can use it. Keys are encrypted at rest and never logged.
When an app declares GEMINI_API_KEY in its floom.yaml, the input form will offer “Use my saved key” instead of asking you to paste it. Revoke any key to cut access across every app immediately.
Only the app that’s running, and only while it’s running. Floom proxies the value at request time; it never writes it to logs, metrics, or telemetry.
Edit in place and hit save. All future runs use the new value. Past runs are unaffected (they already completed with the old one).