Three kinds of connection. Agent platforms and identity directories are read-only — the appliance lists what is there and never changes anything on your side. Model providers are routed to by the AI Model Proxy. Either way the secret stays in your vault: a connection stores a reference, resolved at call time and discarded.
Read-only. A directory turns the user on every AI call into a named person or a known service identity — the start of lineage: user → agent → tokens → data → tools.
Raise incidents for high-risk AI agents and reconcile agents against CMDB applications — owner, support group and the business service each one serves.
Models you run or rent — on your GPUs, in your Azure or AWS account, or behind your own gateway. Each endpoint declares where it runs; with Keep regulated data in-region on (Model Proxy page), prompts carrying regulated data go only to in-region or on-box models.