Decision
All Claude API calls from the platform's services (Mission Control server-side, orchestrator daemon) route through Vercel AI Gateway. Direct https://api.anthropic.com/... calls are not allowed.
Rationale
- Centralized observability (one place to read usage + latency).
- Single billing surface (one invoice, not one per service).
- Automatic provider failover (Gateway routes around model-level outages).
- Per-request cost telemetry that feeds MC's cost ingest pipeline.
Scope
- Claude Code (the CLI tool the build agents themselves run on) is exempt — it has its own auth flow against Anthropic.
- All other AI calls (verifiers, summarizers, embeddings, anything programmatic): Gateway only.
- Use
AI_GATEWAY_TOKEN env var, not ANTHROPIC_API_KEY.
Reference
- Workspace CLAUDE.md hard constraint
mission-control/lib/env.ts validates AI_GATEWAY_TOKEN, does not accept ANTHROPIC_API_KEY