v0.4.6

What's Changed

🚀 Features

• verify_api_key tool — verify a stored API key against its provider's read-only endpoint (whoami) without ever returning the key value
• Auto-verifying export gate — export_key_to_mcp_config now verifies HTTP keys before writing to a host MCP config; skip_verify / verify_url overrides included
• Bundled verify-recipe store — built-in provider recipes for verification, with explicit verify_url support for providers without a recipe (e.g. OpenRouter)

🐛 Bug Fixes

• Resolve the verify provider from the decrypted payload service first (real backend key entries have no top-level service — only service_hint); fixes live E2E key verification

📚 Docs

• README: export_key_to_mcp_config + verify_api_key tool docs, 'New in v0.4.6' callout
• Troubleshooting playbook: 13-tool counts, --no-deps ruamel.yaml warning
• Packaged SKILL.md + agent prompts: verification rules and tool list updated

Full Changelog: v0.4.4...v0.4.6