Keys are encrypted in Mimir's database and can't be viewed again, only replaced. Saving a key makes that provider's models available to agents and workflows, and sends a one-token request to check it works.