Read-only calls to /key/list, /team/list, /user/list, /budget/list, /guardrails/list. Existing key secrets cannot be copied (they are hashed); every imported key gets a fresh secret shown once.