ctx.llm and deliberately does not inherit DEEPSEEK_BASE_URL.Three facts must match.
Anthropic-compatible base; DSH appends /messages.
The referenced key must be valid for that exact hostname.
The gateway must run web_search_20250305 server-side.
Return web_search_tool_result, not model prose or ordinary function output.
Choose one honest outcome.
Use its Anthropic base and an official key; account for a separate model turn.
Set base, model, and credential reference together.
Remove the tool boundary or install an audited ctx.web provider.
Stop retries. If a gateway credential reached an unintended endpoint, follow the issuing provider’s rotation policy; never paste the secret into an incident report.
Primary evidence.
Prove the search route itself.
The complete runbook includes containment, durable request evidence, configuration overlays, protocol requirements, error routing, three deployment outcomes, and fifteen acceptance gates.
Read the complete runbook