diff --git a/app/api/settings/route.ts b/app/api/settings/route.ts
index 1d432f9..2110d54 100644
--- a/app/api/settings/route.ts
+++ b/app/api/settings/route.ts
@@ -4,7 +4,6 @@ import { NextRequest, NextResponse } from 'next/server'
 import { createClient } from '@/lib/supabase/server'
 
 const ALLOWED_KEYS = [
-  'ANTHROPIC_API_KEY',
   'DEEPSEEK_API_KEY',
   'GOOGLE_AI_API_KEY',
   'META_WHATSAPP_PHONE_NUMBER_ID',
diff --git a/supabase/migrations/20260713000002_reconcile_settings_keys.sql b/supabase/migrations/20260713000002_reconcile_settings_keys.sql
new file mode 100644
index 0000000..873b1cd
--- /dev/null
+++ b/supabase/migrations/20260713000002_reconcile_settings_keys.sql
@@ -0,0 +1,23 @@
+-- Reconcile app_settings after provider switches:
+-- DeepSeek key was saved under ANTHROPIC_API_KEY slot (before rename) — recover it.
+-- Remove retired ANTHROPIC_API_KEY and VOYAGE_API_KEY slots.
+
+-- Ensure DeepSeek slot exists
+insert into app_settings (key, value) values ('DEEPSEEK_API_KEY', '')
+  on conflict (key) do nothing;
+
+-- Copy orphaned value: ANTHROPIC_API_KEY → DEEPSEEK_API_KEY (only when DEEPSEEK_API_KEY is empty and ANTHROPIC has a value)
+update app_settings dk
+set value = ak.value, updated_at = now()
+from app_settings ak
+where dk.key = 'DEEPSEEK_API_KEY'
+  and ak.key = 'ANTHROPIC_API_KEY'
+  and coalesce(dk.value, '') = ''
+  and coalesce(ak.value, '') <> '';
+
+-- Ensure Gemini slot exists
+insert into app_settings (key, value) values ('GOOGLE_AI_API_KEY', '')
+  on conflict (key) do nothing;
+
+-- Remove retired provider slots
+delete from app_settings where key in ('ANTHROPIC_API_KEY', 'VOYAGE_API_KEY');