we're on fly, going to add modal support soon. I dont think our users care all that much, but we care for dev ergonomics.

keys are tricky. We don't have a great answer. I mean the proxy inject works well enough for mcp, but there is just such a long tail of tools that do something like 'read a key from disk and encrypt it before sending it out' which makes proxy management just a pain