super.engineering Pulls API Keys Out Of Chat

This is the right security boundary for agentic developer tools: secrets should be available to local execution without becoming model context.

• –Keeping keys outside prompts reduces accidental transcript, log, and provider leakage.
• –Password-field requests are safer than asking users to paste credentials into conversational text.
• –iPhone support extends secure approvals and credential workflows beyond the desktop.
• –Local storage still makes file permissions, encryption, and machine compromise important user responsibilities.
• –The approach fits super.engineering’s broader local-first architecture and direct provider traffic model. [Privacy policy](https://super.engineering/privacy/)