Every shell, if you want it

run hands a value to one process, and monkeys run @foo zsh hands a whole profile to one shell, which forgets it on exit. For a value that every shell should carry from startup, export writes the lines and you paste them:

monkeys export TYPESAFE_API_KEY

export TYPESAFE_API_KEY="$(security find-generic-password -s monkeys -a TYPESAFE_API_KEY -w)"

No value is in that line. It asks the keychain when the shell starts, the way you would have written it by hand, and on Linux it asks secret-tool instead. monkeys writes nothing into your startup file for you: a value that every process on the machine inherits is a decision to make with the file open.

The keychain treats security as its own program, so the first shell that runs the line asks once whether to allow it. Answer Always Allow and it stays quiet.