Command line and scripts
First confirm whether the command-line tool reads the system proxy. Some processes read environment settings only at startup, so reopen the terminal after changing routes. If ordinary requests succeed but streaming responses stop midway, check for an overly short read timeout and make sure an intermediary is not closing the ongoing response as an idle connection.
Store API keys in controlled environment variables or a secrets-management system. Do not put them in public repositories, build logs, or shared scripts. Manage network settings and authentication credentials separately: the route establishes connectivity, while the credential authorizes identity, and failures in each produce different symptoms.
IDE extensions
Editor features such as Cursor and Copilot may send requests from the main process, extension process, and built-in terminal separately. If the extension still appears offline after browser login succeeds, check the editor’s own proxy settings and restart the relevant processes after changing them. A built-in terminal reaching the API does not mean the completion module uses the same connection path.
Routing should cover model endpoints, authentication callbacks, and static resources, not just the tool’s homepage. Rules that are too narrow create the illusion that the page works while core features do not; rules that are too broad may reroute local repositories, internal services, and unrelated development traffic.
CI and automated jobs
Continuous integration environments typically do not inherit the client state from a personal computer. Provide network exit settings explicitly inside the execution environment and inject credentials through controlled variables. During troubleshooting, start with a minimal request containing no business data to distinguish where DNS resolution, connection establishment, certificate validation, authentication, and response reading stop.
Set limited retries for recoverable connection interruptions in automated jobs while retaining enough error context. Never output complete keys, complete request bodies, or sensitive user-submitted material in logs.