{ ... }: { # servers with secrets should go in ../../private/llm.nix programs.mcp = { enable = true; servers = { }; }; }