It's a proxy that injects your credentials server-side so your keys never hit the browser (while also handling auth, rate limiting, etc, for you).