Most developers are integrated within an hour. There are two integration paths and you can use either or both.
Shared setup (both paths)
- Create an account on the web at oakallow.io. Sign-in is by passkey or email one-time code, and new accounts receive $5 in free credits.
- Enroll a passkey on your first sign-in. oakallow requires multi-factor authentication on every account.
- Save the 10 recovery codes that are generated automatically when you enroll your first passkey. Store them somewhere safe.
- Register your tools and define permission rules from the dashboard (or skip and let the MCP connector auto-discover them).
REST API path
- Generate a management API key for setup, then a standard API key for runtime.
- Call the permission check endpoint before your agent acts — it returns a signed decision receipt inline — then log the result.
MCP connector path
- Add https://api.oakallow.io/mcp as an MCP server in your client (Claude Desktop, ChatGPT, Cowork, or any MCP-compatible agent). OAuth handles auth automatically.
- Your agent calls oakallow tools by name. Unknown tools auto-register as drafts gated on requires_approval.
The dashboard includes a Quickstart guide and an API Builder that generates ready-to-run seed scripts.