Docs

Quickstart

From zero to a connected agent in five steps.

  1. Create your account. Every user starts with a private Personal Vault.
  2. Add a skill. Import a folder/ZIP from Skills → Import, scan a public GitHub repository, or ask a connected MCP client to author a package and save it to Xainvault. Every path creates a Draft. Its author may optionally open Drafts → Test draft in a connected client before scanning; that package is Unreviewed and remains author-only.
  3. Scan the draft. Personal releases pass the trusted automated gate before Ready; Team and Enterprise releases continue through human review. See Skill security for every check and outcome.
  4. Connect an agent. ChatGPT Apps and Claude Connectors use OAuth. Direct MCP clients use an access key from Agents; the key is shown exactly once.
  5. Install the Ready package. The client receives only granted, Ready versions through a signed ZIP and checksum.

For Claude Code it is a single command:

claude mcp add xainvault -t http \
  --header "X-API-Key:xv_key_..." \
  https://your-endpoint/mcp

Codex uses the same endpoint and key from ~/.codex/config.toml; see Connect agents for the exact snippet.

Editors that read a JSON config use the same endpoint and header inside mcpServers — see Connect agents for the details and for ChatGPT / Claude connectors.