Getting Started

Quickstart

Connect Claude Desktop to airlock and make your first tool call in under five minutes.

Get airlock running with your AI agent in under 5 minutes.

Connect your agent

Airlock exposes a single organization-wide MCP endpoint that gives your agent access to every integration in your organization. Pick your client below — each one authenticates via MCP OAuth, so you sign in once and airlock caches your credentials for instant reconnects.

Claude DesktopRemote HTTP
Add airlock as a custom connector by URL.
https://mcp.air-lock.ai/org/your-org-slug
1Open Settings → Connectors.
2Click the + next to Connectors, then Add custom connector.
3Paste the URL above and click Add.
4Complete the sign-in in the browser when prompted.
Claude connects from Anthropic's cloud, so the endpoint must be publicly reachable (airlock's is). The free plan allows one custom connector; Replace your-org-slugwith your organization's slug — your exact endpoint URL is shown, ready to copy, under Settings → Account in the Control Room.
Claude custom connectors docs

Already have an integration set up? That's all you need. New to airlock? Create your first integration with the steps below, then come back here to connect.

No browser available? Instead of OAuth you can create a personal API token under Settings → Account → Personal API tokens and send it as an Authorization: Bearer alk_pat_… header to the same endpoint. The token authenticates as you, with your access and your approval requirements. See Personal API tokens.

Prerequisites

  • An airlock account at control-room.air-lock.ai
  • Claude Desktop (or another MCP-compatible client) installed
  • Admin role in your organization for Steps 1–2. Creating integrations and changing tool policies are admin-only; members can connect their own credentials (Step 3) and use the agent endpoint (Step 4), but the integration catalog is not shown to them.

If you're the first person from your company, signing up creates your organization and makes you its admin. If a colleague signed up before you on the same email domain, your account joins their organization as a pending member — you'll see a "waiting for approval" screen until an admin approves you under Settings → Users & Groups. Personal email domains always get their own isolated organization.

Step 1: Create an Integration

  1. Log in to the airlock Control Room
  2. Open Integrations from the sidebar
  3. Add an integration one of two ways:

From a pre-built integration (recommended):

  • Browse or search the catalog and click any of the 190+ integrations: GitHub, Linear, Notion, Google Calendar, Todoist, Sentry, PostHog, HubSpot, and more
  • These come pre-configured — no OpenAPI spec needed

From your own API:

  • In the catalog, click the OpenAPI tile (or the MCP Proxy tile to wrap an existing MCP server) — both sit at the front of the Available grid
  • Enter a name for your integration
  • Paste your OpenAPI specification (YAML or JSON)
  • Enter your target API URL
  1. Follow the wizard to finish creating the integration

Step 2: Configure Policies

By default, tools on an OpenAPI or proxy integration are set to Allow. The built-in airlock memory and airlock code graph integrations are the exception — their write tools are pre-set to Require Approval when the integration is created.

To change any tool:

  1. Go to your integration's detail page
  2. Find the Tools & Policy tab showing all available operations
  3. For each tool, toggle between Allow (executes immediately) or Require Approval
  4. For tools requiring approval, assign approvers (users or groups)

Step 3: Connect Your Account

Connect your credentials depending on the integration type:

For OAuth-based integrations (GitHub, Google Calendar, Linear, Notion, Sentry, etc.):

  1. Go to your integration's detail page
  2. Click Connect to authorize airlock to access the service
  3. Complete the OAuth flow in the popup window

For API key-based integrations (Firecrawl, Bright Data, Odoo, etc.):

  1. Go to your integration's detail page
  2. Enter your API credentials and click Save

Step 4: Test It

With your agent connected (using the Connect your agent options at the top of this page), ask it to interact with your API:

"List my open pull requests on GitHub"

Your agent will use the MCP tools exposed by airlock to call your API.

Next Steps