Signup → key → CI

Self-serve path for platform / DevEx. No waitlist required. Full reference: docs/ci-github-actions.md.

1. 01

   Create an account

   Sign up creates your org. Confirm email if prompted, then you land in the dashboard.

   Sign up → go to API Keys
2. 02

   Create an API key

   Dashboard → API Keys → New key (admin). Copy the raw orc_live_… value once. Store it as GitHub Actions secret ORCATRAC_API_KEY.

   Open API Keys (signed in) →
3. 03

   Paste a CI workflow

   Use profile ci for fail-closed defaults. Replace the command after -- with your real MCP server.

   # .github/workflows/agent-with-orcatrac.yml
   name: Agent with OrcaTrac
   on:
     workflow_dispatch:
   
   jobs:
     protected-agent:
       runs-on: ubuntu-latest
       steps:
         - uses: actions/checkout@v4
         - uses: actions/setup-node@v4
           with:
             node-version: '20'
         - name: Install OrcaTrac CLI
           run: npm install -g @orcatrac/cli@latest
         - name: Run MCP behind OrcaTrac (fail-closed CI profile)
           env:
             ORCATRAC_API_KEY: ${{ secrets.ORCATRAC_API_KEY }}
             ORCATRAC_PROFILE: ci
           run: |
             orcatrac run -- node -e "process.stdin.pipe(process.stdout)"

4. 04

   Confirm events

   After a real tools/call, open Events in the dashboard. Set org policy mode to block for CI orgs when you are ready.

   Optional: Claude Code hooks on laptops — see docs/claude-code-hooks.md. Desktop inject remains available; CI is the paying wedge.