Install on a repo
remyx-ai[bot]) sets the repo secrets, writes the workflow, opens a bot-authored setup PR, and — in auto mode — merges it and fires the first run. No personal gh token is needed; only your REMYXAI_API_KEY.
Connect the GitHub and a model provider (Anthropic, Z.ai, Moonshot, OpenAI, or OpenRouter) integration in Connectors first;
outrider init uses those connections. If the GitHub App isn’t installed on the repo, the command surfaces the install link, and you can pass --anthropic-key to set the Anthropic key the first time.Install without the GitHub App
For organizations that can’t grant a third-party GitHub App yet (e.g. a pending security review),setup-local does the same provisioning using your own authenticated gh CLI instead of the Remyx App — nothing new to security-review. The running Action opens PRs with the repo’s built-in GITHUB_TOKEN.
setup-local needs an authenticated gh (run gh auth login, or set $GITHUB_TOKEN with repo + workflow scopes) and admin on the target repo. The only runtime Remyx dependency is the REMYX_API_KEY the workflow uses.It writes only the selected backend’s secret; add another with set-provider-secret to switch per dispatch. Claude Code and Codex read no credential of their own — the action derives theirs from the provider’s key — so don’t set an agent-named secret for them. Backboard is the exception: its own key is the credential (gh secret set BACKBOARD_API_KEY).Set a provider’s API key on a repo
set-provider-secret writes a provider’s API key into the repo’s secrets safely. It reads the key from a file, strips the trailing newline, and sidesteps the gh secret set --body - truncation trap that otherwise stores a literal - and breaks every run with a 401.
See Automated discovery PRs for what the action does once installed, its configuration inputs, and how to review the PRs it opens.