# Getting started This walks through the fastest path from zero to an agent that can transact: sign in, vault a credential, and connect an agent over MCP. ## 1. Sign in Open the Paybox app and create an account. Sign-in is **email + passkey** — Paybox requires a passkey assertion at every sign-in, and uses it again to approve sensitive operations. (Recovery tip: enroll a passkey on a second device so you're never locked out.) ## 2. Vault a credential In **Credentials**, add one of: * a **secret** (e.g. an API key), * a **card** (vaulted via Basis Theory — Paybox never sees the raw PAN), * a **wallet** (created via MoonX MPC — the private key never leaves the TEE). ## 3. Connect an agent Two ways to give an agent scoped access: * **[MCP connector](/connect/mcp)** — paste one URL into your agent's connector list, sign in once, and approve a scoped grant. Best for Grok, Claude.ai, Open WebUI, and other MCP clients. * **[OAuth 2.1](/connect/oauth)** — for apps that integrate directly: standard authorization-code + PKCE, after which the app holds a scoped access token. ## 4. Stay in control * Pick an **approval mode** per grant: *human approval* (every op pauses for your passkey) or *autonomous* (acts within the grant). * Above-threshold and sensitive operations always pause for a **passkey**. * Every operation is an **audit event**, visible in the app. * Revoke any agent client at any time. :::tip New to the model? Read **[Credentials & agents](/concepts/model)** next — it explains credentials, clients, grants, and approval modes in one place. :::