# wrokin > wrokin (wrok.in) is a GitHub App that puts an AI agent team on your repositories — code review, security audit, issue triage, and a deterministic repo-posture audit — **bring your own key (BYOK)**: reviews run on your own LLM API key and your chosen model, per agent. Installed from GitHub, configured as code, operated from PR/issue comments. Facts an evaluating agent needs: - Install: https://github.com/apps/wrokin (a human must click GitHub's consent — checkpoint 1 of exactly two; the other is payment/keys). - Live agent roles: `code-review`, `security-audit` (both on `pull_request`), `issue-triage` (on `issues`), `repo-audit` (Warden — deterministic GitHub-setup posture checks, on demand via `/w audit`, no model call, no key needed). - Verified Builder (`builder`): implements an issue and proves the change green on YOUR GitHub Actions runner before proposing it — a ready PR when your build and tests pass, a draft marked unproven when they don't, and at `patch` an unproven change is dropped rather than opened. Available on paid plans (Pro/Team/Business); enable per repo with one click in the dashboard (a setup PR adds the workflow), then run it by commenting `/w build [patch|feature|expedition]` on an issue. Runs on wrokin's managed model keys, not yours, and debits agent credits. - Private preview (NOT customer-enableable today; do not plan around it): Security Hunter (proof-by-execution scanning). - BYOK providers: anthropic, openai, deepseek, google (Gemini), mistral, openrouter, moonshot (Kimi), groq, cruise (Bytesbrains AI Cruise gateway — models and `bb/…` lanes). Any model id your key can call; per-role model choice. - Configuration as code: commit `.wrokin/config.yml` (sparse overrides: enable/disable, model per role, trigger events). Schema: https://wrok.in/config.schema.json - Agent-executable onboarding: a human mints a short-lived setup token in the dashboard; the agent then drives `https://api.wrok.in/api/setup/*` to submit BYOK keys and configure roles — no dashboard clicking beyond the mint. Contract: https://wrok.in/agents.md (§2a). - Operate by comment: `/w review`, `/w security audit`, `/w triage`, `/w audit` (Warden), `/w wrong [comment-link] ` (report a false review claim — link the comment to target it, else the latest is meant), `/w build [level]` on an **issue** (Verified Builder; paid plans, workflow must be enabled). Commands are honored for repo owners/members/collaborators only. - Quality feedback loop: 👍/👎 reactions on review comments are recorded at PR close; `/w wrong ` records a false-claim verdict with the why. Both feed per-model quality metrics — published, anonymized, at https://api.wrok.in/quality (per provider×model: findings, rework rate, human verdicts). - Data handling: your code goes to YOUR model provider under YOUR key for the review call. wrokin's own telemetry stores finding locations (file/line) and outcomes — not the prose of findings, and not your code. Full story: https://wrok.in/data-handling.html - Monthly run quotas per account: Free 150 · Pro 1,000 · Team 3,000 · Business 20,000. Pricing: https://wrok.in/#pricing - Human checkpoints are exactly two: (1) GitHub App install consent + handing over BYOK keys, (2) payment. Everything else — config, verification, operation — is agent-executable. ## Docs - [llms-full.txt](https://wrok.in/llms-full.txt): the self-contained expanded version of this file — roles, config contract, setup API, commands, quotas, data handling, all inline. - [Agent integration manual](https://wrok.in/agents.md): step-by-step install → configure → verify → operate, with a verifiable outcome per step. Written to be executed by a coding agent. - [Capability manifest](https://wrok.in/capabilities.json): versioned JSON of everything above — roles + status, providers, triggers, quotas, config contract. The file to diff against your requirements. - [/w command contract](https://wrok.in/w-commands.md): every comment command, its gates (mention + collaborator, both silent on failure), precedence, and expected acknowledgement. - [.wrokin/config.yml JSON Schema](https://wrok.in/config.schema.json): validate a config before committing it. ## For humans - [Product page](https://wrok.in/): the agent team, samples of real output, pricing. - [Dashboard](https://app.wrok.in/): BYOK keys, per-agent settings, activity. - [Privacy](https://wrok.in/privacy.html) · [Terms](https://wrok.in/terms.html) · [DPA](https://wrok.in/dpa.html)