The verdict lives where you live. In your inbox.

1. Download the manifest: /outlook-addin/manifest.xml. Right-click → Save As to keep the file local.
2. In Outlook web (outlook.office.com), open the message, click the three-dot menu → Get Add-ins. In Outlook for Windows / Mac, use Home → Get Add-ins.
3. In the add-in dialog, switch to My add-ins → Custom add-ins → Add from file, then select the manifest you downloaded.
4. Accept the permissions prompt. Outlook requests ReadItem scope — the add-in reads the open email body to pre-fill the deal fields. It never sends your inbox elsewhere; the only outbound call is to POST oilflow.us/api/v1/predeal/check.
5. Open any deal email. In the message reading pane, click OilFlow Pre-Deal in the message bar to open the task pane.

The first time you open the task pane, paste your OilFlow Pre-Deal API key in the field at the top. The key is stored in the task pane's localStorage on the Outlook host machine — it never travels to OilFlow servers except as the Authorization: Bearer header on the Pre-Deal check call.

Get a key by signing up at /dashboard (Solo $99/mo or Desk $999/mo) or by contacting sales for the Bank Enterprise tier via /apply.

• Reads, never writes. The add-in only requests the ReadItem scope. It cannot send emails, modify drafts, delete items, or access folders.
• Per-email, on demand. Email content is read only when the task pane is open and only from the currently-selected message. No background scanning.
• Outbound traffic. Only POST oilflow.us/api/v1/predeal/check. Nothing else. The taskpane HTML is served from oilflow.us; no third-party scripts.
• Bank-private deal class. Add the X-OilFlow-Data-Class: private header in your enterprise key configuration if your bank contract requires that no deal data feeds the OilFlow corpus. Default for Bank Enterprise tier.