The verdict lives where you live. In your inbox.

1. Download the manifest: /outlook-addin/manifest.xml. Right-click → Save As to keep the file local.
2. In Outlook web (outlook.office.com), open the message, click the three-dot menu → Get Add-ins. In Outlook for Windows / Mac, use Home → Get Add-ins.
3. In the add-in dialog, switch to My add-ins → Custom add-ins → Add from file, then select the manifest you downloaded.
4. Accept the permissions prompt. Outlook requests ReadItem scope, the add-in reads the open email body to pre-fill the deal fields. It never sends your inbox elsewhere; the only outbound call is to POST oilflow.us/api/v1/predeal/check.
5. Open any deal email. In the message reading pane, click OilFlow Pre-Deal in the message bar to open the task pane.

The first time you open the task pane, paste your OilFlow Pre-Deal API key in the field at the top. The key is stored in the task pane's localStorage on the Outlook host machine, it never travels to OilFlow servers except as the Authorization: Bearer header on the Pre-Deal check call.

API access carries no list price. Write to hello@oilflow.us or apply at /apply, and we scope the volume and the term on a call before we issue a key. The free live check at /predeal runs in the browser with no key at all.

• Reads, never writes. The add-in only requests the ReadItem scope. It cannot send emails, modify drafts, delete items, or access folders.
• Per-email, on demand. Email content is read only when the task pane is open and only from the currently-selected message. No background scanning.
• Outbound traffic. Only POST oilflow.us/api/v1/predeal/check. Nothing else. The taskpane HTML is served from oilflow.us; no third-party scripts.
• Bank-private deal class. Add the X-OilFlow-Data-Class: private header in your key configuration if your bank contract requires that no deal data feeds the OilFlow corpus. We set it on by default for keys issued under a scoped bank agreement.