Quick Start
Install ArmorClaude and see it enforce tool calls in under 2 minutes
Quick Start
Get ArmorClaude running in under 2 minutes. No account required for local-only mode.
Prerequisites
- Claude Code 2.x or Claude Desktop
- Node.js 20+
- Git
- macOS, Linux, or Windows (WSL / Git Bash)
Install
curl -fsSL https://armoriq.ai/install_armorclaude.sh | bashcurl -fsSL https://armoriq.ai/install_armorclaude.sh | bashRun from WSL or Git Bash, not PowerShell/CMD.
The installer handles everything: adds the marketplace, installs the plugin, installs the ArmorIQ CLI, and optionally connects your ArmorIQ account.
When prompted "Connect your ArmorIQ account now?" press Y to authenticate via browser, or N to use local-only mode. You can run armoriq login anytime later.
Manual install (without the curl script):
claude plugin marketplace add armoriq/armorClaude
claude plugin install armorclaude@armoriqVerify Installation
After the installer finishes, verify everything is set up:
claude plugin listYou should see:
Installed plugins:
armorclaude@armoriq
Version: 0.2.0
Scope: user
Status: enabledIf you connected your ArmorIQ account during install, verify the login:
armoriq whoamiYou should see:
ArmorIQ Credentials
Email: you@company.com
API Key: ak_live_xxxxxxxx...
User ID: ...
Org ID: ...
File: ~/.armoriq/credentials.jsonIf you skipped the login, you can connect anytime:
armoriq loginThis opens your browser. Sign in with Google or GitHub, click Authorize, and the key is saved automatically. ArmorClaude picks it up on the next Claude session.
Try It
Open Claude Code in any project:
mkdir -p /tmp/demo && cd /tmp/demo
echo "# My Project" > README.md
claudePrompt:
Read README.md and tell me what's in it.What happens:
- Claude calls
register_intent_plandeclaring it will useRead - ArmorClaude stores the plan
- Claude calls
Read. ArmorClaude checks it against the plan and allows it - Claude returns the file contents
You will see in the transcript:
register_intent_plan: Intent registered: 1 steps.
Read 1 fileBlock Something
Set a policy rule:
Policy new: deny WebFetchArmorClaude responds with a policy update confirmation.
Now try:
Fetch https://example.comResult:
ArmorClaude policy deny: policy1The tool call is blocked before execution. Claude sees the denial and tells the user.
To remove the rule:
Policy delete policy1What You Just Saw
| Feature | What happened |
|---|---|
| Intent plan | Claude declared Read before using it |
| Plan enforcement | Read was in the plan, so it was allowed |
| Policy rule | deny WebFetch blocked the fetch call |
| Policy management | Rules created and deleted from the chat prompt |
Next Steps
- Policy Rules all commands, data classification, evaluation order
- Plan Mode use with Claude's built-in plan mode
- Authentication connect to ArmorIQ for audit logs and signed tokens
- Concepts how intent enforcement works under the hood