Documentation

Airlock docs

For operators installing Airlock inside their VPC and developers integrating an MCP-speaking agent. Start with the Quickstart, or jump straight into Architecture if you want the mental model first.

Concepts

Why Airlock

The one-sentence problem, a concrete fintech example, before/after blast radius, and why neither RLS nor a function-tool API gets you there.

Concepts glossary

Architecture

How tunnels, ephemeral snapshots, and multi-worker round-robin fit together. The mental model in plain English.

Get started

Quickstart

Install the worker, register it with the control plane, run your first user export, and watch your first MCP query in 10 minutes.

Reference

Configuration

Every field in airlock.yaml — root table, masking rules, snapshot TTL, control-plane block — with defaults and examples.

Security whitepaper↗

Threat model, trust boundaries, cryptography, audit, compliance posture. The customer-facing security whitepaper.