Install
The agent, slate, is the part of orbslate that runs in your network.
The agent, slate, runs on a machine inside your network that can reach what you connect: a laptop, a jump host or a server. It dials out to the service; nothing is opened inbound.
Getting it. On a Mac or Linux, in a terminal:
curl -fsSL https://orbslate.com/install.sh | sh
It downloads the agent built for this machine, checks the file's sha256 against the release, and puts slate in ~/.local/bin. For another folder: curl -fsSL https://orbslate.com/install.sh | sh -s -- --dir /usr/local/bin. It changes nothing else: no shell profile, no token. If that folder is not on your PATH it says so. On Windows, in PowerShell:
irm https://orbslate.com/install.ps1 | iex
It puts slate.exe in your user's Programs folder; add that folder to your PATH. On a Mac, a binary fetched this way runs as it is. One downloaded through a browser is stopped by Gatekeeper, because the agent is not notarised by Apple yet: use the line above. Every release is signed; slate update --check checks the signature and says whether a newer one is out.
Once it is on the machine:
slate doctorchecks the machine first: a private home for the agent, a keyring that works, the service answering, a clock in step.slate loginpairs it with your workspace. It prints a code and opens the console's pairing page; check that the code matches and choose Pair this agent.slate connect add kube --context <name> --environment stagingadds a cluster from your kubeconfig. The credential stays in that file.slate connect add datadog --site datadoghq.eu --environment prodadds Datadog. It asks for the API key and the application key without showing them, and keeps both in this machine's keyring.slate connect add dynatrace --url https://abc12345.live.dynatrace.com --environment prodadds Dynatrace. It asks for the API token without showing it, and keeps it in this machine's keyring.slate connect add harness --org default --project payments --environment prodadds a Harness project. It asks for the API key without showing it, and keeps it in this machine's keyring.slate connect add rancher --url https://rancher.example.com --environment prodadds Rancher. It asks for the API token without showing it, and keeps it in this machine's keyring.slate mcp --install claude-desktopgives the agent to your AI client (Your AI client says more).
slate status says what the agent is paired with and how many connections it has, at any time.