OAuth Wizard
The OAuth wizard connects your external service accounts to Shake. @shake uses these connections to read and write to your infrastructure on your behalf.
Supported providers
| Provider | What Shake uses it for |
|---|---|
| GitHub | Read repo files, create commits, open pull requests |
| Vercel | Create projects, set environment variables, check deploy status |
| Supabase | Create projects, run migrations, read schema |
| Railway | Create services, manage environment variables |
Completing the wizard
The wizard appears when you create your first project. You can also access it later from Settings → Integrations.
Each step is:
- Click "Connect [provider]"
- Authorize Shake's OAuth app on the provider's website
- Return to Shake — the connection is verified automatically
All steps are optional. Shake functions without every provider connected, but @shake will have fewer tools available.
Token storage
OAuth tokens are stored encrypted at rest using AES-256-GCM. They are never logged or transmitted outside your Shake workspace.
Revoking access
To disconnect a provider:
- Go to Settings → Integrations
- Click "Disconnect" next to the provider
- Revoke access in the provider's OAuth settings for full cleanup
GitHub: two paths
The GitHub step has two paths:
- Create a new repo — Shake creates a fresh repo under your account. @shake will scaffold the initial files.
- Import an existing repo — Connect a repo you already own. @shake reads the codebase and creates starter cards based on what it finds.