# Quickstart

> Connect a custom store in four steps. You need an Antiro account and access to your store's pages and server code.

This is one page of the Antiro docs (https://docs.antiro.io/quickstart). Every page in one file: https://docs.antiro.io/llms-full.txt

## Get your keys

Open [API keys](https://dashboard.antiro.io/dashboard/api-keys) in the dashboard. Your store uses two keys. If one is missing, create it there:

-   The **publishable key** (`pk_…`) goes in your pages.
-   The **secret key** (`bf_…`) stays on your server. It is shown only once, so save it when you create it.

## Add the script

Paste this tag into every page that has an order form, and replace `pk_xxxxx` with your publishable key. The script finds the form on its own and checks the order when the shopper presses the order button.

**Your order page**

```html
<script
  src="https://js.antiro.io/v2/antiro.js"
  data-key="pk_xxxxx"
  async></script>
```

## Check the order on your server

The script adds a hidden field named `antiro_token` to the form. Before you accept an order, send it to Antiro with the value of that field.

**Your server**

```bash
curl https://api.antiro.io/v1/assessments \
  -H "X-API-Key: $ANTIRO_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "session_token": "<antiro_token>",
    "order_id": "1042",
    "phone": "0661234567"
  }'
```

## Act on the decision

The `action` field of the answer tells you what to do:

| `action` | What to do |
| --- | --- |
| `allow` | Accept the order. |
| `review` | Hold the order until your team has checked it. |
| `block` | Refuse the order. |

> **Do not skip the server check**
>
> A bot can post an order straight to your server without ever opening your page. The check on your server is what closes that path.

> **Watch before you enforce**
>
> While you test, set the store to **Monitor** on the [Protection](https://dashboard.antiro.io/dashboard/protection) page. `action` stays `allow`, and `recommended` shows what Antiro would have done.

## Next steps

- [Order forms](https://docs.antiro.io/sdk/order-forms): Mark forms and buttons the script does not recognise.
- [Check an order](https://docs.antiro.io/api/assessments): Send every field Antiro can use, for a sharper decision.
- [Act on the decision](https://docs.antiro.io/api/decisions): Handle every answer, including no answer at all.
- [Report outcomes](https://docs.antiro.io/api/outcomes): Tell Antiro what your team found.