Use DawonAI in your coding harness

pai is a small program that connects Claude Code, Codex, OpenCode and OMP to DawonAI. The tool asks it for a day pass that expires at midnight UTC, so there’s no API key to leak, and the pass carries nothing that names your account.

Why DawonAI needs pai

Coding harnesses expect an API key: one long-lived secret that names your account and goes with every request. DawonAI doesn’t issue API keys. Each request carries a day pass instead, and pai is the program that gets the passes and adds them to your harness’s requests. Without pai, a coding harness can’t use DawonAI.

Day passes, not an API key. pai gets a new day pass from the relay each day. It expires at midnight UTC and carries nothing that names your account, so the model server can tell a request is paid for, but not which account sent it.
Your harness holds no DawonAI secret. It talks to pai on your computer, at 127.0.0.1:47821, with a key that works only there. The day pass and this computer’s device key stay in pai and your OS keychain.
pai checks the model server’s key. Each pai release has the model server’s key built in, and pai refuses any connection that presents another key, even with a valid certificate. Browsers can’t make that check.
Setup is one command per harness. pai setup points your harness at pai, and backs up any file it changes.

The DawonAI web app doesn’t need pai. It gets its own day passes.

The easy way: paste the skill

Open the DawonAI skill and paste it into your coding agent. It installs pai, asks you for a pairing code from the web app, and sets up the tool. It never asks for your account key.

Or set it up yourself

Install pai. On macOS and Linux:

curl -fsSL https://ai.imdawon.com/pai/install.sh -o /tmp/pai-install.sh && sh /tmp/pai-install.sh

On Windows, in PowerShell:

irm https://ai.imdawon.com/pai/install.ps1 -OutFile $env:TEMP\pai-install.ps1; powershell -ExecutionPolicy Bypass -File $env:TEMP\pai-install.ps1

Both check the download’s SHA-256 hash, and the release key’s signature on the list of hashes, before installing.

Get a pairing code. In the web app, open Account and select Connect a device. The code works once, for 10 minutes.
Pair this computer.
```
pai pair YOURCODE
```

Set up your tool. Run one of these. Each one backs up any file it changes.

pai setup claude-code --apply
pai setup codex --apply
pai setup opencode --apply
pai setup omp --apply

To disconnect, run pai unpair, or remove the device on your account page.

The release key

Every pai release has a SHA256SUMS file signed with this Ed25519 key. If the key here and the key in your installer differ, don’t install.

-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEAxIp4fBpqtyz7ci9B/bkVLVkyx++yJ/mRzn+WdzkqPGY=
-----END PUBLIC KEY-----

To check a release by hand with OpenSSL 3, save the key as pai-release.pub, download SHA256SUMS and SHA256SUMS.sig from latest/, then run:

openssl pkeyutl -verify -pubin -inkey pai-release.pub -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig