This guide walks you through everything you need to go from a fresh Sherlock session to a completed AI investigation run. The whole process takes about five minutes. If you already have an API key from a supported provider (Gemini, OpenRouter, OpenAI, or Anthropic), you can be running your first analysis before the end of this page.Documentation Index
Fetch the complete documentation index at: https://sherlock-osint.vercel.app/docs/llms.txt
Use this file to discover all available pages before exploring further.
Before you begin
You need at least one API key from a supported AI provider to run investigations or use the chat feature. If you don’t have one yet, read Configure your AI provider for step-by-step instructions on getting a key from each provider. Browsing existing workspaces and artifacts works without a key.First-run walkthrough
Open Sherlock
Navigate to your Sherlock URL. New visitors land on the
/welcome page, which gives you a brief overview of the workspace.Click Open Workspace to continue. A modal appears offering two paths:- Enter an API key — paste your key to unlock investigation runs and chat
- Browse without a key — skip into the Files browser to explore any pre-seeded content
Add your API key
If you didn’t enter your key in the welcome modal, open Settings from the top navigation and select the Runtime tab.Under Access Credentials, find the field for your provider and paste your API key. The field accepts keys for:
- Google Gemini
- OpenRouter
- OpenAI
- Anthropic
You can add keys for multiple providers at once. Sherlock lets you choose which provider and model to use each time you launch a run, so having more than one key gives you more flexibility.
Create a workspace
Click Files in the top navigation to open the workspace browser. This is Sherlock’s home surface — it shows all your workspaces and the artifacts inside them.Click New Workspace to create your first workspace. Give it a name that describes your research project or topic, then confirm. Sherlock creates the workspace and opens it.A workspace holds everything related to a single investigation or research area: runs, artifacts, chat sessions, research boards, signals, and source records. You can create as many workspaces as you need.
Launch an investigation run
From inside your workspace, click New Run (or look for the run launch option in the workspace toolbar). This opens the run setup panel.In run setup, configure:
- Scope / domain — choose a domain pack that matches your research area (for example, cybersecurity, finance, or general research)
- Purpose — select an analysis purpose, such as a background investigation, a threat assessment, or a summary report
- Model — pick the provider and model you want to use; the selector shows models available for the keys you’ve added
- Topic / prompt — describe what you want to investigate
Review your artifact
When the run finishes, Sherlock opens the resulting artifact in Operation View — a document-first reading surface that shows key findings near the top, with inline evidence, typed sections, and an inspector panel on the side.From here you can:
- Read through the structured findings and evidence records
- Open Chat to ask follow-up questions grounded in the artifact
- Add content to your Research Board for visual analysis
- Launch follow-up runs to dig deeper into specific threads
What’s next
Investigation runs
Learn about domain scopes, purpose profiles, generation modes, and guided run building.
Research board
Build a visual canvas with your artifacts, entities, and signals using the tldraw-powered board.
Workspaces
Understand how workspaces organize your research and how to export and import your data.
