diff --git a/README.md b/README.md
index 9c1cb55..a7f8d56 100644
--- a/README.md
+++ b/README.md
@@ -6,6 +6,19 @@ Manages Ed25519 key pairs (keygen, registration, rotation) and signs outgoing
 HTTP requests with RFC-9421-shaped signatures that are byte-identical to the Go
 `agentsig` verifier in `platform/internal/agentsig`.
 
+## Install
+
+Zero runtime dependencies, pure ESM, no build step. Install from GitHub, pinned
+to a release:
+
+```bash
+npm install github:openmaxai/openmax-agentgate#v0.2.0
+```
+
+This provides both the `agentgate` CLI (verify with `npx agentgate --version`)
+and the library import (`import { createSigner } from 'openmax-agentgate/client'`).
+Check for updates any time: `npx agentgate upgrade --check`. Requires Node.js >= 20.
+
 ## CLI
 
 ```bash