> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cantina.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Use Cantina with AI agents

> Find canonical Cantina product information, Markdown documentation, Apex CLI and hosted MCP setup, API specifications, and published security research.

Cantina is the company and agentic security platform. **Apex by Cantina** provides AI penetration testing and code security. **Clarion by Cantina** provides AI security operations. Researcher-led reviews, competitions, and bug bounties are additional Cantina offerings.

## Choose the right source

| What you need | Source |
| - | - |
| Product capabilities and evaluation | [Cantina website](https://www.cantina.security/), [Apex](https://www.cantina.security/apex), and [Clarion](https://www.cantina.security/clarion) |
| Product setup, platform concepts, and integrations | [Cantina documentation](https://docs.cantina.security/introduction.md) |
| Current Apex CLI commands, agent setup, and service API contract | [Apex app documentation](https://apex.cantina.security/docs) |
| Benchmarks and methodology | [Cantina research](https://www.cantina.security/research) |
| Published vulnerabilities and vendor responses | [Disclosure library](https://www.cantina.security/disclosures) |
| Researcher programs and public opportunities | [Cantina opportunities](https://cantina.xyz/opportunities) |

The current documentation domain is `docs.cantina.security`. Existing `docs.cantina.xyz` links redirect here.

## Read documentation as Markdown

Every documentation page has a Markdown representation. Append `.md` to the page path, for example [Apex documentation as Markdown](https://docs.cantina.security/apex.md). The page menu also provides copy and open-in-agent actions.

* [Documentation index](https://docs.cantina.security/llms.txt): links and descriptions for finding the appropriate guide.
* [Full documentation](https://docs.cantina.security/llms-full.txt): the combined documentation text for clients that need a larger reference.
* [Apex workflow index](https://apex.cantina.security/llms.txt): app guides, CLI, API, and agent connection instructions.

Use the canonical HTML page URL when citing a source. Read a benchmark's scope, date, methodology, and limitations before using its results in a product comparison.

## Connect an agent to Apex

Start with the [Apex agent connection guide](https://apex.cantina.security/docs/agents.md). It explains how to reuse an existing account, workspace, and scan, and how to verify the connection with a read-only request.

| Agent environment | Integration | Authentication |
| - | - | - |
| Coding agent with a local terminal and repository | [Apex CLI and local stdio MCP](https://apex.cantina.security/docs/apex-cli) | Apex device login |
| Supported hosted agent | [Hosted MCP](https://apex.cantina.security/docs/apex-api#hosted-mcp) | Supported OAuth connection or organization service key |
| CI job, server, or headless worker | [REST service API](https://apex.cantina.security/docs/apex-api) | Organization service key with the required scopes |

The hosted Apex tool server is `https://ai.cantina.xyz/mcp`. Read the current API guide for supported tools, authentication, scopes, and the OpenAPI specification. This documentation site's own MCP integration provides documentation search.

Connection setup and reading results do not start a scan. Starting a scan requires the user's requested scope, authorization for the targets, and the applicable access and credits. Store credentials in the client's secret storage or environment variables.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.