# Igris Documentation

## Docs

- [Introduction](https://docs.igrisecurity.com/introduction.md): Igris is an AI security and governance platform — govern every MCP tool call, inspect every prompt, and observe every AI interaction.
- [Quickstart](https://docs.igrisecurity.com/quickstart.md): Go from zero to governed MCP tool calls in under 5 minutes.
- [Architecture](https://docs.igrisecurity.com/architecture.md): How Igris components fit together — API server, frontend, database, cache, auth, and proxy flow.
- [Authentication](https://docs.igrisecurity.com/authentication.md): Three auth methods: session cookies for the dashboard, API keys for programmatic access, and OAuth via GitHub or Google.
- [Connections](https://docs.igrisecurity.com/connect/connections.md): Store upstream MCP server credentials securely and route requests through Igris.
- [Supported Providers](https://docs.igrisecurity.com/connect/providers.md): The full list of LLM providers supported by the Igris gateway — 60 providers out of the box.
- [MCP Client Config](https://docs.igrisecurity.com/connect/mcp-config.md): Generate configs for Claude Desktop, Cursor, and any MCP client.
- [LLM Gateway](https://docs.igrisecurity.com/connect/llm-gateway.md): Route any LLM provider through Igris for audit, policies, and cost tracking in 5 minutes.
- [Policies](https://docs.igrisecurity.com/govern/policies.md): Define governance rules to allow, deny, alert, or redact MCP tool calls and LLM requests using glob patterns, conditions, and rate limits.
- [Guards](https://docs.igrisecurity.com/govern/guards.md): Token guards cap LLM request size before forwarding; content guards scan request and response content with Igris detectors.
- [Tool Calls](https://docs.igrisecurity.com/govern/tool-calls.md): Call MCP tools programmatically with the igris.mcp resource — initialize, listTools, and callTool over the gateway.
- [Sessions](https://docs.igrisecurity.com/govern/sessions.md): Agent sessions track tool call activity per organization and connection, with a kill switch for immediate control.
- [Anomaly Detection](https://docs.igrisecurity.com/govern/anomaly.md): Automatic detection of rate spikes and destructive tool call patterns, with per-type cooldowns and SSE broadcast.
- [Dashboard](https://docs.igrisecurity.com/monitor/dashboard.md): Real-time overview of MCP and LLM activity, security posture, and recent incidents across all connections.
- [Audit Trail](https://docs.igrisecurity.com/monitor/audit-trail.md): Searchable, filterable log of every LLM call, MCP tool call, and connection event — with archive restore for older data.
- [Incidents](https://docs.igrisecurity.com/monitor/incidents.md): Triage and track security incidents — policy denials, anomalies, and session events — in a unified queue.
- [LLM Cost](https://docs.igrisecurity.com/monitor/llm-cost.md): Spend analytics for every LLM request routed through the Igris gateway — broken down by model, connection, and time.
- [Real-Time Events](https://docs.igrisecurity.com/monitor/real-time-events.md): SSE endpoint for real-time dashboard updates with org-scoped tool call and anomaly events.
- [SDK Reference](https://docs.igrisecurity.com/reference/sdk.md): Complete reference for @igris-security/sdk — MCP governance and LLM gateway client.
- [API Reference](https://docs.igrisecurity.com/reference/api.md): REST API reference for the Igris management API.

## OpenAPI Specs

- [openapi](https://docs.igrisecurity.com/api-reference/openapi.json)