# Midplane

## Docs

- [Connect your agent](https://midplane.ai/docs/agents/overview.md): Point any MCP client at Midplane's single endpoint, sign in once, and grant the agent least-privilege access.
- [Cloud vs self-host](https://midplane.ai/docs/cloud-vs-self-host.md): Both run the same open-core engine and control plane, so enforcement is identical. Here's how to choose who hosts it.
- [Midplane Cloud](https://midplane.ai/docs/cloud/overview.md): Hosted Midplane: the same open-source engine, plus managed credentials, a searchable audit log, and a dashboard for policy.
- [Plans & billing](https://midplane.ai/docs/cloud/plans.md): Midplane Cloud plans, the limits on each tier, and how flat per-org billing works.
- [Projects & access](https://midplane.ai/docs/cloud/projects.md): A Cloud project is one hosted MCP endpoint fronting your databases.
- [How Cloud secures your data](https://midplane.ai/docs/cloud/security.md): How Cloud protects your database credentials and agent tokens, and isolates customers and regions.
- [The audit trail](https://midplane.ai/docs/concepts/audit-trail.md): Every query Midplane sees becomes a durable, append-only record — including the ones it denies — written before anything runs.
- [Column masking](https://midplane.ai/docs/concepts/masking.md): Redact sensitive column values in query results — per column, on top of read access, and fail-closed.
- [Table access and guardrails](https://midplane.ai/docs/concepts/table-access.md): How Midplane decides what an agent can read, write, and touch — the three access levels, name resolution, and the guardrails that catch dangerous shapes.
- [How Midplane works](https://midplane.ai/docs/how-it-works.md): How every query flows through Midplane's parse → policy → audit → execute pipeline.
- [What is Midplane?](https://midplane.ai/docs/index.md): A safety layer between AI coding agents and your Postgres database. Parse, policy, audit.
- [Writing policies](https://midplane.ai/docs/policies/overview.md): Grant the exact reads and writes an agent needs — one YAML file (self-host) or the dashboard grid (Cloud), same model.
- [Quickstart](https://midplane.ai/docs/quickstart.md): Connect a database and get a protected MCP endpoint for your agent — hosted on Cloud, or self-hosted with one Docker command.
- [Audit events](https://midplane.ai/docs/reference/audit-events.md): The audit event types, the common columns, and the per-event payload shapes Midplane writes for every query.
- [CLI reference](https://midplane.ai/docs/reference/cli.md): The midplane binary: server, setup wizard, query, doctor, policy authoring, and the audit log reader, with every flag and exit code.
- [Denial reasons](https://midplane.ai/docs/reference/denial-reasons.md): A catalog of Midplane's denial rules, the messages they produce, and what to change to resolve each one.
- [Environment variables](https://midplane.ai/docs/reference/environment-variables.md): Every environment variable the self-host Midplane engine reads.
- [MCP tools & HTTP endpoints](https://midplane.ai/docs/reference/mcp-tools.md): What Midplane exposes: the MCP tools your agent calls (query, list_tables, describe_table, list_databases), and the operational HTTP routes the self-host container serves.
- [Policy file schema](https://midplane.ai/docs/reference/policy-schema.md): Every key in the MIDPLANE_POLICY_FILE YAML: table_access, guardrails, column_masks, and the multi-database databases[] block.
- [Changelog](https://midplane.ai/docs/resources/changelog.md): Version history for the Midplane open-source engine, newest first.
- [Troubleshooting](https://midplane.ai/docs/resources/troubleshooting.md): Fixes for the most common Midplane issues — denied queries, agent connection problems, and boot failures.
- [Adversarial corpus](https://midplane.ai/docs/security/adversarial-corpus.md): The repository of bypass attempts that must stay denied and legitimate queries that must stay allowed — the contract the policy engine ships against.
- [Threat model](https://midplane.ai/docs/security/threat-model.md): An honest account of what Midplane's enforcement covers — and what it doesn't.
- [Deploy](https://midplane.ai/docs/self-host/deploy.md): Run the Midplane control plane yourself with Docker — the dashboard, projects, policy editor, and audit log on your own infrastructure.
- [Operations](https://midplane.ai/docs/self-host/operations.md): Take a self-hosted Midplane from a working install to production.

## Optional

- [Dashboard](https://app.midplane.ai)
- [GitHub](https://github.com/midplaneai/midplane)