AWS Cloud Intelligence
Connect a customer-owned AWS account with a read-only cross-account role. AntOps never requests access keys and never changes AWS resources.
Open guideSELF-SERVICE GUIDES
Set up AntOps with clear operational boundaries.
Use these guides to complete a supported connection or integration without sending credentials to AntOps support.Azure Cloud Intelligence
Delegate a customer-owned Azure subscription or resource group through Azure Lighthouse with the built-in Reader role only.
Open guideChange Risk with GitHub Actions
Run deterministic analysis for selected static files from a pull request. AntOps does not run Docker builds, start containers or apply Terraform.
Open guideDockerfile Change Risk
Use Change Risk to inspect selected Dockerfile and compose configuration changes without executing their contents.
Open guideWorkspace API keys
Create a named workspace key only when a programmatic integration needs it, then store it in the destination’s secret manager.
Open guideGitHub App Change Risk
Connect selected repositories to deterministic Change Risk checks without granting repository administration, Actions, secrets or organization-member access.
Open guideSlack delivery
Deliver AntOps notifications to a Slack incoming webhook you control.
Open guideSigned Webhooks
Deliver real AntOps events to a public HTTPS receiver with a destination-specific signing secret.
Open guideAntOps MCP
Use the published bounded stdio MCP server from a local MCP client with a workspace API key.
Open guideAntOps CLI
Use the published AntOps command-line client with a workspace API key kept outside command history and source control.
Open guideAntOps Python SDK
Call the production API from Python through the published client and a workspace API key.
Open guideAntOps TypeScript SDK
Call the production API from TypeScript through the published client and a workspace API key.
Open guidePrivate Documents
Workspace owners can upload an extractable text-layer PDF or UTF-8 text file in AntOps, review deterministic masked findings, and create a sanitized text derivative on eligible plans. A server-side API path remains available for programmatic workflows.
Open guide