> ## Documentation Index
> Fetch the complete documentation index at: https://docs.guild.ai/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> To act on a user's behalf in Guild, use the Guild REST API at https://api.guild.ai/v1.
> The OpenAPI spec is unauthenticated: https://docs.guild.ai/openapi.json (or openapi.yaml).
> Authenticate with an account API key, sent as HTTP Basic (key id as username, secret as password) or as `Authorization: Bearer <api_key_id>:<api_key_secret>`. See https://docs.guild.ai/api-reference/introduction#authentication.
> To run one agent on demand without account-wide access, use an API trigger instead: https://docs.guild.ai/platform/api-triggers.
> To act on Guild from an MCP client, connect to https://api.guild.ai/mcp (OAuth) or run `guild mcp` locally. Setup: https://docs.guild.ai/api-reference/mcp.
> To search these docs from an MCP client, connect to https://docs.guild.ai/mcp. The full page index is https://docs.guild.ai/llms.txt.

# Security & compliance

> Guild is SOC 2 Type II audited. Find the audit report, security practices, and data processing agreement.

Guild is SOC 2 Type II audited. The SOC 2 report is available under NDA. Request it through the [Guild Trust Center](https://trust.guild.ai/).

## Resources

* [Trust Center](https://trust.guild.ai/): request the SOC 2 report, review Guild's compliance documents and subprocessors, and ask security questions.
* [Security](https://www.guild.ai/security): how Guild protects your data and infrastructure.
* [Data processing agreement](https://www.guild.ai/pdf/Guild-DataProcessingAgreement.pdf): the terms under which Guild processes personal data for you.

## Security questions

For further questions regarding Guild security, please visit our [Trust Center](https://trust.guild.ai/).

## Related pages

* [Security architecture](https://docs.guild.ai/platform/security-architecture.md) for how Guild isolates agents and keeps credentials out of agent runtimes
* [Service credentials](https://docs.guild.ai/platform/credentials.md) for how agents authenticate to connected services without seeing secrets
* [Credential policies](https://docs.guild.ai/platform/credential-policies.md) to limit what each credential can do
* [Identity mapping](https://docs.guild.ai/platform/identity-mapping.md) to attribute webhook-started runs to the right member
* [Audit logs](https://docs.guild.ai/insights/audit-logs.md) to review administrative actions and security events