# LightHouse Docs > Documentation for LightHouse and the Atlantic Agentic Engine, by Atlantic Agentic Labs: how they work, how to connect them to your estate, and what they do with your data. Every page is also served as Markdown: add `.md` to its address (https://docs.atlanticagenticlabs.com/start/quickstart.md). Every page in one file: https://docs.atlanticagenticlabs.com/llms-full.txt. Pages marked (draft) are still being written. Anything not built yet is marked Coming, with no date. ## LightHouse documentation - [LightHouse documentation](https://docs.atlanticagenticlabs.com/index.md): How LightHouse and the Atlantic Agentic Engine work, how to connect them to your estate, and what they do with your data. ## Start here - [What LightHouse is](https://docs.atlanticagenticlabs.com/start.md): LightHouse manages your agents, models, approvals, access and billing, on the Atlantic Agentic Engine, and reports on them in six areas. - [Quickstart](https://docs.atlanticagenticlabs.com/start/quickstart.md): From sign-in to a working agent in ten minutes. ## Concepts - [Concepts](https://docs.atlanticagenticlabs.com/concepts.md): The ideas LightHouse and the engine are built from, and how they fit together. - [Tenants](https://docs.atlanticagenticlabs.com/concepts/tenants.md): A tenant is one client: its own host, its own data, isolated by row-level security. - [Agents](https://docs.atlanticagenticlabs.com/concepts/agents.md): An agent is a versioned card: its job, its model, its tools, its caps and its approvals. - [Handlers](https://docs.atlanticagenticlabs.com/concepts/handlers.md): Handlers are the people who sign off, pause and command agents. - [Knowledge bases](https://docs.atlanticagenticlabs.com/concepts/knowledge-bases.md): Your content, indexed in your own account and read in place. - [Evidence](https://docs.atlanticagenticlabs.com/concepts/evidence.md): Every answer carries the evidence it was grounded in. - [Approvals](https://docs.atlanticagenticlabs.com/concepts/approvals.md): Sign-offs are made by people in LightHouse, never by an agent or a key. - [Runs](https://docs.atlanticagenticlabs.com/concepts/runs.md): A run is one execution of an agent: its steps, calls, cost and outcome. - [The gateway](https://docs.atlanticagenticlabs.com/concepts/gateway.md): Every model call goes through the gateway, where caps, permissions and the tool gate are enforced in code. - [Deployment profiles](https://docs.atlanticagenticlabs.com/concepts/deployment-profiles.md): Ephemeral or always-on: how the engine's infrastructure runs, and what each costs. - [The telemetry contract](https://docs.atlanticagenticlabs.com/concepts/telemetry-contract.md): What crosses from your account to LightHouse: operational telemetry, counts and timings, never content. ## Connect your estate - [Connect your estate](https://docs.atlanticagenticlabs.com/connect.md): Every connector, the three ways to connect it, the read-only scopes it asks for, and what it indexes. - [GitHub](https://docs.atlanticagenticlabs.com/connect/github.md): Connect GitHub to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [GitLab](https://docs.atlanticagenticlabs.com/connect/gitlab.md): Connect GitLab to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Datadog](https://docs.atlanticagenticlabs.com/connect/datadog.md): Connect Datadog to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [SharePoint](https://docs.atlanticagenticlabs.com/connect/sharepoint.md): Connect SharePoint to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Google Drive](https://docs.atlanticagenticlabs.com/connect/google-drive.md): Connect Google Drive to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Amazon S3](https://docs.atlanticagenticlabs.com/connect/s3.md): Connect Amazon S3 to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Confluence](https://docs.atlanticagenticlabs.com/connect/confluence.md): Connect Confluence to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Jira](https://docs.atlanticagenticlabs.com/connect/jira.md): Connect Jira to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Salesforce](https://docs.atlanticagenticlabs.com/connect/salesforce.md): Connect Salesforce to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [ServiceNow](https://docs.atlanticagenticlabs.com/connect/servicenow.md): Connect ServiceNow to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Slack](https://docs.atlanticagenticlabs.com/connect/slack.md): Connect Slack to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Microsoft Teams](https://docs.atlanticagenticlabs.com/connect/teams.md): Connect Microsoft Teams to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [PostgreSQL](https://docs.atlanticagenticlabs.com/connect/postgres.md): Connect PostgreSQL to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Snowflake](https://docs.atlanticagenticlabs.com/connect/snowflake.md): Connect Snowflake to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. - [Upload](https://docs.atlanticagenticlabs.com/connect/upload.md): Connect Upload to LightHouse: the ways to connect, the read-only scopes, where the credential is held, and what is indexed. ## Clouds - [Clouds](https://docs.atlanticagenticlabs.com/clouds.md): Where the engine runs: your AWS, Azure or Google Cloud account, your own servers, or Atlantic-hosted. - [AWS](https://docs.atlanticagenticlabs.com/clouds/aws.md) (draft): Run the Atlantic Agentic Engine on AWS: the one-click stack, what it creates, the permissions it takes, regions, and deployment profiles. - [Azure](https://docs.atlanticagenticlabs.com/clouds/azure.md) (draft): Run the Atlantic Agentic Engine on Azure: the one-click stack, what it creates, the permissions it takes, regions, and deployment profiles. - [Google Cloud](https://docs.atlanticagenticlabs.com/clouds/google-cloud.md) (draft): Run the Atlantic Agentic Engine on Google Cloud: the one-click stack, what it creates, the permissions it takes, regions, and deployment profiles. - [On-premises (Docker)](https://docs.atlanticagenticlabs.com/clouds/on-premises.md) (draft): Run the Atlantic Agentic Engine on On-premises (Docker): the one-click stack, what it creates, the permissions it takes, regions, and deployment profiles. - [Atlantic-hosted](https://docs.atlanticagenticlabs.com/clouds/atlantic-hosted.md): The engine run for you by Atlantic: what that means for your data, regions and access. ## Build agents - [Build agents](https://docs.atlanticagenticlabs.com/build.md): Three ways to build an agent: from the library, with the builder, or in code. - [From the library](https://docs.atlanticagenticlabs.com/build/library.md): Add a ready-made agent from the library to your tenant. - [With the builder](https://docs.atlanticagenticlabs.com/build/builder.md): Build an agent in LightHouse without writing code. - [In code](https://docs.atlanticagenticlabs.com/build/code.md): Write an agent against the engine, in Python. - [Evaluations](https://docs.atlanticagenticlabs.com/build/evaluations.md): How agents are evaluated before and after every release. - [Approvals](https://docs.atlanticagenticlabs.com/build/approvals.md): Putting a person in the loop: where an agent must ask, and how it is enforced. - [Versioning and rollback](https://docs.atlanticagenticlabs.com/build/versioning.md): Every agent is versioned; any release can be rolled back. - [The run map](https://docs.atlanticagenticlabs.com/build/run-map.md): See every step of a run: the model, the tools, the evidence, the cost and the sign-offs. ## Security - [Security](https://docs.atlanticagenticlabs.com/security.md): Every control: what it is, where it is enforced, and how you can verify it yourself. - [Architecture and trust boundary](https://docs.atlanticagenticlabs.com/security/architecture.md): What runs in your account, what runs in Atlantic's, and what crosses between them. - [API security](https://docs.atlanticagenticlabs.com/security/api.md): Authentication, roles, tenant isolation, rate limits, idempotency and audit for the LightHouse API. - [MCP security](https://docs.atlanticagenticlabs.com/security/mcp.md): How the hosted MCP endpoint is secured, and how prompt injection is handled. - [UI security](https://docs.atlanticagenticlabs.com/security/ui.md): The content security policy, headers, sessions and tests behind LightHouse's interface. - [Engine and gateway](https://docs.atlanticagenticlabs.com/security/engine.md): Spending caps, kill switches and permissions in code the model cannot reach. - [Supply chain](https://docs.atlanticagenticlabs.com/security/supply-chain.md): Scanning in every pipeline and every commit, and signed telemetry. - [Verify it yourself](https://docs.atlanticagenticlabs.com/security/verify.md): What you can test from outside, what we will show under NDA, and what the red-team suite covers. ## Data sovereignty - [Data sovereignty](https://docs.atlanticagenticlabs.com/data-sovereignty.md): Your content stays in your account and is read in place. Export to Atlantic is opt-in and off by default. - [Where everything lives](https://docs.atlanticagenticlabs.com/data-sovereignty/where-everything-lives.md): Named per component: the models, the index, the documents, the logs, the telemetry, the backups. - [Regions](https://docs.atlanticagenticlabs.com/data-sovereignty/regions.md): Choosing a region, what is pinned to it, and the inference geography of each model path. - [Residency by cloud](https://docs.atlanticagenticlabs.com/data-sovereignty/residency-by-cloud.md): What AWS, Azure, Google Cloud and on-premises each allow, and what Atlantic-hosted means. - [Who can see what](https://docs.atlanticagenticlabs.com/data-sovereignty/access.md): Atlantic staff access, break-glass, and how both are audited. - [Leaving](https://docs.atlanticagenticlabs.com/data-sovereignty/leaving.md): Export, deletion, and what remains. - [Legal](https://docs.atlanticagenticlabs.com/data-sovereignty/legal.md): The sub-processor list, the DPA and transfer mechanisms. ## Cost and token optimisation - [Cost and token optimisation](https://docs.atlanticagenticlabs.com/cost.md): How cost is measured, how every saving is calculated, and how to reproduce the figure yourself. - [What is measured](https://docs.atlanticagenticlabs.com/cost/what-is-measured.md): Input, output, cached and reasoning tokens per call, agent, run and team, in the provider's own currency. - [How a saving is calculated](https://docs.atlanticagenticlabs.com/cost/savings.md): Each lever's formula and the baseline it is measured against. - [Reproduce the figure](https://docs.atlanticagenticlabs.com/cost/reproduce.md): Recompute any saving from your own data, with the queries and the API call that returns it. - [Why every figure says estimated](https://docs.atlanticagenticlabs.com/cost/estimated.md): What makes a saving an estimate, and what would make it exact. - [What to do about it](https://docs.atlanticagenticlabs.com/cost/levers.md): The levers in order of effect, and the page in LightHouse where each is set. - [The Token Value Benchmark](https://docs.atlanticagenticlabs.com/cost/token-value-benchmark.md): How do I know what a token is worth on my work? The standard benchmark agent in every install. ## The model router - [The model router](https://docs.atlanticagenticlabs.com/router.md): The router picks the cheapest model that meets the quality bar for the job, not the cheapest model. - [Inputs](https://docs.atlanticagenticlabs.com/router/inputs.md): What the router weighs: task class, evidence scores, context, latency, residency, availability, allow list and price. - [A decision, worked](https://docs.atlanticagenticlabs.com/router/decision.md): A real routing decision with real numbers: the candidates, why each was kept or dropped, and what it saved. - [Escalation](https://docs.atlanticagenticlabs.com/router/escalation.md): When a cheap model's answer fails the bar: how escalation works and what it costs. - [How a model earns its scores](https://docs.atlanticagenticlabs.com/router/evidence.md): How scores are measured, and how to run the evaluations on your own data. - [Control](https://docs.atlanticagenticlabs.com/router/control.md): Pin a model, exclude one, and read the router's explanation of every choice. ## API - [The LightHouse API](https://docs.atlanticagenticlabs.com/api.md): LightHouse's HTTP API: your tenant's host, authentication, conventions, and the generated reference. - [Authentication](https://docs.atlanticagenticlabs.com/api/authentication.md): A person's session through your identity provider, or a machine key with your Access service token. - [Roles](https://docs.atlanticagenticlabs.com/api/roles.md): viewer, content_viewer, handler, client_admin: what each may do. - [Pagination](https://docs.atlanticagenticlabs.com/api/pagination.md): Cursors, limits and ordering. - [Errors](https://docs.atlanticagenticlabs.com/api/errors.md): Every refusal is {error, message} with a fixed error code. - [Rate limits](https://docs.atlanticagenticlabs.com/api/rate-limits.md): The limits per key and per tenant, and the headers that report them. - [Idempotency](https://docs.atlanticagenticlabs.com/api/idempotency.md): Making writes safe to retry. - [Webhooks](https://docs.atlanticagenticlabs.com/api/webhooks.md): Events LightHouse can send to you, and how to verify them. ## API: reference - [API reference](https://docs.atlanticagenticlabs.com/api/reference.md): Every route of the LightHouse API (152 operations), generated from the control plane's OpenAPI document. - [Access and keys](https://docs.atlanticagenticlabs.com/api/reference/access-and-keys.md): The Access and keys routes of the LightHouse API: 6 operations, generated from the OpenAPI document. - [Assistant](https://docs.atlanticagenticlabs.com/api/reference/assistant.md): The Assistant routes of the LightHouse API: 3 operations, generated from the OpenAPI document. - [Billing](https://docs.atlanticagenticlabs.com/api/reference/billing.md): The Billing routes of the LightHouse API: 34 operations, generated from the OpenAPI document. - [Branding](https://docs.atlanticagenticlabs.com/api/reference/branding.md): The Branding routes of the LightHouse API: 7 operations, generated from the OpenAPI document. - [Content in place](https://docs.atlanticagenticlabs.com/api/reference/content-in-place.md): The Content in place routes of the LightHouse API: 2 operations, generated from the OpenAPI document. - [Deployments](https://docs.atlanticagenticlabs.com/api/reference/deployments.md): The Deployments routes of the LightHouse API: 3 operations, generated from the OpenAPI document. - [Exports](https://docs.atlanticagenticlabs.com/api/reference/exports.md): The Exports routes of the LightHouse API: 3 operations, generated from the OpenAPI document. - [Handler commands](https://docs.atlanticagenticlabs.com/api/reference/handler-commands.md): The Handler commands routes of the LightHouse API: 8 operations, generated from the OpenAPI document. - [Marketplace](https://docs.atlanticagenticlabs.com/api/reference/marketplace.md): The Marketplace routes of the LightHouse API: 9 operations, generated from the OpenAPI document. - [People and preferences](https://docs.atlanticagenticlabs.com/api/reference/people-and-preferences.md): The People and preferences routes of the LightHouse API: 15 operations, generated from the OpenAPI document. - [Read](https://docs.atlanticagenticlabs.com/api/reference/read.md): The Read routes of the LightHouse API: 55 operations, generated from the OpenAPI document. - [Savings and caching](https://docs.atlanticagenticlabs.com/api/reference/savings-and-caching.md): The Savings and caching routes of the LightHouse API: 7 operations, generated from the OpenAPI document. ## MCP - [The MCP server](https://docs.atlanticagenticlabs.com/mcp.md): LightHouse's reads as Model Context Protocol tools, for Claude, Cursor, Codex and any MCP client. - [Connect a client](https://docs.atlanticagenticlabs.com/mcp/connect.md): Connect Claude, Cursor or Codex to the hosted MCP endpoint in one line. ## MCP: tools - [MCP tools](https://docs.atlanticagenticlabs.com/mcp/tools.md): Every tool the LightHouse MCP server offers (44), with the role each needs, generated from the server itself. - [active_runs](https://docs.atlanticagenticlabs.com/mcp/tools/active-runs.md): Runs in progress now (contract 1.12): - [agent_map](https://docs.atlanticagenticlabs.com/mcp/tools/agent-map.md): The agent map, read-only. - [agent](https://docs.atlanticagenticlabs.com/mcp/tools/agent.md): One agent: - [agents](https://docs.atlanticagenticlabs.com/mcp/tools/agents.md): Your agents with live state (running, idle, failing, paused, awaiting sign-off), autonomy, last run, runs and cost this month. - [attention](https://docs.atlanticagenticlabs.com/mcp/tools/attention.md): The attention queue, read-only: - [billing_summary](https://docs.atlanticagenticlabs.com/mcp/tools/billing-summary.md): This month's model spend (direct and through AAL), the managed charge at the price card, the prepaid credit balance, spend by provider connection, and limit alerts. - [billing_usage](https://docs.atlanticagenticlabs.com/mcp/tools/billing-usage.md): Model spend for a month (YYYY-MM), grouped by day, model, pack, agent or connection, with the managed charge. - [caching](https://docs.atlanticagenticlabs.com/mcp/tools/caching.md): Prompt caching by day, model, agent, pack, deployment or provider: - [command_history](https://docs.atlanticagenticlabs.com/mcp/tools/command-history.md): Handler commands, newest first, for one agent (`:`) or the whole organisation, optionally by status. - [command_status](https://docs.atlanticagenticlabs.com/mcp/tools/command-status.md): One handler command (pause, cap, pre-approval, approval, release) with its status history, by command id. - [commercial_terms](https://docs.atlanticagenticlabs.com/mcp/tools/commercial-terms.md): Your commercial terms with AAL (Billing → Terms): - [connection](https://docs.atlanticagenticlabs.com/mcp/tools/connection.md): One connection by its id (`cx-...`): - [connectors](https://docs.atlanticagenticlabs.com/mcp/tools/connectors.md): The connector catalogue and this organisation's connections: - [deployment_profiles](https://docs.atlanticagenticlabs.com/mcp/tools/deployment-profiles.md): Each deployment's profile (contract 1.13): - [deployment_wakes](https://docs.atlanticagenticlabs.com/mcp/tools/deployment-wakes.md): How long deployments took to wake (contract 1.13): - [evals](https://docs.atlanticagenticlabs.com/mcp/tools/evals.md): Evaluation results, filtered by pack and family. - [evidence](https://docs.atlanticagenticlabs.com/mcp/tools/evidence.md): Evidence scores (contract 1.14): - [forecast](https://docs.atlanticagenticlabs.com/mcp/tools/forecast.md): Projected month-end spend from the run rate and weekday pattern, with a likely range, against the cap. - [health](https://docs.atlanticagenticlabs.com/mcp/tools/health.md): Latest health of each component and connector. - [kills](https://docs.atlanticagenticlabs.com/mcp/tools/kills.md): Kill-switch stops and revivals, newest first, and how many are in force. - [knowledge_base](https://docs.atlanticagenticlabs.com/mcp/tools/knowledge-base.md): One knowledge base by its index id (contract 1.14): - [knowledge_bases](https://docs.atlanticagenticlabs.com/mcp/tools/knowledge-bases.md): Knowledge bases (contract 1.14): - [knowledge](https://docs.atlanticagenticlabs.com/mcp/tools/knowledge.md): Knowledge records (what was asked, read and cited), read in place from your own account. - [library](https://docs.atlanticagenticlabs.com/mcp/tools/library.md): The agent library: - [limits](https://docs.atlanticagenticlabs.com/mcp/tools/limits.md): Spend limits (tenant, pack, agent, person; daily or monthly): - [locale](https://docs.atlanticagenticlabs.com/mcp/tools/locale.md): Your effective time zone, display currency, date and number formats and week start: - [market_usage](https://docs.atlanticagenticlabs.com/mcp/tools/market-usage.md): Your marketplace listings and their review state, and this month's use of them by subscriber (a pseudonym). - [model_picker](https://docs.atlanticagenticlabs.com/mcp/tools/model-picker.md): Recommended models per use case, ranked by evidence, filtered by the chosen cloud and the data-residency rule, with the estimated routing saving against the top model and which models were excluded and why. - [models](https://docs.atlanticagenticlabs.com/mcp/tools/models.md): The models your deployments may call: - [preapprovals](https://docs.atlanticagenticlabs.com/mcp/tools/preapprovals.md): Standing pre-approvals: - [providers](https://docs.atlanticagenticlabs.com/mcp/tools/providers.md): Model provider connections (direct or through AAL), their health and the models each exposes. - [rate_limits](https://docs.atlanticagenticlabs.com/mcp/tools/rate-limits.md): Peak-minute utilisation of requests, input tokens and output tokens per minute by deployment and model, against the provider quota and the gateway's pacing limit, with throttles and pacing waits. - [recommendations](https://docs.atlanticagenticlabs.com/mcp/tools/recommendations.md): Cheaper-model moves backed by evaluation parity, and waste flags per agent, with their evidence. - [refusals](https://docs.atlanticagenticlabs.com/mcp/tools/refusals.md): Refused model calls by reason, and screening counts. - [report](https://docs.atlanticagenticlabs.com/mcp/tools/report.md): The latest evidence or value report, or the one for a month (YYYY-MM). - [retrieval_savings](https://docs.atlanticagenticlabs.com/mcp/tools/retrieval-savings.md): Estimated saving of retrieval against context stuffing (contract 1.7, stable): - [retrieval](https://docs.atlanticagenticlabs.com/mcp/tools/retrieval.md): Retrieval as a measured outcome (contract 1.7): - [run_map](https://docs.atlanticagenticlabs.com/mcp/tools/run-map.md): One run as a tree of its steps and sub-agents (contract 1.12), each node with tokens, cost, duration, status, model and retries; the critical path, the most expensive and the slowest node, and totals. - [run_targets](https://docs.atlanticagenticlabs.com/mcp/tools/run-targets.md): Where this organisation's agents run: - [run](https://docs.atlanticagenticlabs.com/mcp/tools/run.md): One run by its run_id_hash, whenever it started. - [runs](https://docs.atlanticagenticlabs.com/mcp/tools/runs.md): Runs, newest first, filtered by pack, card, status and start time. - [savings](https://docs.atlanticagenticlabs.com/mcp/tools/savings.md): Savings. - [setup](https://docs.atlanticagenticlabs.com/mcp/tools/setup.md): The setup mission: - [usage](https://docs.atlanticagenticlabs.com/mcp/tools/usage.md): Model usage, tokens and cost, grouped by model, pack, task or day. ## CLI - [The CLI](https://docs.atlanticagenticlabs.com/cli.md): The LightHouse command line: install, sign in, and every command. ## SDKs - [SDKs](https://docs.atlanticagenticlabs.com/sdks.md): Python and TypeScript clients, generated from the OpenAPI document. - [Python](https://docs.atlanticagenticlabs.com/sdks/python.md): The Python client for the LightHouse API. - [TypeScript](https://docs.atlanticagenticlabs.com/sdks/typescript.md): The TypeScript client for the LightHouse API. ## Operations - [Operations](https://docs.atlanticagenticlabs.com/operations.md): Running LightHouse and the engine day to day. - [Run books](https://docs.atlanticagenticlabs.com/operations/runbooks.md): What to do when something goes wrong, step by step. - [Health](https://docs.atlanticagenticlabs.com/operations/health.md): The health checks, and what each reports. - [Limits and alerts](https://docs.atlanticagenticlabs.com/operations/limits-and-alerts.md): Spending caps, rate limits, and the alerts that fire before a limit is hit. - [Suspension](https://docs.atlanticagenticlabs.com/operations/suspension.md): Pausing an agent, stopping everything, and what suspension of a tenant means. - [Upgrades](https://docs.atlanticagenticlabs.com/operations/upgrades.md): How releases reach your deployment, and how to upgrade the stack. - [Support](https://docs.atlanticagenticlabs.com/operations/support.md): How to get help, and what to send. ## Trust - [Trust](https://docs.atlanticagenticlabs.com/trust.md): Sub-processors, the security controls summary, status and change notices. - [Sub-processors](https://docs.atlanticagenticlabs.com/trust/subprocessors.md): Every sub-processor, what it does, and where. - [Security controls summary](https://docs.atlanticagenticlabs.com/trust/security-controls.md): The controls in one table, linking to the detail. - [Status](https://docs.atlanticagenticlabs.com/trust/status.md): Where to see the service's status. - [Change notices](https://docs.atlanticagenticlabs.com/trust/change-notices.md): How Atlantic tells you before something changes. ## Changelog - [Changelog](https://docs.atlanticagenticlabs.com/changelog.md): What changed in each release of LightHouse and the engine. ## Other - [Versions](https://docs.atlanticagenticlabs.com/versions.md): The releases these docs describe, and where to find the docs for an earlier one.