# Cantina Apex

> Security scans, findings, and fix verification for your codebase. Connect your coding agent to an existing workspace or plan a new scan.

## Start here

- [Agent connection guide](https://ai.cantina.xyz/docs/agents.md): Plain Markdown instructions for setup, device login, existing workspace selection, and reviewing completed scans. Setup does not start a new scan.
- [Trial onboarding](https://ai.cantina.xyz/skills/onboarding.md): Use only when the user supplies a Cantina trial code.

## Guides and reference

- [Docs](https://ai.cantina.xyz/docs): Apex documentation and copyable agent prompts.
- [Connect agent](https://ai.cantina.xyz/docs/agents): Connect a coding agent and review an existing scan.
- [Onboarding](https://ai.cantina.xyz/docs/onboarding): Connect code and prepare a first workspace.
- [Workspaces](https://ai.cantina.xyz/docs/workspaces): Manage workspace scope and history.
- [Scan manual](https://ai.cantina.xyz/docs/manual): Choose scan modes and plan security coverage.
- [Fix Review](https://ai.cantina.xyz/docs/fix-review): Prepare fixes and verify whether findings are resolved.
- [Scheduled scans](https://ai.cantina.xyz/docs/scheduled-scans): Set up recurring scans and Fix Review.
- [CLI](https://ai.cantina.xyz/docs/apex-cli): Local CLI commands, authentication, and MCP tools.
- [API](https://ai.cantina.xyz/docs/apex-api): Hosted MCP and REST integrations with service keys.

## Integration endpoints

- Local coding agents: install Apex CLI and register the apex-mcp stdio server; authenticate with device login.
- Hosted MCP: https://ai.cantina.xyz/mcp (Streamable HTTP, organization service key required).
- REST: https://ai.cantina.xyz/docs/apex-api (service key scopes and endpoint reference).