# TheSpider Docs

> TheSpider Cloud docs: setup, the local agent, campaigns, triage, refine, PR gates, MCP, and the public API.

## Documentation Sets

- [TheSpider Docs](https://thespider.xyz/llms-full.txt): Complete TheSpider Cloud documentation: install and quickstart, coding-agent skills, MCP, campaigns, triage, the refine loop, PR gates, custom runners, data handling, the API, CLI JSON contracts, and on-prem evaluation.

## Docs

- [Introduction](https://thespider.xyz/raw/docs/getting-started/introduction.md): What TheSpider is, how a first audit works, and where to start
- [AI Setup Wizard](https://thespider.xyz/raw/docs/getting-started/ai-setup.md): Let a coding agent install TheSpider and run one bounded audit
- [Install the agent](https://thespider.xyz/raw/docs/getting-started/installation.md): Install the verified TheSpider agent on Linux, macOS, or Windows
- [Cloud quickstart](https://thespider.xyz/raw/docs/getting-started/quickstart.md): Bind a local model CLI and run one Security or Bugs slice
- [Connect over MCP](https://thespider.xyz/raw/docs/getting-started/mcp.md): Run audits from a coding agent without installing the local CLI
- [Pricing](https://thespider.xyz/raw/docs/getting-started/pricing.md): TheSpider Cloud and on-prem list prices
- [Configuration](https://thespider.xyz/raw/docs/guide/configuration.md): Where credentials live, and the small config file you commit
- [The agent](https://thespider.xyz/raw/docs/guide/agent.md): Commands for setup, audits, findings, the daemon, and PR gates
- [Campaigns](https://thespider.xyz/raw/docs/guide/campaigns.md): Full scans, PR incrementals, and targeted retests
- [Campaign cadence](https://thespider.xyz/raw/docs/guide/audit-workflows.md): When to run a full scan, an incremental, and a retest
- [Triage](https://thespider.xyz/raw/docs/guide/triage.md): Statuses, CLI triage, and what the PR gate still blocks on
- [PR gate](https://thespider.xyz/raw/docs/guide/pr-gate.md): Block merges without putting model credentials in CI
- [Data handling & privacy](https://thespider.xyz/raw/docs/guide/data-handling.md): What TheSpider receives, stores, scrubs, and does not upload
- [Author an audit methodology](https://thespider.xyz/raw/docs/guide/methodology.md): Buckets, passes, scopes, and prompt sections for a project
- [Configure a custom model runner](https://thespider.xyz/raw/docs/guide/custom-runner.md): Bind a built-in agent, your own agent, or a freeform command
- [Runner troubleshooting](https://thespider.xyz/raw/docs/guide/troubleshooting.md): Setup blockers, hash mismatches, oversized output, leases, and empty imports
- [Host an external execution agent](https://thespider.xyz/raw/docs/guide/external-agent.md): Claim a slice, run it, heartbeat, and post raw output from your own runner host
- [Refine](https://thespider.xyz/raw/docs/guide/refine.md): Let a local model fix findings, retest each one, and repeat until the backlog is clear
- [On-prem overview](https://thespider.xyz/raw/docs/deploy/onprem.md): When to run TheSpider on your own infrastructure
- [API reference](https://thespider.xyz/raw/docs/reference/api.md): The mounted TheSpider HTTP API, authentication, work loop, reads, and management routes
- [Concepts and glossary](https://thespider.xyz/raw/docs/reference/concepts.md): Short definitions for campaigns, slices, findings, and the rest
- [Runner contract](https://thespider.xyz/raw/docs/reference/runner-contract.md): Exact process, marker, output, timeout, and result-submission behavior for model runners
- [Findings export](https://thespider.xyz/raw/docs/reference/findings-export.md): Download filtered project findings with report, CWE, and file provenance
- [Agent CLI contracts](https://thespider.xyz/raw/docs/reference/agent-cli-json.md): Stable JSON envelope, exit codes, and markdown packet format for thespider-agent findings, wait, and refine
- [TheSpider Documentation](https://thespider.xyz/raw/docs.md): Run the coding agents you already use against a repo. Findings land in one dashboard. Your source stays on your machine.