# Enclavia

> Documentation for Enclavia — running Docker images inside attested enclaves with end-to-end encryption from the browser. Public beta.

Covers installing the `enclavia` CLI, authenticating, pushing images to the per-user registry, creating enclaves, and connecting to them with the encrypted client library. The complete rendered corpus (every page in one file) is published at https://docs.enclavia.io/llms-full.txt.

## Table of Contents

### Getting started

- [Overview](https://docs.enclavia.io/index.md): What Enclavia is, the components (CLI, client SDK, backend API, MCP server), and the beta hostnames
- [Install the CLI](https://docs.enclavia.io/install.md): Install the enclavia CLI with cargo install, Nix, or from source
- [Authenticate](https://docs.enclavia.io/auth.md): OAuth 2.1 (PKCE) login flow, credential storage, and headless/CI authentication
- [Deploy in one command](https://docs.enclavia.io/deploy.md): enclavia deploy: create the enclave, push the image, and follow the build in one command
- [Create an enclave](https://docs.enclavia.io/create.md): Flags, create-then-push mechanics, storage, upgradability, and status meanings
- [Deploy on Enclavia button](https://docs.enclavia.io/deploy-button.md): One-click deploy badge for READMEs, driven by a manifest URL committed to your repo
- [Push an image](https://docs.enclavia.io/push.md): Tag and push a Docker image into the per-enclave registry repo; enclave-id grammar, pushing from CI
- [Connect from a client](https://docs.enclavia.io/connect.md): Rust, TypeScript (WASM), and Dart client SDKs: attestation verification, PCR pinning, and reconnect handling
- [Connect an AI agent with the MCP server](https://docs.enclavia.io/mcp.md): Hosted MCP server setup for Claude, ChatGPT, Cursor, Codex CLI, and other MCP clients
- [Drive enclavia from a local AI agent (CLI skill)](https://docs.enclavia.io/agent-skill.md): Drive the CLI from a local agent: the --json contract, the skill file, headless auth

### Networking

- [Outbound network access (egress allowlist)](https://docs.enclavia.io/egress.md): Outbound allowlist (hostnames, IPv4 literals, CIDRs) baked into the measured enclave image
- [Hosted HTTPS proxy](https://docs.enclavia.io/proxy.md): Stable per-enclave HTTPS/WebSocket URL with proxy-side attestation: trust model and worked examples
- [Self-host the proxy](https://docs.enclavia.io/self-host-proxy.md): Run the pingora-enclavia attested proxy yourself: NixOS module, Docker, target config

### Configuration

- [Per-enclave secrets](https://docs.enclavia.io/secrets.md): Encrypted environment-variable secrets injected at enclave boot: CLI and dashboard usage, limits

### Examples

- [Sample apps](https://docs.enclavia.io/samples.md): Runnable sample apps that walk the create, push, connect flow end to end

### Upgrades

- [Staged deployments and the upgrade chain](https://docs.enclavia.io/upgrades.md): Staged deployments for upgradable enclaves: genesis, staging, confirm, minimum delay, revoke, the upgrade chain
- [Control-key custody: managed vs self-hosted](https://docs.enclavia.io/custody.md): Who holds the upgrade control key: managed custody vs self-hosted (YubiKey), and the tradeoffs

### Verify

- [Reproduce an enclave's build](https://docs.enclavia.io/reproduce.md): Rebuild an enclave image locally and compare PCRs against the recorded build