# Tahr Documentation

> Documentation for setting up applications, running assessments, and reviewing findings in Tahr.

Full documentation: [Complete public documentation](https://docs.tahr.one/llms-full.txt).

## Start here

- [Getting Started](https://docs.tahr.one/getting-started.md): Learn the basic Tahr workflow from organization setup to your first reviewed findings.
- [Security Notices](https://docs.tahr.one/security-notices.md): Review the environment, account, secret, scope, and integration safeguards required before running a Tahr assessment.

## Profile

- [Profile and Notifications](https://docs.tahr.one/profile.md): Manage your personal account settings, account security, and organization notification preferences.
- [MCP Access](https://docs.tahr.one/mcp-access.md): Connect an approved MCP client to Tahr using OAuth or a personal access token.

## Applications

- [Applications](https://docs.tahr.one/applications.md): Create and manage the application records Tahr uses for security assessments.
- [Portfolios](https://docs.tahr.one/portfolios.md): Group applications by product, team, environment, or business unit.
- [Application Setup](https://docs.tahr.one/application-setup.md): Complete the target, access, authentication, and readiness steps for a Tahr application.
- [Authenticated Testing](https://docs.tahr.one/authenticated-testing.md): Configure login details, test users, roles, tenants, and second-factor handling for authenticated testing.

## Assess

- [Running Assessments](https://docs.tahr.one/running-assessments.md): Start assessments manually, organize repeatable routines, use schedules, and connect CI/CD triggers.
- [Routines](https://docs.tahr.one/routines.md): Create repeatable multi-step assessment workflows for an application.

## Review results

- [Findings](https://docs.tahr.one/findings.md): Review vulnerabilities, authorization issues, attack paths, recon observations, and source-code findings in Tahr.
- [Assistant (Coming Soon)](https://docs.tahr.one/assistant.md): Learn about the planned Assistant experience and use current Tahr review workspaces in the meantime.
- [Threat Modeling](https://docs.tahr.one/threat-modeling.md): Assess repository and application context to understand threats, attack paths, and recommended mitigations.
- [Reports](https://docs.tahr.one/reports.md): Generate and download assessment reports for completed Tahr assessments.

## Administration

- [Administration](https://docs.tahr.one/organization-settings.md): Use Administration to manage your organization profile, domains, members, roles, and shared assessment settings.
- [Billing](https://docs.tahr.one/billing.md): Review plans, credits, payment details, invoices, and reserved IP and SMS add-ons in Tahr.
- [Integrations](https://docs.tahr.one/integrations.md): Connect repositories and ticketing destinations used by Tahr workflows.

## Help

- [Glossary](https://docs.tahr.one/glossary.md): Common Tahr terms used across applications, assessments, routines, and findings.
- [Troubleshooting](https://docs.tahr.one/troubleshooting.md): Resolve common setup blockers, assessment launch issues, authentication problems, and finding workflow questions.