# Kindo Documentation

> Kindo is an AI-native enterprise platform for SecOps, DevOps, and ITOps — providing secure AI chat, autonomous agents, and governance controls. Available as SaaS or self-hosted.

Kindo documentation covers platform features, deployment guides (cloud and self-hosted), administration, security controls, API reference, and release notes. Content is organized into 7 sections: Start, Quickstarts, Features, Deploy & Operate, Admin & Security, API & Reference, Release Notes.

## Start

- [Start Here](https://docs.kindo.ai/start/): Get oriented with Kindo — understand the platform, its deployment models, and find your path.
- [What is Kindo?](https://docs.kindo.ai/start/what-is-kindo/): An overview of Kindo — the AI-powered enterprise security and governance platform.
- [Concepts and Terminology](https://docs.kindo.ai/start/concepts/): Key terms and concepts used throughout the Kindo platform documentation.
- [Use Cases](https://docs.kindo.ai/start/use-cases/): Common scenarios and workflows that Kindo addresses for SecOps, DevOps, and ITOps teams.

## Quickstarts

- [Quickstarts](https://docs.kindo.ai/quickstarts/): Guided walkthroughs to get up and running with Kindo quickly.
- [Getting Started with Kindo](https://docs.kindo.ai/quickstarts/getting-started/): Sign in, navigate the interface, and make your first AI-powered request.
- ["First Chat Experience"](https://docs.kindo.ai/quickstarts/first-chat/): "Start a conversation with AI models through the Kindo Terminal."
- ['Create Your First Agent'](https://docs.kindo.ai/quickstarts/first-agent/): 'Build and deploy an AI agent that automates a simple workflow.'
- ['Build Your First Workflow'](https://docs.kindo.ai/quickstarts/build-first-workflow/): 'Create a multi-step workflow agent that enriches and triages a security alert.'
- ['Use Memory'](https://docs.kindo.ai/quickstarts/memory/): 'Turn Memory on, ask Kindo to remember and forget facts, manage your stored memories, and verify recall in a fresh chat.'

## Features

- [Features](https://docs.kindo.ai/features/): Explore Kindo's product features — AI Chat, Agents, Integrations, Governance, and Memory.
- [Agents](https://docs.kindo.ai/features/agents/): Overview of Kindo Agents -- autonomous and semi-autonomous automations that execute workflows on behalf of users.
- [Creating and Managing Agents](https://docs.kindo.ai/features/creating-agents/): Step-by-step guide to creating, configuring, and managing agents in Kindo.
- [AI Chat](https://docs.kindo.ai/features/ai-chat/): 'Conversational AI with enterprise controls, model selection, and multi-modal support.'
- [Scheduled Agents](https://docs.kindo.ai/features/scheduled-agents/): How scheduled agents work in Kindo, including cron configuration, scaling limits, and best practices.
- [Model Configuration](https://docs.kindo.ai/features/models/): Configure and manage AI models in Self-Managed Kindo, including Unleash feature flags and global model management.
- [Integrations Setup](https://docs.kindo.ai/features/integrations/): Configure Nango authentication and MCP servers for Self-Managed Kindo integrations.
- [Governance and Controls](https://docs.kindo.ai/features/governance/): "Policies, guardrails, and compliance controls for AI usage across your organization."
- [Memory](https://docs.kindo.ai/features/memory/): 'Durable, user-controlled memory across conversations — User Memory for your chats, Agent Memory for agents.'
- [Secrets Vault](https://docs.kindo.ai/features/secrets-vault/): Store API keys and tokens securely and reference them in agent API Action Steps without exposing their values.

## Deploy & Operate

- [Deploy & Operate](https://docs.kindo.ai/deploy/): Everything a platform engineer needs to deploy and operate Self-Managed Kindo end-to-end.
- [Overview](https://docs.kindo.ai/deploy/overview/): What Self-Managed Kindo is, what ships vs. what you bring, and the tool that drives the process.
- [Plan & Provision Infrastructure](https://docs.kindo.ai/deploy/provision-infrastructure/): Decide sizing, bring the eleven components Kindo needs, plan DNS and firewall, then tick every box on the team-scoped prerequisites checklist before handing off to kindo-cli.
- [Prepare AI Models](https://docs.kindo.ai/deploy/prepare-ai-models/): Cloud API providers, self-hosted vLLM, and DeepHat — how models plug into the install contract.
- [Install with kindo-cli](https://docs.kindo.ai/deploy/install-with-kindo-cli/): Install the CLI, run the config wizard and preflight, then plan and apply the install steps.
- [Configure & Validate](https://docs.kindo.ai/deploy/configure-and-validate/): DNS, TLS, SSO, first admin, and the smoke test — from pods running to users logging in.
- [Observability Guide](https://docs.kindo.ai/deploy/observability/): ClickStack, the in-cluster observability stack — OTel Collector, ClickHouse, and HyperDX — and how to operate it.
- [Customize Branding (Whitelabel)](https://docs.kindo.ai/deploy/customize-branding/): Configure per-org app name, logo, favicon, disclaimers, and policy URLs via the CUSTOM_WHITELABEL feature flag.
- [Operate](https://docs.kindo.ai/deploy/operate/): CLI daily-drivers for Self-Managed Kindo — the commands operators touch most often.
- [Upgrade](https://docs.kindo.ai/deploy/upgrade/): kindo upgrade flow, reconstruction from legacy Makefile installs, MCP-only partial rebuild, and rollback.

## Admin & Security

- [Admin and Security](https://docs.kindo.ai/admin/): Identity, RBAC, governance, auditing, and tenant management for Kindo.
- [Single Sign-On (SSO) Setup](https://docs.kindo.ai/admin/sso/): Configure SSO for a Self-Managed Kindo organization via the app's self-serve Settings screen, plus the legacy SSOReady admin path.
- [SAML with Microsoft Entra ID](https://docs.kindo.ai/admin/sso-entra/): Configure a SAML connection between Microsoft Entra ID (formerly Azure Active Directory) and SSOReady for Kindo SSO.
- [SAML with Okta](https://docs.kindo.ai/admin/sso-okta/): Configure a SAML connection between Okta and SSOReady for Kindo SSO.
- [SAML with Google Workspace](https://docs.kindo.ai/admin/sso-google/): Configure a SAML connection between Google Workspace and SSOReady for Kindo SSO.
- [Security Controls](https://docs.kindo.ai/admin/security-controls/): Manage access control, audit logging, DLP, and sharing permissions in Kindo.
- [User Groups](https://docs.kindo.ai/admin/user-groups/): Organize users into groups to manage permissions, model access, DLP policies, and feature controls.
- [Enterprise Application Permissions](https://docs.kindo.ai/admin/enterprise-app-permissions/): Required permissions for Microsoft enterprise application registrations used by Kindo integrations.
- ["Tool Action Access Controls"](https://docs.kindo.ai/admin/rbac-tool-actions/): "Control which integrations and tool actions AI agents can perform, scoped by user group."
- [Integration Identity Isolation](https://docs.kindo.ai/admin/integration-trust-domains/): "Isolate integration identities for sensitive teams so one team's connected services are invisible and inaccessible to the rest of the organization."

## API & Reference

- [Reference](https://docs.kindo.ai/reference/): Glossary, prompt-engineering tips, and agent-construction guidance. For the public REST APIs, see the API section.
- [Prompt Engineering Quick Reference](https://docs.kindo.ai/reference/prompt-engineering/): Practical prompt and knowledge-store guidance for building consistent, actionable Kindo agents.
- [Agent Construction Best Practices](https://docs.kindo.ai/reference/agent-best-practices/): Design guidance for building maintainable Kindo agents from workshop prototypes to production workflows.

## Release Notes

- [Release Notes](https://docs.kindo.ai/release-notes/): What's new in Kindo — bi-weekly SaaS releases and self-managed (SMK) version releases.
- [SaaS Release Notes](https://docs.kindo.ai/release-notes/saas/): Bi-weekly summaries of what shipped to app.kindo.ai.
- ["SaaS Release — 2026-08-17 to 2026-08-30"](https://docs.kindo.ai/release-notes/saas/2026-08-30/): Cost visibility for AI spend, more reliable tool access, expanded security integrations, stronger admin governance, and reliability fixes for agent work.
- ["SaaS Release — 2026-08-03 to 2026-08-16"](https://docs.kindo.ai/release-notes/saas/2026-08-16/): Unified sign-in and SAML administration, Command Center tabs with AI Spend reporting, expanded integrations, clearer provider errors, and reliability fixes.
- ["SaaS Release — 2026-07-20 to 2026-08-02"](https://docs.kindo.ai/release-notes/saas/2026-08-02/): Memory for chats and agents, Kimi K3 model support, run handles for webhook-triggered agents, expanded MCP integrations, clearer spend views, and reliability fixes.
- ["SaaS Release — 2026-07-06 to 2026-07-19"](https://docs.kindo.ai/release-notes/saas/2026-07-19/): Per-integration Demo controls, failed-step retries, governed integration early access, expanded integrations, model and telemetry controls, and reliability fixes.
- ["SaaS Release — 2026-06-22 to 2026-07-05"](https://docs.kindo.ai/release-notes/saas/2026-07-05/): Agents API completion — invoke agents from any OpenAI Responses client with live activity streaming, resumable response streams, refreshed API reference docs, and Anthropic-endpoint compatibility fixes.
- ["SaaS Release — 2026-06-08 to 2026-06-21"](https://docs.kindo.ai/release-notes/saas/2026-06-21/): Collapsed chat tool activity, Claude Opus 4.8 access, chat history search, expanded MCP integration coverage, stronger Microsoft setup docs, and reliability fixes across chats, files, DLP, and docs.
- ["SaaS Release — 2026-05-25 to 2026-06-07"](https://docs.kindo.ai/release-notes/saas/2026-06-07/): Persistent workspaces for agents, more resilient sandboxes, safer integration updates, clearer chat errors, and expanded Jira and Nagios integration support.
- ["SaaS Release — 2026-05-11 to 2026-05-24"](https://docs.kindo.ai/release-notes/saas/2026-05-24/): Agent run objective evaluations, workflow version history, pinned integration connections, and expanded access controls for user groups and shared agents.
- ["SaaS Release — 2026-04-27 to 2026-05-10"](https://docs.kindo.ai/release-notes/saas/2026-05-10/): Command Center usage stats for unlimited-credit orgs, larger workflow payloads handled more cleanly, Microsoft Outlook email listing, and improvements across ServiceNow, Freshservice, and Guardicore.
- ["SaaS Release — 2026-04-13 to 2026-04-26"](https://docs.kindo.ai/release-notes/saas/2026-04-26/): Light mode for the chat interface, the Chat Actions public API launch, and a major Traceable AI integration expansion.
- ["SaaS Release — 2026-03-30 to 2026-04-12"](https://docs.kindo.ai/release-notes/saas/2026-04-12/): New integrations (Oracle Database, Cloudflare, Rapid7, Cofense Triage, Qualys), Canvas AI disclaimer, and several chat-reliability improvements.
- ["SaaS Release — 2026-03-16 to 2026-03-29"](https://docs.kindo.ai/release-notes/saas/2026-03-29/): Agent Stats analytics dashboard, several new integrations, and a round of integration reliability fixes.

## Optional

- [Frequently Asked Questions](https://docs.kindo.ai/admin/faq/): Answers to common questions about Kindo's capabilities, security, deployment, and integrations.
- [Glossary](https://docs.kindo.ai/reference/glossary/): Definitions of key terms used throughout the Kindo documentation.