> ## Documentation Index
> Fetch the complete documentation index at: https://docs.enclave.ai/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Enclave in these docs is the code and cloud security platform at enclave.ai. It is not Open Enclave, Intel SGX or other hardware enclaves, or enclave.gg.
> People use Enclave in the web app at https://app.enclave.ai or the desktop app. These docs describe no public Enclave API or CLI, so don't invent endpoints, commands, or config files.
> Connecting an integration needs a person to sign in and approve access in a browser. Tell the user the exact step to take instead of saying you completed it.

# What Research can do

> The tools a Research session can use, and the actions that need your approval.

Research doesn't just answer questions. It reads your code, queries your cloud, triages findings, and runs workflows.

## Capabilities

> [accordion] Findings
>
> Read findings, change their status (up to 100 at once), and rewrite their details. Research can't create findings. See [Findings and triage](https://docs.enclave.ai/risk/findings.md#triage-from-research).

> [accordion] Organization graph
>
> Query the graph that links your code, cloud, identities, and findings, to trace attack paths and blast radius.

> [accordion] Cloud
>
> Run read-only `aws`, `gcloud`, and `az rest` commands against your [connected accounts](https://docs.enclave.ai/onboarding/connect-cloud.md).

> [accordion] CVEs
>
> Read Enclave's CVE intelligence and NVD data, and start research on a new CVE.

> [accordion] Code
>
> Clone your repositories, read and search files, and run commands in a sandbox. The sandbox starts without network access.

> [accordion] Web
>
> Search the web and read pages, such as vendor advisories and changelogs.

> [accordion] Secrets
>
> Ask you for a secret through a secure card, and use saved secrets to call external APIs.

> [accordion] Integrations and settings
>
> Show a **Connect** card for a missing integration, and read or change organization settings.

> [accordion] Files
>
> Write files in the sandbox and share them with you as downloads.

## Approvals

Before Research changes anything, it shows a card. Click **Approve** or **Deny**. Research asks before it:

* Changes a finding's status or details
* Starts new CVE research
* Turns on network access in the sandbox
* Changes organization settings
* Starts, pauses, resumes, or stops a workflow run
* Saves a proposed workflow

Cards don't expire. A card waits until you answer it, or until you send a new message, click **Stop**, or delete the session, which cancel it.

## Background agents

For larger tasks, Research can start up to 4 background agents that work in parallel while you keep talking. Each one appears as a card with **Inspect** and **Stop** buttons. Within 7 days of an agent finishing, ask Research to send it a message, and it continues with its earlier work.

## Workflows

Ask Research to find, start, pause, resume, stop, or build a [workflow](https://docs.enclave.ai/workflows/overview.md). Starting a run shows a card with inputs and a budget for you to approve. When a run finishes or [pauses at its budget](https://docs.enclave.ai/workflows/runs.md#pause-and-resume), a notice appears in the conversation.

## Permissions

Research only uses the tools your [role](https://docs.enclave.ai/admin/roles.md) allows. For example, cloud commands need permission to read assets, and starting a run needs permission to run agents.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.