> ## Documentation Index
> Fetch the complete documentation index at: https://controlplanecorporation-majid-docs-content-expansion.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Introduction

> Everything you need to run on Control Plane, starting with your first workload.

<Frame>
  <img src="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/rKGH-n6tu4yQ_WHQ/logos/dark-hero.svg?fit=max&auto=format&n=rKGH-n6tu4yQ_WHQ&q=85&s=653812c076d56cf6ba7ec001c2fcb447" alt="Control Plane" className="block dark:hidden" width="600" height="272" data-path="logos/dark-hero.svg" />

  <img src="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/rKGH-n6tu4yQ_WHQ/logos/light-hero.svg?fit=max&auto=format&n=rKGH-n6tu4yQ_WHQ&q=85&s=959ddc3f5c6b51f228e8bfb3a7f4bf68" alt="Control Plane" className="hidden dark:block" width="600" height="272" data-path="logos/light-hero.svg" />
</Frame>

Control Plane is a [cloud virtualization platform](/whatis). It combines regions of AWS, GCP, Azure, OCI, and other providers with bare metal, on-prem VMs, and Kubernetes clusters you already run into one or more Global Virtual Clouds ([GVCs](/concepts/gvc)). Your [workloads](/concepts/workload), whether containers, VMs, or AI agents, run in every location their GVC spans and get the same networking, identity, secret management, observability, and access control in each one. You operate all of it through the [Console](https://console.cpln.io/signup), the [CLI](/cli-reference/overview), the [REST API](/api-reference/api), [Terraform](/iac/terraform), [Pulumi](/iac/pulumi), and an [MCP server](/ai/overview).

## Start here

<Card title="Deploy your first workload" href="/quickstart/deploy-workload" icon="rocket" horizontal>
  Create a Global Virtual Cloud (GVC), run a sample application as a workload, and open it on a global TLS endpoint.
</Card>

<CardGroup cols={2}>
  <Card title="Understand the concepts" href="/concepts/access-control" icon="lightbulb">
    Read these pages first to learn what each building block is and how they fit together.
  </Card>

  <Card title="Follow a how-to guide" href="/guides/overview" icon="list-ol">
    Configure a domain, create a secret, push an image, set up a CI/CD pipeline, and more.
  </Card>

  <Card title="Point an AI agent at it" href="/ai/overview" icon="sparkles">
    Which path your tool takes: the AI Plugin, or the MCP server.
  </Card>

  <Card title="Compliance" href="/compliance" icon="shield-check">
    PCI DSS Level 1 and SOC 2 Type II: the attestations, the audit scope, and the responsibility matrix.
  </Card>
</CardGroup>

## Build with AI

<CardGroup cols={2}>
  <Card title="Sandboxes" href="/guides/sandbox/getting-started" icon="laptop-code">
    Isolated environments for AI coding agents, reachable from a browser IDE, VS Code, Cursor, or SSH.
  </Card>

  <Card title="AI Plugin" href="/ai/plugin" icon="puzzle-piece">
    Skills, agents, and guardrails that teach Claude Code, Codex, and Antigravity CLI to drive Control Plane.
  </Card>

  <Card title="MCP Server" href="/ai/mcp" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/rKGH-n6tu4yQ_WHQ/icons/mcp.svg?fit=max&auto=format&n=rKGH-n6tu4yQ_WHQ&q=85&s=56240710075f155f61d45cb6d03295a2" width="24" height="24" data-path="icons/mcp.svg">
    Connect Cursor, Claude Desktop, VS Code, or any other MCP client to your org.
  </Card>

  <Card title="Run a model" href="/template-catalog/templates/ollama" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/rKGH-n6tu4yQ_WHQ/template-catalog/templates/icons/ollama.png?fit=max&auto=format&n=rKGH-n6tu4yQ_WHQ&q=85&s=bbed642fda6cb77fafd25be1e71870e9" width="608" height="608" data-path="template-catalog/templates/icons/ollama.png">
    Ollama, LiteLLM, Qdrant, and Langfuse install from the Template Catalog as versioned releases.
  </Card>
</CardGroup>

## Build and deploy

<CardGroup cols={3}>
  <Card title="Create a GVC" href="/guides/create-gvc" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/gvc.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=82438d45df407eb2a10e0843f549cbfa" width="512" height="512" data-path="icons/gvc.svg">
    Pick the locations your workloads run in. Workloads, identities, and volume sets live inside it.
  </Card>

  <Card title="Create a Workload" href="/guides/create-workload" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/workload.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=3331c4f59aa584e932c875493f66d359" width="512" height="512" data-path="icons/workload.svg">
    Run a container as a serverless, standard, stateful, cron, or VM workload.
  </Card>

  <Card title="Push an image" href="/guides/push-image" icon="docker">
    Build into your org's free private registry, or push an image you already have.
  </Card>

  <Card title="Create a Secret" href="/guides/create-secret/overview" icon="key">
    Credentials, keys, and certificates, plus the identity and policy chain a workload reads them through.
  </Card>

  <Card title="Configure a Domain" href="/guides/configure-domain" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/domain.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=808798f96b69d4dda368b7162d32866e" width="512" height="512" data-path="icons/domain.svg">
    Route your own domain to a workload. TLS certificates are issued and renewed for you.
  </Card>

  <Card title="Install from the Template Catalog" href="/template-catalog/overview" icon="cubes">
    PostgreSQL, Redis, Kafka, and more, installed into a GVC as versioned releases.
  </Card>
</CardGroup>

<Card title="Run a full virtual machine" href="/reference/workload/vm" icon="server" horizontal>
  A VM workload brings its own kernel, init system, and guest OS, including Windows. Lift an existing disk image across without re-platforming it, and it still gets the same encrypted internal networking, the same credential-free access to cloud services, and the same firewall rules as your containers.
</Card>

## Interfaces

<CardGroup cols={3}>
  <Card title="Console" href="https://console.cpln.io/signup" icon="display">
    The web UI. Explore resources, make one-off changes, and read logs and metrics in the browser.
  </Card>

  <Card title="CLI" href="/cli-reference/overview" icon="terminal">
    `cpln` scripts the same operations, and adds exec, port-forward, and `cpln apply` manifests.
  </Card>

  <Card title="REST API" href="/api-reference/api" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/api.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=e81574062fbfe1a5139ea91f5084e62e" width="512" height="512" data-path="icons/api.svg">
    Every operation over HTTP at `api.cpln.io`, generated from an OpenAPI spec.
  </Card>

  <Card title="Terraform" href="/iac/terraform" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/terraform.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=19deabd5e978d39905a6c83ea1f7904d" width="256" height="291" data-path="icons/terraform.svg">
    The official `cpln` provider, managing every resource kind in HCL.
  </Card>

  <Card title="Pulumi" href="/iac/pulumi" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/pulumi.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=7a7f4b9390dfa8fecf6223c88c658dcd" width="256" height="271" data-path="icons/pulumi.svg">
    The same resources in TypeScript, Python, Go, or C#.
  </Card>

  <Card title="MCP Server" href="/ai/mcp" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/rKGH-n6tu4yQ_WHQ/icons/mcp.svg?fit=max&auto=format&n=rKGH-n6tu4yQ_WHQ&q=85&s=56240710075f155f61d45cb6d03295a2" width="24" height="24" data-path="icons/mcp.svg">
    The same operations over MCP at `mcp.cpln.io`, for an AI agent to call directly.
  </Card>
</CardGroup>

<Card title="Kubernetes Operator" href="/core/kubernetes-operator" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/kubernetes.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=87d1a7db99bf4ccb443e11e064e45a9b" horizontal width="230" height="223" data-path="icons/kubernetes.svg">
  Already running a cluster? Manage Control Plane resources as CRDs, so `kubectl` and ArgoCD drive them alongside your Kubernetes manifests.
</Card>

## Infrastructure

<CardGroup cols={2}>
  <Card title="Managed Kubernetes" href="/mk8s/overview" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/kubernetes.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=87d1a7db99bf4ccb443e11e064e45a9b" width="230" height="223" data-path="icons/kubernetes.svg">
    Control Plane provisions and operates the clusters, on your cloud accounts or your own servers.
  </Card>

  <Card title="CPLN BYOK" href="/byok/overview" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/S7Ea4kS8-f2sk9CI/icons/controlplane.svg?fit=max&auto=format&n=S7Ea4kS8-f2sk9CI&q=85&s=b47d5ad048d0b21b76cd063001083f26" width="77" height="87" data-path="icons/controlplane.svg">
    Bring your own Kubernetes: register a cluster you already run and it becomes a location workloads roll out to.
  </Card>

  <Card title="Wormhole agent" href="/guides/agent" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/agent.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=6a061e97d4371bdb7d04a113ea470443" width="683" height="683" data-path="icons/agent.svg">
    Reach TCP and UDP endpoints inside a VPC, an on-prem data center, or a developer's laptop.
  </Card>

  <Card title="Native networking" href="/guides/native-networking/native-networking-setup" icon="network-wired">
    AWS PrivateLink and GCP Private Service Connect, for services that never leave the VPC.
  </Card>
</CardGroup>

## Observe and automate

<CardGroup cols={3}>
  <Card title="Logs" href="/core/logs" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/rUryc3z9dDsnWr_V/icons/logs.svg?fit=max&auto=format&n=rUryc3z9dDsnWr_V&q=85&s=4b9284c653ef1539f73941bf080a3980" width="512" height="512" data-path="icons/logs.svg">
    Workload, access, and cron logs, queryable with LogQL from the Console, CLI, API, Grafana, or an AI agent.
  </Card>

  <Card title="Metrics" href="/guides/default-metrics" icon="chart-line">
    What every org, workload, replica, and volume emits before you instrument anything.
  </Card>

  <Card title="Audit Trail" href="/core/audittrail" icon="magnifying-glass">
    Every platform action, plus your application's own events written to the same trail.
  </Card>

  <Card title="External logging" href="/external-logging/overview" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/quota.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=78788774c6264b247f70a81eb623a78f" width="512" height="512" data-path="icons/quota.svg">
    Forward org logs to S3, CloudWatch, Datadog, Coralogix, Loki, and other providers.
  </Card>

  <Card title="CI/CD" href="/guides/gitops" icon="code-branch">
    Working pipelines for GitHub Actions, GitLab CI, Bitbucket Pipelines, and CircleCI.
  </Card>

  <Card title="Tracing" href="/reference/gvc#tracing" icon="route">
    Follow one request across every workload it passes through, at a sampling rate you set.
  </Card>
</CardGroup>

## Reference documentation

<CardGroup cols={3}>
  <Card title="Workload" href="/reference/workload/general" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/workload.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=3331c4f59aa584e932c875493f66d359" width="512" height="512" data-path="icons/workload.svg">
    Containers, autoscaling, firewall, volumes, load balancing, and termination.
  </Card>

  <Card title="GVC" href="/reference/gvc" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/gvc.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=82438d45df407eb2a10e0843f549cbfa" width="512" height="512" data-path="icons/gvc.svg">
    Locations, pull secrets, the shared identity, and GVC-wide environment.
  </Card>

  <Card title="Identity" href="/reference/identity" icon="fingerprint">
    Credential-free cloud access, and the network resources a workload may reach.
  </Card>

  <Card title="Policy" href="/reference/policy" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/policy.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=3d2df0048f3707d04df9f7344b6a4a27" width="24" height="24" data-path="icons/policy.svg">
    Bindings, permissions, and the principals a policy grants them to.
  </Card>

  <Card title="Domain" href="/reference/domain" icon="https://mintcdn.com/controlplanecorporation-majid-docs-content-expansion/Ry1Mkgc7uPHC-gur/icons/domain.svg?fit=max&auto=format&n=Ry1Mkgc7uPHC-gur&q=85&s=808798f96b69d4dda368b7162d32866e" width="512" height="512" data-path="icons/domain.svg">
    Routing modes, routes, ports, TLS settings, and CORS.
  </Card>

  <Card title="All resources" href="/reference/overview" icon="book-open">
    Every kind, including secrets, volume sets, images, locations, cloud accounts, and quotas.
  </Card>
</CardGroup>

<Tip>
  Need help? Read the [FAQ](https://controlplane.com/faq), watch the [Product Demos](https://controlplane.com/product-demos), or catch up on the [Blog](https://controlplane.com/blog).
</Tip>
