> ## Documentation Index > Fetch the complete documentation index at: https://docs.xpander.ai/llms.txt > Use this file to discover all available pages before exploring further. # Admin guide > For security, IT and the platform team: what every agent is allowed to do, how you know, and how to deploy and operate xpander. Your organization's agents run on xpander, so control applies as the agent acts: every model call and every skill call is checked against the agent's policies, given its credential at that moment, counted against its budget, and recorded under the person who asked. Security review happens once. Every new agent starts inside the skills, models and policies you approved, and inherits that review. ## What you control | Control | Where | What it does | | --------------- | -------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------- | | Approved skills | Skills catalog, per-agent Add a skill | Which outside systems and actions an agent can reach at all | | Approvals | Per skill ("These actions need approval"), gated commands, permission mode | Which actions wait for a named person's sign-off, and for how long | | Identity | Per-skill connections: organization or personal; OIDC pre-authentication where systems allow | Whether the agent acts with its own credential or with the asking person's permissions | | Credentials | Vault, workspace secrets | Credentials are injected at the moment of use. The agent never holds one | | Models | Settings > LLM: providers, default model, allow-lists | Which models agents may use, frontier or open-weight, and through which provider | | Budgets | Settings > Usage (Settings > Budget on subscription-billed organizations), per-agent limits | Spend and usage caps per organization and per agent | | Access | Manage access, Org-wide sharing | Who may use, edit or share an agent | | Record | Task Manager, task threads, usage | Every task, every skill call, every model call and every decision, under the person who asked | ## Where xpander runs | Deployment | What runs where | Page | | ------------- | ------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------- | | xpander cloud | Everything in xpander's cloud; agents answer to Slack, Teams, an API or a schedule | [Access control](/resources/security-compliance/access-control) | | Hybrid | Execution in your Kubernetes cluster, control plane in xpander's cloud | [Hybrid deployment](/self-hosted/hybrid) | | Air-gapped | Every component inside your perimeter, including sign-in. With OpenCode and an open-weight model, nothing leaves the perimeter | [Air-gapped deployment](/self-hosted/airgap) | Every connection that leaves your perimeter in a self-hosted install is optional and under your control. The egress table on the air-gapped page lists each one, when it is used, and the setting that turns it off or points it inside. ## In this section Deployments, prerequisites, install, verify, upgrade, scale. AI gateway, AI vendors, MCP gateway, desktop AI clients, Slack workspace, Microsoft Teams tenant, email, identity providers, vault providers, EKS clusters, the data layer, file storage. The two-file license, renewal, and single sign-on with your identity provider. Architecture per deployment, certifications, data handling. Members, roles, API keys and audit.