# Polygraph

> Polygraph is a meta-harness for maximum agentic autonomy. It works with the agents you already use (Claude Code, Codex, OpenCode) and connects every repo and session in your organization into one. Start a session, let your agent read and write across repos, orchestrate the PRs and CI as one change, and resume or reference any prior session so work is never lost.

All documentation pages are available as raw Markdown by appending `.md` to the URL.

## Getting started

- [See everything, forget nothing](https://docs.trypolygraph.com/index.md): Polygraph is a meta-harness for maximum agentic autonomy. It works with the agents you already use and connects every repo and every session in your organization.
- [Agent plugin and skills](https://docs.trypolygraph.com/getting-started/agent-plugin.md): Install the Polygraph plugin for your agent and learn what skills it ships.
- [Install the Polygraph CLI](https://docs.trypolygraph.com/getting-started/installation.md)
- [Quickstart](https://docs.trypolygraph.com/getting-started/quickstart.md)
- [Terminals](https://docs.trypolygraph.com/getting-started/terminals.md): Run Polygraph sessions in a terminal multiplexer to watch all child agent logs side by side.

## Features

- [Account insights](https://docs.trypolygraph.com/features/account-insights.md): Break down agent token spend for the whole account by repository, session, person, model, and harness.
- [Background session capture](https://docs.trypolygraph.com/features/background-session-capture.md): Record agent sessions run outside Polygraph so the work behind a pull request stays reviewable even when nobody started a session for it.
- [Code reviews](https://docs.trypolygraph.com/features/code-reviews.md): Review AI-generated pull requests by asking the session behind the change about its intent and decisions, and run an adversarial review for an independent second opinion.
- [Cross-repo agent sessions](https://docs.trypolygraph.com/features/cross-repo-agent-sessions.md): Run one agent session across multiple repos, using some repos for context and others for active changes.
- [Cross-repo PR and CI coordination](https://docs.trypolygraph.com/features/cross-repo-pr-and-ci-coordination.md): Open, link, track, and verify related pull requests across repos from one Polygraph session.
- [Institutional memory](https://docs.trypolygraph.com/features/institutional-memory.md): Search past sessions, reference them as context for new work, and debrief them into structured summaries your agent can build on.
- [OSS repo integration](https://docs.trypolygraph.com/features/oss-repo-integration.md): Bring public open source repos into Polygraph sessions for repros, upstream debugging, and integration validation.
- [Resuming and handoff](https://docs.trypolygraph.com/features/resuming-and-handoff.md): Sessions are durable. Resume a Claude Code or Codex session tomorrow, continue it on another machine, hand it to a teammate, or finish it with a different agent.
- [Using multiple agents](https://docs.trypolygraph.com/features/using-multiple-agents.md): A session is a team of agents. A parent agent plans the work, child agents execute it per repo, and roles let several agents work in the same repo at once.

## Use cases

- [Find and reuse prior work](https://docs.trypolygraph.com/use-cases/find-and-reuse-prior-work.md): Search past sessions for prior art, trace any commit back to the session that produced it, and anchor new work to how your organization already solved the problem.
- [Migrate a library](https://docs.trypolygraph.com/use-cases/migrate-a-library.md): Move every repo that uses a library to a new version, with the library's source in the session so the agent knows exactly what changed.
- [Patch a CVE](https://docs.trypolygraph.com/use-cases/patch-a-cve.md): A CVE drops. Find every repo affected, open patch PRs, and hand each PR to the team that owns the repo, without losing the audit trail.
- [Review code with full context](https://docs.trypolygraph.com/use-cases/review-code-with-full-context.md): Large AI-generated pull requests are hard to review from the diff alone. Open the session behind the PR and ask about the intent, the alternatives considered, and the decisions made.
- [Set up a software factory](https://docs.trypolygraph.com/use-cases/set-up-a-software-factory.md): A software factory is a workflow, not a product. Compose one from your issue tracker, your agent, and Polygraph in about 20 minutes.
- [Update a design system component](https://docs.trypolygraph.com/use-cases/update-a-design-system-component.md): Change a design system component, validate it against every consumer, open PRs where it lands cleanly, and tell the right team where it doesn't.
- [Update backend and frontend](https://docs.trypolygraph.com/use-cases/update-backend-and-frontend.md): Ship one feature across a backend API and the frontend that calls it, as if they were one monorepo.
- [Update multiple microservices](https://docs.trypolygraph.com/use-cases/update-multiple-microservices.md): Change a contract that several microservices share, verify every consumer before the publisher ships, and coordinate the merge order.

## Open source

- [For OSS developers](https://docs.trypolygraph.com/oss/for-oss-developers.md): Triage a contributor's bug report against its reproduction repo, fix it in your library, confirm the fix in the repro, and open the PR, all in one session.

## Security

- [Security](https://docs.trypolygraph.com/security.md): How Polygraph protects your credentials and code across repos.
- [SAML authentication](https://docs.trypolygraph.com/security/saml.md): Configure SAML single sign-on and revoke access when a user is offboarded.
- [Okta SAML authentication](https://docs.trypolygraph.com/security/saml/okta.md): Configure SAML authentication and optional Universal Logout for Polygraph with Okta.

## CLI reference

- [polygraph account](https://docs.trypolygraph.com/cli/account.md): Account management
- [polygraph agent](https://docs.trypolygraph.com/cli/agent.md): Child agent controls
- [polygraph auth](https://docs.trypolygraph.com/cli/auth.md): Authentication and environment selection
- [polygraph config](https://docs.trypolygraph.com/cli/config.md): Interactive configuration editor and config file reference for Polygraph.
- [polygraph doctor](https://docs.trypolygraph.com/cli/doctor.md): Diagnose bundle verification, download, cache, and load issues
- [polygraph git](https://docs.trypolygraph.com/cli/git.md): Git workflows
- [polygraph graph](https://docs.trypolygraph.com/cli/graph.md): Explore the repository dependency graph
- [polygraph repo](https://docs.trypolygraph.com/cli/repo.md): Repository management
- [polygraph session](https://docs.trypolygraph.com/cli/session.md): Session management
- [polygraph whoami](https://docs.trypolygraph.com/cli/whoami.md): Show current auth status + account

## MCP tools

- [add_repo](https://docs.trypolygraph.com/mcp-tools/add_repo.md): Directly add specific repositories to a running Polygraph session by slug, name, owner/repo full name, or repository id.
- [allow_agent](https://docs.trypolygraph.com/mcp-tools/allow_agent.md): Grant a child agent's pending permission-required request.
- [archive_session](https://docs.trypolygraph.com/mcp-tools/archive_session.md): Archive a Polygraph session.
- [associate_pr](https://docs.trypolygraph.com/mcp-tools/associate_pr.md): Associate an existing pull request with a Polygraph session.
- [create_pr](https://docs.trypolygraph.com/mcp-tools/create_pr.md): Create draft pull requests for one or more repositories in a Polygraph session.
- [delete_artifact](https://docs.trypolygraph.com/mcp-tools/delete_artifact.md): Permanently delete an artifact from a Polygraph session by name.
- [deny_agent](https://docs.trypolygraph.com/mcp-tools/deny_agent.md): Deny a child agent's pending permission-required request.
- [get_ci_logs](https://docs.trypolygraph.com/mcp-tools/get_ci_logs.md): Retrieves the plain-text log for a specific CI job and saves it to a local file.
- [get_session_logs](https://docs.trypolygraph.com/mcp-tools/get_session_logs.md): Retrieve the parent agent transcript for a Polygraph session as JSON.
- [git_fetch](https://docs.trypolygraph.com/mcp-tools/git_fetch.md): Deepen a Polygraph session repository's git history.
- [link_reference](https://docs.trypolygraph.com/mcp-tools/link_reference.md): Link an external reference to a session.
- [list_accounts](https://docs.trypolygraph.com/mcp-tools/list_accounts.md): List organizations the current user belongs to.
- [list_artifacts](https://docs.trypolygraph.com/mcp-tools/list_artifacts.md): List the artifacts attached to a Polygraph session, including their names, kinds, and versions.
- [list_repos](https://docs.trypolygraph.com/mcp-tools/list_repos.md): Find candidate repositories for a Polygraph session.
- [list_sessions](https://docs.trypolygraph.com/mcp-tools/list_sessions.md): List Polygraph sessions.
- [login](https://docs.trypolygraph.com/mcp-tools/login.md): Authenticate Polygraph by running the CLI login flow, which opens a browser.
- [logout](https://docs.trypolygraph.com/mcp-tools/logout.md): Remove stored Polygraph credentials from local config.
- [mark_pr_ready](https://docs.trypolygraph.com/mcp-tools/mark_pr_ready.md): Mark specified draft pull requests in a Polygraph session as ready for review.
- [pack_and_copy](https://docs.trypolygraph.com/mcp-tools/pack_and_copy.md): Pack publisher packages and install the tarballs into consumer repos.
- [push_branch](https://docs.trypolygraph.com/mcp-tools/push_branch.md): Push a local git branch to the remote repository.
- [search_sessions](https://docs.trypolygraph.com/mcp-tools/search_sessions.md): Search Polygraph sessions by free-text query, or resolve a commit sha (full or partial) to the session(s) linked to that commit.
- [select_account](https://docs.trypolygraph.com/mcp-tools/select_account.md): Select an organization to operate on.
- [session_intro](https://docs.trypolygraph.com/mcp-tools/session_intro.md): Render the Polygraph session welcome card (markdown) for a session.
- [show_agent](https://docs.trypolygraph.com/mcp-tools/show_agent.md): Get the status and recent output of the specified repo's child agent in a Polygraph session from the configured Polygraph URL.
- [show_session](https://docs.trypolygraph.com/mcp-tools/show_session.md): Get the specified Polygraph session.
- [spawn_agent](https://docs.trypolygraph.com/mcp-tools/spawn_agent.md): Delegate a task to a child AI agent in a dependent repository.
- [start_session](https://docs.trypolygraph.com/mcp-tools/start_session.md): Initialize Polygraph for the selected repos.
- [stop_agent](https://docs.trypolygraph.com/mcp-tools/stop_agent.md): Stop an in-progress child agent in a Polygraph session.
- [update_pr](https://docs.trypolygraph.com/mcp-tools/update_pr.md): Update a pull request's title, body, labels, or assignees through Polygraph.
- [update_session](https://docs.trypolygraph.com/mcp-tools/update_session.md): Update a Polygraph session title and/or user-facing description timeline.
- [upload_artifact](https://docs.trypolygraph.com/mcp-tools/upload_artifact.md): Attach an artifact (plan document, image, or file) to a Polygraph session.
- [whoami](https://docs.trypolygraph.com/mcp-tools/whoami.md): Show the current Polygraph authentication and selected organization state.