> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trysoma.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

> Overview of security features in Soma

Soma aims to implement enterprise-level security features out of the box. When protecting agents, MCP / function calling, and API endpoints, there are a number of considerations which are summarized below. Please use the links provided for further reading.

## Environment & process security

* [Agent vs API server isolation](./agent-vs-api-server-isolation)
* [Environment variables](./environment-variables)
* [Secrets](./secrets)
* [Encrypting sensitive data](./encrypting-sensitive-data)
* [Role of `soma.yaml`](./the-role-of-soma-yaml)

## MCP function security

* [Bridge MCP provider credential encryption](./../mcp-functions/managing-mcp-function-credentials)
* [Understanding Bridge MCP server authentication](./../mcp-functions/understanding-mcp-server-authentication)
* [Preventing credential leaks to agents](./../mcp-functions/preventing-credential-leaks-to-agents)

## API server security

* [Configuring an external identity provider](./configuring-an-external-identity-provider)
* [Synchronizing users, groups & roles](./user-and-group-provisioning)
* [Configuring fine-grained access control to API endpoints](./configuring-access-control)
* [All available roles & permissions](./appendix-roles-and-permissions)