# Autonoma > Autonoma is an agentic end-to-end testing platform. Connect a repository and every pull request gets a preview environment, an autonomous test run against it, and a report of what broke - with no test scripts to write or maintain. This is the public site for Autonoma: what the product does, pricing, and 562 long-form articles on end-to-end testing, preview environments and AI coding agents. The application itself is at https://autonoma.app, the API at https://api.autonoma.app, and the product documentation at https://docs.autonoma.app. Every page here also serves markdown. Send `Accept: text/markdown` to any URL, or prefix the path with `/md` - for example `https://getautonoma.com/md/blog/flaky-tests`. Responses carry `Vary: Accept`. An `Accept` header that admits neither HTML nor markdown gets `406`, and a path that does not exist gets a real `404` with a markdown body pointing back here. Errors from anything under `https://getautonoma.com/api` are JSON with a stable `error.code`; see `https://getautonoma.com/api` for the envelope and the endpoint list. ## Start here - [Autonoma developer portal](https://getautonoma.com/developers): Quickstart, authentication, API keys, MCP setup and every machine-readable file on one page. Start here if you are wiring Autonoma into an agent, a CI job or a script. - [Autonoma resource catalog](https://getautonoma.com/.well-known/ai-catalog.json): Every Autonoma agent surface as an Agentic Resource Discovery document, in one fetch. ## API - [Autonoma API index](https://getautonoma.com/api): JSON index of this site's own endpoints, plus the shape of every error response it returns. - [Autonoma preview environments API (OpenAPI)](https://api.autonoma.app/v1/previewkit/openapi.json): OpenAPI 3 description of the REST API for preview environments: environment status, per-app secrets, deploy, redeploy and teardown. Authenticate with an Autonoma API key. - [Autonoma API keys](https://docs.autonoma.app/mcp/#headless-agents-and-ci): How to get the API key used as `Authorization: Bearer ` against every Autonoma API and the MCP server. Keys belong to an organization and are managed per application, under Settings -> API keys; the "Remote agent" tab of any connect panel also mints one and copies it for you. ## MCP server - [Autonoma MCP server](https://api.autonoma.app/v1/mcp): Every Autonoma tool on one MCP server: onboard an application, configure and deploy previews, validate the test-data SDK, then debug what Autonoma flags on a pull request. API key or OAuth. - [Autonoma MCP guide](https://docs.autonoma.app/mcp/): Connecting a coding agent to Autonoma, including headless and CI setups. ## Documentation - [Autonoma documentation](https://docs.autonoma.app/): Product documentation: preview environments, test planner, environment factory, suite health. - [Autonoma documentation index for LLMs](https://docs.autonoma.app/llms.txt): Every documentation page as an llms.txt index, each entry linking to a plain-text version. - [Autonoma documentation, complete](https://docs.autonoma.app/llms-full.txt): All documentation pages concatenated into a single plain-text file. - [Autonoma Environment Factory setup](https://docs.autonoma.app/environment-factory/setup/): The one endpoint to add to your backend so Autonoma can create isolated test data before a run and delete it after. Examples in 8 languages. ## Machine-readable files - [Autonoma llms.txt](https://getautonoma.com/llms.txt): This site's index for language models and agents. - [Autonoma sitemap](https://getautonoma.com/sitemap.xml): Every indexable URL on this site. - [Autonoma robots.txt](https://getautonoma.com/robots.txt): Crawl rules, plus the `Sitemap:` and `Agentmap:` pointers. ## Content - [Autonoma engineering blog](https://getautonoma.com/blog): Long-form articles on end-to-end testing, preview environments, AI coding agents and QA practice. Every article also serves markdown - see below. - [Autonoma on GitHub](https://github.com/Autonoma-AI): Open-source repositories, including the runnable companion code for blog articles. ## Recent articles - [API Security Testing: Beyond OWASP Scanning](https://getautonoma.com/blog/api-security-testing): API security testing goes beyond OWASP scanning. Learn how to test authentication flows, authorization boundaries, and data exposure at the behavioral level. - [Compliance Automation: How to Stop Doing It Manually](https://getautonoma.com/blog/compliance-automation): Compliance automation spans GRC platforms, security scanning, and test automation. Most teams miss the third layer, the one that generates proof. - [HIPAA Compliance Checklist for SaaS Engineering Teams](https://getautonoma.com/blog/hipaa-compliance-checklist): The only HIPAA compliance checklist built for engineers. Maps every technical safeguard to automated test cases with code examples. - [SAST Tools Compared: 40-60% False Positive Rates](https://getautonoma.com/blog/sast-tools): SAST tools compared for 2026: false positive rates, CI/CD integration, open-source vs commercial costs, and what static analysis fundamentally misses. - [What Is QAOps? The Policy Behind the Buzzword](https://getautonoma.com/blog/qaops): QAOps in practice: a gating policy that says which checks block a merge, which block a deploy, and which only report. Plus build verification testing. - [Requirements Traceability Matrix: 10 Rows, Filled In](https://getautonoma.com/blog/requirements-traceability-matrix): A requirements traceability matrix example: 10 filled rows you can copy, a script that builds the coverage column from JUnit XML, and why the matrix drifts. - [What Is the Software Testing Life Cycle? 6 Gates](https://getautonoma.com/blog/software-testing-life-cycle): The software testing life cycle (STLC) has six phases, each with an entry gate, exit gate, and artifact, plus what changes under continuous delivery. - [Why STLC vs SDLC Run on 2 Different Clocks](https://getautonoma.com/blog/stlc-vs-sdlc): STLC vs SDLC explained on one merged timeline: where testing used to lag behind development, the handoff points between them, and what closed the gap. - [Test Closure Report: 5 Criteria, 2 Waivers](https://getautonoma.com/blog/test-closure-report): A filled test closure report template: scope, defects by severity, five exit criteria with two waivers, and the residual risk blank templates leave out. - [Pairwise Testing Cuts 4,096 Configs to 22 Rows](https://getautonoma.com/blog/pairwise-testing): Pairwise testing cuts 4,096 configurations to a verified 22 rows covering all 240 pairs. Here is the decision rule for when that reduction is actually worth it. - [State Transition Testing Maps All 30 Moves, Valid or Not](https://getautonoma.com/blog/state-transition-testing): State transition testing on a full order-lifecycle transition table: 30 state-event cells, 7 valid transitions, 23 invalid ones, and tests for the refusals. - [How Boundary Value Analysis Finds a 90-Day Off-by-One](https://getautonoma.com/blog/boundary-value-analysis): Boundary value analysis taught on a booking-window off-by-one bug you can run: two-value, three-value, and robust BVA, verified with a parameterised test. - [What Is White Box Testing? 4 Coverage Criteria, Counted](https://getautonoma.com/blog/white-box-testing): White box testing gives you access to the implementation. See statement, branch, condition, and path coverage counted on one real function: 4, 4, 6, 8 tests. - [Equivalence Partitioning: The Rule That Became a Spec](https://getautonoma.com/blog/equivalence-partitioning): What equivalence partitioning is, with a worked example: six equivalence classes read from a spec, and a seventh only the validator's own code reveals. - [What Is Decision Table Testing? 12 Rules to 8](https://getautonoma.com/blog/decision-table-testing): Decision table testing worked end to end: a full 12-rule shipping-cost table collapsed to 8, condition stub to action entries, proven as a passing test. - [Test Automation Anti-Patterns: 6 Failures, 1 Root Cause](https://getautonoma.com/blog/test-automation-anti-patterns): Six test automation anti-patterns, each with a diagnostic tell you can check today, and the one root cause behind every one of them. - [Why Grey Box Testing Was Never a Compromise](https://getautonoma.com/blog/grey-box-testing): Grey box testing was a compromise because one person could only hold one perspective at a time. Here's what changes when a system holds both perspectives fully. - [Black Box Testing: 3 Access Levels, Same System](https://getautonoma.com/blog/black-box-vs-white-box-testing): Black box and white box testing differ in implementation access, not skill. The three-way comparison table everyone else drops the middle row from. - [The 7 Test Design Techniques in Software Testing](https://getautonoma.com/blog/test-design-techniques): All seven test design techniques in software testing, defined with one worked example each, plus a verdict on which ones survived cheap test execution. - [Outsourcing QA Testing? Here's What 6 Vendors Cost](https://getautonoma.com/blog/qa-automation-vendor-pricing-comparison): Outsourcing QA testing? Six vendors' pricing compared across five billing models, against one fixed workload. Quote-only figures marked honestly, not guessed. ## Optional - [Full article index](https://getautonoma.com/md/blog): All 562 articles as markdown, newest first, with a one-line description each. - [Contact](https://getautonoma.com/md/contact): How to reach the team, as markdown.