Spotlight Docs
Spotlight runs your team's software factory, lines of coding agents on machines you control, configured as code. Guides, concepts and reference for building and running it.
Popular
Start guide
Connect your computer, give a station a task, and answer its agent
Make the factory yours
Keep your factory in a repository, and change how its agents work
Install a host
Set up a machine to start a sandbox for each run it claims
Connect GitHub
Install the GitHub App that agents clone, push and open pull requests through
Configure your factory
The software factory
Why each team shapes its own factory, and keeps it as code
Terraform
Take a workspace over as code, then change it with the provider
Terraform in CI
Plan every pull request and apply what is merged, without a stored token
Stations
Change a station's agent and prompt, or add and remove stations
Repositories
The GitHub repositories a line's runs check out
Skills
Instructions and files a station's agents can read
Tools
A command agents run to call an HTTP API, without seeing its key
Agent permissions
Allow, ask about or deny an agent's reads, edits and commands
Spotlight basics
Lines, stations and tasks
How a task moves along a line, and who decides
What runs where
What Spotlight holds, and what your machines run
Add and move tasks
Put work on a line and move it between stations
Answer the inbox
Reply to agents, and approve, edit or dismiss their requests
Steer or stop a run
Talk to an agent while it works, or stop it
Review a change stack
Read an agent's changes in the order they build on each other
Outside events
How a GitHub or Slack event finds its task
Troubleshoot a run
Find out why a run failed or never started
Your team
People and roles
Invite people and change what they may do
Join a workspace
Accept an invitation someone emailed you
Workspace tokens
Issue a token for Terraform, scripts and CI
Pull request reviews
Review a pull request when someone mentions Spotlight or adds its label, or as it opens
Plan with the agent
Talk a piece of work through and turn it into tasks
Run agents on your machines
Pull pools
Create the pool your hosts take work from
Harness keys
Give hosts the keys agents reach their models with
Runner trusts
Admit hosts by their platform's OIDC token instead of a pool token
Runner images
Run a line in an image with your toolchain
Egress
Name the hosts sandboxes may reach
Secrets
Give an MCP server an API key that never enters the sandbox
Fresh sandboxes
Why every run starts in a new container
Security boundary
What keeps an agent inside its sandbox