> ## Documentation Index
> Fetch the complete documentation index at: https://docs.spellguard.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# cTLS Overview

> Cloud Transport Layer Security for agent attestation and secure channels

# cTLS: Cloud Transport Layer Security

cTLS implements bidirectional attestation and secure channel establishment for agents regardless of the hosting provider.

Unlike traditional TLS which only authenticates the server, cTLS implements **bidirectional verification**: the client verifies the Verifier before sending any secrets, and the Verifier verifies the client's identity before granting access.

## Components

<CardGroup cols={2}>
  <Card title="Attestation" icon="fingerprint" href="/specifications/ctls/attestation">
    Verifier self-attestation documents that clients verify before connecting
  </Card>

  <Card title="Evidence Building" icon="file-certificate" href="/specifications/ctls/evidence">
    RFC 9334 RATS-compliant evidence for agent identity claims
  </Card>

  <Card title="Session Keys" icon="key" href="/specifications/ctls/session-keys">
    Ephemeral RAM-only keys for forward secrecy
  </Card>

  <Card title="Agent Registry" icon="address-book" href="/specifications/ctls/agent-registry">
    Registered agent management and channel tokens
  </Card>
</CardGroup>
