# Deployment Guides

> Deploy Thoth MCP Proxy across enterprise environments with rollout and verification workflows.

Source: https://docs.atensecurity.com/docs/deployments

**For administrators:**
  These guides cover configured enterprise environments. For the developer
  trial, start with [Your first governed agent](https://docs.atensecurity.com/docs/getting-started/quickstart).
  Confirm enabled integrations and release artifacts before using a fleet runbook.

Use these Deployment Guides to install, configure, and validate Thoth MCP Proxy (thoth) in managed environments.

## Fleet deployment entry points

- [Release Channels + Verification](https://docs.atensecurity.com/docs/deployments/release-channels)
- [Deployment Validation Matrix](https://docs.atensecurity.com/docs/deployments/validation-matrix)
- [Windows Enterprise Release Platform](https://docs.atensecurity.com/docs/deployments/windows-enterprise-release)
- [Jamf, Kandji, and Santa Test Plan](https://docs.atensecurity.com/docs/deployments/jamf-kandji-santa-test-plan)
- [Santa macOS Trust Policy](https://docs.atensecurity.com/docs/deployments/santa-macos)
- [Jamf Onboarding Overview](https://docs.atensecurity.com/docs/deployments/jamf-overview)
- [Kandji macOS Runbook](https://docs.atensecurity.com/docs/deployments/kandji-macos)
- [Claude Desktop Fleet Configuration](https://docs.atensecurity.com/docs/mcp/fleet-deployment)
- [Intune Onboarding Overview](https://docs.atensecurity.com/docs/deployments/intune-overview)

## Release pathways

| Path | Primary audience | Start here |
|---|---|---|
| Homebrew tap (`atensecurity/tap`) | Developer endpoints + admin bootstrap | [Release Channels + Verification](https://docs.atensecurity.com/docs/deployments/release-channels) |
| Notarized PKG (`thoth-macos-universal.pkg`) | MDM-managed macOS fleets | [Release Channels + Verification](https://docs.atensecurity.com/docs/deployments/release-channels) |
| Signed Windows MSI (`Thoth-x64.msi`) | Intune and Windows endpoint engineering teams | [Windows Enterprise Release Platform](https://docs.atensecurity.com/docs/deployments/windows-enterprise-release) |
| Direct binaries from GitHub Releases | Linux/Windows packaging automation | [Release Channels + Verification](https://docs.atensecurity.com/docs/deployments/release-channels) |

**Enterprise trust artifacts:**
  Every `thoth/v*` binary release includes checksums, Sigstore keyless signatures, SBOMs (CycloneDX + SPDX), provenance, and Santa metadata.

## Jamf onboarding

| If you need to... | Start here |
|---|---|
| Understand Jamf onboarding flow end-to-end | [Jamf Onboarding Overview](https://docs.atensecurity.com/docs/deployments/jamf-overview) |
| Configure Jamf policy parameters and rollout sequencing | [Jamf macOS Runbook](https://docs.atensecurity.com/docs/deployments/jamf-macos) |
| Review macOS deployment/runtime reference details | [macOS Deployment Reference (Jamf)](https://docs.atensecurity.com/docs/deployments/macos-jamf) |

## Intune onboarding

| If you need to... | Start here |
|---|---|
| Understand Intune onboarding flow end-to-end | [Intune Onboarding Overview](https://docs.atensecurity.com/docs/deployments/intune-overview) |
| Roll out to employee Macs | [Intune macOS Runbook](https://docs.atensecurity.com/docs/deployments/intune-macos) |
| Roll out to employee Linux workstations | [Intune Linux Runbook](https://docs.atensecurity.com/docs/deployments/intune-linux) |
| Roll out to employee Windows workstations | [Intune Windows Runbook](https://docs.atensecurity.com/docs/deployments/intune-windows) |
| Automate script updates with Microsoft Graph | [Intune Graph API Automation](https://docs.atensecurity.com/docs/deployments/intune-graph-api) |

**Credentials and IDs:**
  Keep onboarding values out of source control. Distinguish thoth tenant identifiers from Azure tenant identifiers in all deployment pipelines.

## Operations follow-up

After deployment, use these operations guides for day-2 workflows:

- [Deployment Validation Matrix](https://docs.atensecurity.com/docs/deployments/validation-matrix)
- [Key Rotation](https://docs.atensecurity.com/docs/operations/key-rotation)
- [Incident Response](https://docs.atensecurity.com/docs/operations/incidents)
- [Rollback](https://docs.atensecurity.com/docs/operations/rollback)