> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tolmo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Explore your production in the app

> Browse the applications, HTTP endpoints, datastores, and domains that Tolmo found, and explore the full knowledge graph in the Explorer.

Use the **Production Knowledge** section of the web app to browse the [knowledge graph](https://docs.tolmo.com/knowledge-graph/overview.md). Each page shows one type of asset. The **Explorer** shows how all assets connect.

A page shows data after you connect its source. Before that, the page tells you which integration to connect.

## Apps

**Apps** shows the applications that Tolmo found in your code repositories. Each app shows its endpoints and the hostnames that serve it.

Tolmo marks an app as network-serving when its source declares an HTTP or API surface. This label does not prove that the app is reachable from the internet.

Requires a connected code repository (GitHub or GitLab).

## HTTP endpoints

**HTTP endpoints** shows all routes that your applications declare. You can search by path, domain, method, or repository.

For each endpoint, this page shows the data from the agents:

| Field | What it shows |
| - | - |
| **Exposure** | **Internet-exposed** means that an agent run got to the route from the outside. **Exposure unknown** means that no run tested the route. |
| **Last tested** | The time of the last test on the route, and the number of runs that touched it. |
| **Attack families tried** | The attacks against the route, and the test history of the route. |
| **Open findings** | The open findings on the route. |

Use this page to check testing coverage. The routes with the **Not tested yet** label show where the next runs can find new issues.

Requires a connected code repository.

## Datastores

**Datastores** shows the databases and object storage in your cloud accounts. Tolmo classifies each datastore by the type of data in it. Examples are credentials, financial data, health data, and identity references. Use this page to find where a breach can cause the most damage.

Requires a connected cloud provider.

## Domains

**Domains** is your domain inventory. It shows apex domains and their hosts. For each domain, it shows the DNS status, the web status, the first and last seen times, and the discovery source. You can export the inventory.

Administrators also enable or disable **offensive testing** for each domain on this page. See [Define scope](https://docs.tolmo.com/pentesting/scope.md).

Requires a connected cloud or DNS provider.

## Explorer

The **Explorer** shows the graph. You can show the resources of one integration, or a sample of all resources. To show only new or stale resources, filter by type, first seen, or last seen. From a resource, you can expand to its connections.

The **time machine** shows the graph in a past time window. It shows the resources that Tolmo added and removed. See [Time machine](https://docs.tolmo.com/knowledge-graph/time-machine.md).

> [!TIP]
>
> Use the Explorer for open-ended browsing. For a question that you ask frequently, write a [Cypher query](https://docs.tolmo.com/knowledge-graph/sql-cypher.md). An example question is "every public bucket a role with admin rights can read".


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.