diff --git a/about/how-pangolin-works.mdx b/about/how-pangolin-works.mdx
index fd2cc38..e14172f 100644
--- a/about/how-pangolin-works.mdx
+++ b/about/how-pangolin-works.mdx
@@ -4,6 +4,12 @@ icon: "brain"
 description: "Learn about the fundamentals of Pangolin and how they work together to provide simple and secure remote access."
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Basic Steps
 
 <Steps>
diff --git a/about/pangolin-vs-reverse-proxy-vs-vpn.mdx b/about/pangolin-vs-reverse-proxy-vs-vpn.mdx
index c67dde6..8bb432a 100644
--- a/about/pangolin-vs-reverse-proxy-vs-vpn.mdx
+++ b/about/pangolin-vs-reverse-proxy-vs-vpn.mdx
@@ -4,6 +4,12 @@ icon: "book"
 description: "What are the similarities and differences between Pangolin and traditional reverse proxies and VPNs?"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin combines the capabilities of both a reverse proxy and a VPN into a single platform. It provides reverse proxy functionality through public resources and VPN functionality through private resources, all with zero-trust access control and distributed architecture.
 
 ## What Each Solution Provides
diff --git a/additional-resources/changelog.mdx b/additional-resources/changelog.mdx
index 8526c95..fa6cbdf 100644
--- a/additional-resources/changelog.mdx
+++ b/additional-resources/changelog.mdx
@@ -3,5 +3,11 @@ title: "Changelog"
 icon: "clipboard-list"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 To view the complete changelog, please visit our [GitHub Releases
 page](https://github.com/fosrl/pangolin/releases).
diff --git a/additional-resources/trust-center.mdx b/additional-resources/trust-center.mdx
index 5be1101..afa8651 100644
--- a/additional-resources/trust-center.mdx
+++ b/additional-resources/trust-center.mdx
@@ -3,6 +3,12 @@ title: "Trust Center"
 icon: "scale-balanced"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 - [Terms of Service](https://pangolin.net/terms-of-service.html)
 - [Privacy Policy](https://pangolin.net/privacy-policy.html)
 - [AGLPv3](https://www.gnu.org/licenses/gpl-3.0.en.html)
diff --git a/careers/join-us.mdx b/careers/join-us.mdx
index 8eaaf98..04f07b7 100644
--- a/careers/join-us.mdx
+++ b/careers/join-us.mdx
@@ -2,6 +2,12 @@
 title: "Join Us!"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 We are looking for talented engineers to join our team and help build secure remote access. If you're passionate about open-source software, networking, and security, we'd love to hear from you.
 
 ## About Pangolin
diff --git a/careers/software-engineer-full-stack.mdx b/careers/software-engineer-full-stack.mdx
index 4f3ec69..f1d1417 100644
--- a/careers/software-engineer-full-stack.mdx
+++ b/careers/software-engineer-full-stack.mdx
@@ -2,6 +2,12 @@
 title: "Software Engineer - Full Stack"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 - Location: `San Francisco`
 - Salary: `$125k - $185k + 0.5% - 1.5% equity`
 - Years of experience: `3+`
diff --git a/careers/software-engineer-go.mdx b/careers/software-engineer-go.mdx
index eb060fc..159c9aa 100644
--- a/careers/software-engineer-go.mdx
+++ b/careers/software-engineer-go.mdx
@@ -2,6 +2,12 @@
 title: "Software Engineer - Go + Network"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 - Location: `San Francisco`
 - Salary: `$125k - $185k + 0.5% - 1.5% equity`
 - Years of experience: `3+`
diff --git a/changelog.mdx b/changelog.mdx
index 2bd23a5..c95409f 100644
--- a/changelog.mdx
+++ b/changelog.mdx
@@ -3,6 +3,12 @@ title: "Changelog"
 description: "Updates and announcements"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Update label="March 2025" description="v0.0.10">
   Added a new Wintergreen flavor.
 
diff --git a/development/contributing.mdx b/development/contributing.mdx
index 318046f..08bfbc6 100644
--- a/development/contributing.mdx
+++ b/development/contributing.mdx
@@ -3,6 +3,12 @@ title: "Contribution Guide"
 description: "Set up your local development environment for contributing to Pangolin"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 This guide describes how to set up your local development environment for contributing to Pangolin. We recommend using Docker Compose for the most consistent development experience across different environments.
 
 ## Prerequisites
diff --git a/development/feature-requests-and-bug-reports.mdx b/development/feature-requests-and-bug-reports.mdx
index b4bb058..c3f4b87 100644
--- a/development/feature-requests-and-bug-reports.mdx
+++ b/development/feature-requests-and-bug-reports.mdx
@@ -3,6 +3,12 @@ title: "Feature Requests & Bug Reports"
 description: "How to submit feature requests and report bugs for Pangolin"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 We welcome contributions from the community to help improve Pangolin. To ensure your feedback is properly tracked and prioritized, use the repository that matches the component where your issue or request belongs.
 
 ## Pick the Right Repository
diff --git a/development/system-architecture.mdx b/development/system-architecture.mdx
index a1b6ca0..9e7ced0 100644
--- a/development/system-architecture.mdx
+++ b/development/system-architecture.mdx
@@ -3,6 +3,12 @@
 "description": "Learn how the components of the system interact to form Pangolin"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ### Pangolin (Control Plane)
 
 Pangolin is the main control center that orchestrates the entire system:
diff --git a/index.mdx b/index.mdx
index a11a91f..c5f15b7 100644
--- a/index.mdx
+++ b/index.mdx
@@ -2,6 +2,12 @@
 title: "Introduction to Pangolin"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin is an open-source, identity-based remote access platform built on WireGuard that enables secure, seamless connectivity to private and public resources.
 
 <Frame caption="Screenshot of resources page from the Pangolin Dashboard.">
diff --git a/manage/access-control/approvals.mdx b/manage/access-control/approvals.mdx
index b133d30..62cb70b 100644
--- a/manage/access-control/approvals.mdx
+++ b/manage/access-control/approvals.mdx
@@ -3,6 +3,12 @@ title: "Device Approvals"
 description: "Only allow trusted devices to connect to an organization"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 	Only available in Pangolin Cloud and [Enterprise Edition](/self-host/enterprise-edition).
 </Note>
diff --git a/manage/access-control/change-password.mdx b/manage/access-control/change-password.mdx
index 759e34f..5f81f0d 100644
--- a/manage/access-control/change-password.mdx
+++ b/manage/access-control/change-password.mdx
@@ -3,6 +3,12 @@ title: "Change Password"
 description: "Change or reset your Pangolin account password"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ### Change Password
 
 If you're already logged in, you can change your password by clicking your profile menu (top right) and selecting Change Password. You will be required to confirm your old password and enter a new password.
diff --git a/manage/access-control/create-user.mdx b/manage/access-control/create-user.mdx
index e157413..2c31442 100644
--- a/manage/access-control/create-user.mdx
+++ b/manage/access-control/create-user.mdx
@@ -3,6 +3,12 @@ title: "Create User"
 description: "Add internal or external users to your organization"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Users can be added to organizations. When a user is added to Pangolin, there is a global user object and an organization‑specific user object that links that user to the organization. This allows a user to exist in one or more organizations.
 
 <Tip>
diff --git a/manage/access-control/forwarded-headers.mdx b/manage/access-control/forwarded-headers.mdx
index 7e2d695..f879794 100644
--- a/manage/access-control/forwarded-headers.mdx
+++ b/manage/access-control/forwarded-headers.mdx
@@ -3,6 +3,12 @@ title: "Forwarded Headers"
 description: "Learn how Pangolin forwards user identity information to your backend applications through HTTP headers"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin can forward user identity information to your backend applications through custom HTTP headers. This allows your applications to receive user details directly from the request headers, enabling integration with Pangolin's authentication system.
 
 <Info>
diff --git a/manage/access-control/login-page.mdx b/manage/access-control/login-page.mdx
index f63da70..5e2995a 100644
--- a/manage/access-control/login-page.mdx
+++ b/manage/access-control/login-page.mdx
@@ -3,6 +3,12 @@ title: "Custom Login Page"
 description: "Configure a custom authentication page URL for your organization"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 Custom auth pages are only available in Pangolin Cloud.
 </Note>
diff --git a/manage/access-control/mfa.mdx b/manage/access-control/mfa.mdx
index fcb11b0..d834aa7 100644
--- a/manage/access-control/mfa.mdx
+++ b/manage/access-control/mfa.mdx
@@ -3,6 +3,12 @@ title: "Multi-Factor Authentication"
 description: "Enable and manage two-factor authentication and enforcement for your organization"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin supports two‑factor authentication (2FA) for Pangolin user accounts.
 
 ### Enable or Disable 2FA
diff --git a/manage/access-control/password-rotation.mdx b/manage/access-control/password-rotation.mdx
index ce68c9d..df9c74e 100644
--- a/manage/access-control/password-rotation.mdx
+++ b/manage/access-control/password-rotation.mdx
@@ -3,6 +3,12 @@ title: "Password Rotation"
 description: "Configure password expiration and rotation requirements for your organization"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 By default, Pangolin does not require passwords to be rotated on a regular basis. However, password rotation can be required on a per‑organization basis.
 
 ### Configuration
diff --git a/manage/access-control/rules.mdx b/manage/access-control/rules.mdx
index 3162f0d..76dc9ef 100644
--- a/manage/access-control/rules.mdx
+++ b/manage/access-control/rules.mdx
@@ -3,6 +3,12 @@ title: "Rules"
 description: "Configure rules to allow or deny access to resources without authentication"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Rules allow you to either "allow" and bypass the Pangolin auth system (no pin, login, password), or "deny" and fully reject the request. After you create a resource you can select the "Rules" tab on the sidebar and enable rules.
 
 <CardGroup cols={3}>
diff --git a/manage/access-control/security-keys.mdx b/manage/access-control/security-keys.mdx
index 42d12c7..173b84d 100644
--- a/manage/access-control/security-keys.mdx
+++ b/manage/access-control/security-keys.mdx
@@ -3,6 +3,12 @@ title: "Security Keys"
 description: "Use security keys for passwordless login to your Pangolin account"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 You can log in with security keys, also known as passwordless login. On the login page, there is an option below the login button to Log in with security key.
 
 ### Add a Security Key
diff --git a/manage/access-control/session-length.mdx b/manage/access-control/session-length.mdx
index cb0a30b..eca4ee5 100644
--- a/manage/access-control/session-length.mdx
+++ b/manage/access-control/session-length.mdx
@@ -3,6 +3,12 @@ title: "Session Length"
 description: "Configure maximum session length and expiration policies for your organization"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 By default, Pangolin keeps extending a session indefinitely if a user is actively using it. If a user is not actively using the session, it will expire after 30 days.
 
 However, you can require users to log in at regular intervals by enforcing maximum session lengths on a per‑organization basis.
diff --git a/manage/analytics/access.mdx b/manage/analytics/access.mdx
index e8a1df7..50ed60a 100644
--- a/manage/analytics/access.mdx
+++ b/manage/analytics/access.mdx
@@ -3,6 +3,12 @@ title: "Access Logs"
 description: "Access logs are a record of each access attempt to a Pangolin resource"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Access logs provide detailed information about each access attempt made to your Pangolin resources. These logs help you monitor and analyze user activity each time they attempt to authenticate.
 
 <Note>
diff --git a/manage/analytics/action.mdx b/manage/analytics/action.mdx
index ecb5a89..266c206 100644
--- a/manage/analytics/action.mdx
+++ b/manage/analytics/action.mdx
@@ -3,6 +3,12 @@ title: "Action Logs"
 description: "Action logs are a record of each event taken by users in the Pangolin system"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Action logs provide an audit trail of administrative actions and configuration changes made within your Pangolin organization. These logs help you track who made what changes and when.
 
 <Note>
diff --git a/manage/analytics/request.mdx b/manage/analytics/request.mdx
index 1b0f2a1..6e8bf32 100644
--- a/manage/analytics/request.mdx
+++ b/manage/analytics/request.mdx
@@ -3,6 +3,12 @@ title: "Request Logs"
 description: "Request logs are a record of each HTTP request to a resource"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Request logs provide detailed information about every HTTP request made to your Pangolin resources. These logs capture both successful and denied requests along with comprehensive request metadata.
 
 ## What are Request Logs?
diff --git a/manage/asnblocking.mdx b/manage/asnblocking.mdx
index e9d8466..346f8db 100644
--- a/manage/asnblocking.mdx
+++ b/manage/asnblocking.mdx
@@ -3,6 +3,12 @@ title: "ASN Blocking"
 description: "Configure ASN blocking to restrict access based on Autonomous System Numbers"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 ASN blocking is available in Pangolin community! Protect your resources by blocking or allowing specific networks and service providers.
 </Note>
diff --git a/manage/blueprints.mdx b/manage/blueprints.mdx
index 9ad5adf..c33fd80 100644
--- a/manage/blueprints.mdx
+++ b/manage/blueprints.mdx
@@ -4,6 +4,12 @@ icon: "file-code"
 description: "Pangolin Blueprints are declarative configurations that allow you to define your resources and their settings in a structured format"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Blueprints provide a way to define your Pangolin resources and their configurations in a structured, declarative format. This allows for easier management, version control, and automation of your resource setups.
 
 <iframe
diff --git a/manage/branding.mdx b/manage/branding.mdx
index b083811..a658eee 100644
--- a/manage/branding.mdx
+++ b/manage/branding.mdx
@@ -4,6 +4,12 @@ icon: "brush"
 description: "Learn how to customize the look your Pangolin dashboard and login pages with custom branding"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 Branding is only available in [Enterprise Edition](/self-host/enterprise-edition).
 </Note>
diff --git a/manage/clients/archiving-blocking.mdx b/manage/clients/archiving-blocking.mdx
index bbbee8f..6409820 100644
--- a/manage/clients/archiving-blocking.mdx
+++ b/manage/clients/archiving-blocking.mdx
@@ -3,6 +3,12 @@ title: "Archiving & Blocking"
 description: "Manage clients and block unwanted connections"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Blocking Devices
 
 To block a device that has been compromised or lost:
diff --git a/manage/clients/configure-client.mdx b/manage/clients/configure-client.mdx
index b3daa8a..c52ba1d 100644
--- a/manage/clients/configure-client.mdx
+++ b/manage/clients/configure-client.mdx
@@ -3,6 +3,12 @@ title: "Configure Clients"
 description: "Configure Olm for connecting to Pangolin clients"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## GUI Clients (Mac, Windows, Android, iOS/iPadOS)
 
 Each respective client has a preferences window with all currently available configuration parameters. In your desktop client, click the menu bar or system tray icon, select "More" in the menu, and click "Preferences". In the mobile apps, navigate to the "Settings" screen.
diff --git a/manage/clients/credentials.mdx b/manage/clients/credentials.mdx
index 27daab8..66cb217 100644
--- a/manage/clients/credentials.mdx
+++ b/manage/clients/credentials.mdx
@@ -3,6 +3,12 @@ title: "Client Credentials"
 description: "Understanding how client credentials work and how they can be rotated & regenerated"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Understanding Credentials
 
 Every machine client is provisioned with a unique identifier (ID), secret, and endpoint. The client uses the combination of these three to establish a secure, encrypted connection to the server.
diff --git a/manage/clients/fingerprinting.mdx b/manage/clients/fingerprinting.mdx
index ba214ab..e9a70cd 100644
--- a/manage/clients/fingerprinting.mdx
+++ b/manage/clients/fingerprinting.mdx
@@ -4,6 +4,12 @@ description:
   'A summary of device information that is collected during the connection'
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Device Fingerprinting
 
 Pangolin clients collect device fingerprinting information and can perform
diff --git a/manage/clients/install-client.mdx b/manage/clients/install-client.mdx
index c6173f9..c84e0ea 100644
--- a/manage/clients/install-client.mdx
+++ b/manage/clients/install-client.mdx
@@ -3,6 +3,12 @@ title: "Install Clients"
 description: "Install native clients for Mac, Windows, and Linux"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Windows
 
 - [Pangolin for Windows Installer](https://pangolin.net/downloads/windows) - This is the official page to download the latest installer file for Windows.
diff --git a/manage/clients/understanding-clients.mdx b/manage/clients/understanding-clients.mdx
index 66aaa1f..031f022 100644
--- a/manage/clients/understanding-clients.mdx
+++ b/manage/clients/understanding-clients.mdx
@@ -3,6 +3,12 @@ title: "Understanding Clients"
 description: "Create a client to connect to your Pangolin network from a remote computer"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 A client is a way to access resources on sites remotely and privately via a virtual private network. Clients are used with private resources to faciliate zero-trust network access.
 
 By default a client does not have access to any hosts on the local network of the site. Admins must explicitly define resources on the site and give specific users and roles access to the resources.
diff --git a/manage/clients/update-client.mdx b/manage/clients/update-client.mdx
index f1eb3c9..1f56bcf 100644
--- a/manage/clients/update-client.mdx
+++ b/manage/clients/update-client.mdx
@@ -3,6 +3,12 @@ title: "Update Clients"
 description: "Update your installed client to the latest version"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Mac and Windows
 
 ### Automatic Updates (Recommended)
diff --git a/manage/domains.mdx b/manage/domains.mdx
index 2c203cc..3ba10bf 100644
--- a/manage/domains.mdx
+++ b/manage/domains.mdx
@@ -4,6 +4,12 @@ icon: "globe"
 description: "Learn how to configure domains for your Pangolin resources and understand the different domain types available"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Domains allow you to access your Pangolin resources through custom URLs. Pangolin supports different domain types depending on your deployment model and requirements.
 
 ## Getting Started
diff --git a/manage/geoblocking.mdx b/manage/geoblocking.mdx
index 7f85339..81ae48d 100644
--- a/manage/geoblocking.mdx
+++ b/manage/geoblocking.mdx
@@ -3,6 +3,12 @@ title: "Geo-blocking"
 description: "Configure geo blocking to restrict access based on geographic location"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 Geoblocking is available in Pangolin community! Make sure to follow this guide for how to enable: [Enabling Geo Blocking](/self-host/advanced/enable-geoblocking)
 </Note>
diff --git a/manage/identity-providers/add-an-idp.mdx b/manage/identity-providers/add-an-idp.mdx
index 6ac3f6d..8c78a44 100644
--- a/manage/identity-providers/add-an-idp.mdx
+++ b/manage/identity-providers/add-an-idp.mdx
@@ -3,6 +3,12 @@ title: "Add Identity Providers"
 description: "Configure external identity providers for user authentication to resources and the organization"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Identity providers allow your users to log into Pangolin and Pangolin resources using their existing accounts from external identity systems like Google, Microsoft Azure, or Okta. Instead of creating separate Pangolin accounts, users can authenticate with their familiar work or personal credentials.
 
 Here is an example using Microsoft Azure Entra ID as SSO for Pangolin:
diff --git a/manage/identity-providers/auto-provisioning.mdx b/manage/identity-providers/auto-provisioning.mdx
index 46b0d6e..d572f72 100644
--- a/manage/identity-providers/auto-provisioning.mdx
+++ b/manage/identity-providers/auto-provisioning.mdx
@@ -3,6 +3,12 @@ title: "Auto Provisioning"
 description: "Automatically create and manage user accounts from external identity providers"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Auto provisioning is a feature that allows you to automatically create and manage user accounts in Pangolin when they log in using an external identity provider rather than pre-provisioning a user with a role. This is useful for organizations that want to streamline the onboarding process for new users and ensure that their user accounts are always up-to-date.
 
 You will be able to programmatically decide the roles and organizations for new users based on the information provided by the identity provider.
diff --git a/manage/identity-providers/azure.mdx b/manage/identity-providers/azure.mdx
index eece7b3..0d4c613 100644
--- a/manage/identity-providers/azure.mdx
+++ b/manage/identity-providers/azure.mdx
@@ -3,6 +3,12 @@ title: "Azure Entra ID"
 description: "Configure Azure Entra ID Single Sign-On"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 Azure SSO is only available on Pangolin Cloud and [Enterprise Edition](/self-host/enterprise-edition) deployments. In [Enterprise Edition](/self-host/enterprise-edition), you must set `app.identity_provider_mode: "org"` in your [private config file](/self-host/advanced/private-config-file) `privateConfig.yml`.
 </Note>
diff --git a/manage/identity-providers/google.mdx b/manage/identity-providers/google.mdx
index 0ae40d1..feb135a 100644
--- a/manage/identity-providers/google.mdx
+++ b/manage/identity-providers/google.mdx
@@ -3,6 +3,12 @@ title: "Google"
 description: "Configure Google Single Sign-On"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 Google SSO is only available on Pangolin Cloud and [Enterprise Edition](/self-host/enterprise-edition) deployments. In [Enterprise Edition](/self-host/enterprise-edition), you must set `app.identity_provider_mode: "org"` in your [private config file](/self-host/advanced/private-config-file#param-use-org-only-idp) `privateConfig.yml`.
 </Note>
diff --git a/manage/identity-providers/openid-connect.mdx b/manage/identity-providers/openid-connect.mdx
index af48404..aee9318 100644
--- a/manage/identity-providers/openid-connect.mdx
+++ b/manage/identity-providers/openid-connect.mdx
@@ -3,6 +3,12 @@ title: "OAuth2/OIDC"
 description: "Configure OpenID Connect identity provider for external authentication"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 This identity provider follows the OpenID Connect protocol. This means that it can be used to connect to any external identity provider that supports the OpenID Connect protocol such as Authentik, Keycloak, Okta, etc.
 
 ## Creating a Generic OAuth2/OIDC IdP in Pangolin
diff --git a/manage/identity-providers/pocket-id.mdx b/manage/identity-providers/pocket-id.mdx
index 27515a0..c79e63b 100644
--- a/manage/identity-providers/pocket-id.mdx
+++ b/manage/identity-providers/pocket-id.mdx
@@ -3,6 +3,12 @@ title: "Pocket ID"
 description: "Configure Pocket ID Single Sign-On using OpenID Connect"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 The following steps will integrate Pocket ID with Pangolin SSO using OpenID Connect (OIDC).
 
 ## Prerequisites
diff --git a/manage/identity-providers/zitadel.mdx b/manage/identity-providers/zitadel.mdx
index 3a2ebd4..7afd142 100644
--- a/manage/identity-providers/zitadel.mdx
+++ b/manage/identity-providers/zitadel.mdx
@@ -3,6 +3,12 @@ title: "Zitadel"
 description: "Configure Zitadel Single Sign-On using OpenID Connect"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 The following steps will integrate Zitadel with Pangolin SSO using OpenID Connect (OIDC).
 
 ## Prerequisites
diff --git a/manage/integration-api.mdx b/manage/integration-api.mdx
index 7f506c0..1baf62a 100644
--- a/manage/integration-api.mdx
+++ b/manage/integration-api.mdx
@@ -4,6 +4,12 @@ icon: "cube"
 description: "Learn how to use Pangolin's REST API to automate and script operations with fine-grained permissions"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Warning>
 Pangolin is in heavy development. The REST API routes and behavior may include breaking changes between updates. We will do our best to document large changes.
 </Warning>
diff --git a/manage/integration-api/using-the-integration-api.mdx b/manage/integration-api/using-the-integration-api.mdx
index 463f70d..b42f292 100644
--- a/manage/integration-api/using-the-integration-api.mdx
+++ b/manage/integration-api/using-the-integration-api.mdx
@@ -3,6 +3,12 @@ title: "Integration API"
 description: "Learn how to use Pangolin's REST API to automate and script operations with fine-grained permissions"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 The API is REST-based and supports many operations available through the web interface. Authentication uses Bearer tokens, and you can create multiple API keys with specific permissions for different use cases.
 
 <Info>
diff --git a/manage/organizations/org-id.mdx b/manage/organizations/org-id.mdx
index 989a796..3074bf2 100644
--- a/manage/organizations/org-id.mdx
+++ b/manage/organizations/org-id.mdx
@@ -3,6 +3,12 @@ title: "Organization ID"
 description: "Understand organization IDs and how to locate yours in the dashboard"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin is multi-tenant. All sites, resources, clients, and other items belong to an organization, and a server can host more than one organization.
 
 Each organization has a unique ID that Pangolin generates when you create the organization. You cannot change the ID after creation, and it is separate from the display name.
diff --git a/manage/remote-node/config-file.mdx b/manage/remote-node/config-file.mdx
index e455481..f2e634f 100644
--- a/manage/remote-node/config-file.mdx
+++ b/manage/remote-node/config-file.mdx
@@ -3,6 +3,12 @@ title: "Configuration File"
 description: "Configure your remote node using the config.yml file"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 The `config.yml` file includes basic config variable for your remote node. This file is mounted at `config/config.yml` in your Docker container.
 
 Minimal configuration file:
diff --git a/manage/remote-node/quick-install-remote.mdx b/manage/remote-node/quick-install-remote.mdx
index d779e3a..a93d9ef 100644
--- a/manage/remote-node/quick-install-remote.mdx
+++ b/manage/remote-node/quick-install-remote.mdx
@@ -3,6 +3,12 @@ title: "Quick Install Guide"
 description: "Deploy your own remote Pangolin node in under 10 minutes with our automated installer"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <iframe
   className="w-full aspect-video rounded-xl"
   src="https://www.youtube.com/embed/iPdK8M0cb9s"
diff --git a/manage/remote-node/understanding-nodes.mdx b/manage/remote-node/understanding-nodes.mdx
index 307fa9f..cbe758a 100644
--- a/manage/remote-node/understanding-nodes.mdx
+++ b/manage/remote-node/understanding-nodes.mdx
@@ -3,6 +3,12 @@ title: "Remote Nodes"
 description: "Control your own Pangolin node with cloud management"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 	Remote Nodes are available in Pangolin Cloud and self-hosted [Enterprise Edition](/self-host/enterprise-edition).
 </Note>
diff --git a/manage/resources/private/alias.mdx b/manage/resources/private/alias.mdx
index e0bd7b8..749fa19 100644
--- a/manage/resources/private/alias.mdx
+++ b/manage/resources/private/alias.mdx
@@ -3,6 +3,12 @@ title: "Aliases"
 description: "Set a friendly alias hostname that resolves to a host"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Aliases provide a secondary, user-friendly address for any of your Resources, allowing users to access the Resource using this alternate name in addition to the original address.
 
 For instance, a router with the address `10.0.0.1` could be assigned the alias `router.internal`, and users could connect using either. Aliases are accessible to anyone who has access to the Resource, and they are exclusively accessible when connected with a Pangolin client, meaning they function without requiring any external DNS record setup. Furthermore, aliases are protocol agnostic, which means they will work with any network protocol, essentially acting as a pseudo-A record for an address that is only functional within the Pangolin environment.
diff --git a/manage/resources/private/authentication.mdx b/manage/resources/private/authentication.mdx
index aa0b496..1132cb2 100644
--- a/manage/resources/private/authentication.mdx
+++ b/manage/resources/private/authentication.mdx
@@ -3,6 +3,12 @@ title: "Authentication"
 description: "Only allow access to Resources to specific users, roles, and machines"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 When a client connects into an organization they will **NOT** have access to any Resources by default. Access must be explicitly granted to users, roles, or machines for a WireGuard tunnel to be established to the site hosting the Resource. The Client will show no peers unless access is granted.
 
 Access can be granted in several ways:
diff --git a/manage/resources/private/destinations.mdx b/manage/resources/private/destinations.mdx
index 4c87b69..c6f8052 100644
--- a/manage/resources/private/destinations.mdx
+++ b/manage/resources/private/destinations.mdx
@@ -3,6 +3,12 @@ title: "Destinations"
 description: "Understand connection options to the remote network"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 A Resource's **destination** can be defined in several ways:
 
 * **Fully Qualified Domain Name (FQDN):** For example, `host.autoco.internal`.
diff --git a/manage/resources/public/authentication.mdx b/manage/resources/public/authentication.mdx
index dc5af46..7c1bc5d 100644
--- a/manage/resources/public/authentication.mdx
+++ b/manage/resources/public/authentication.mdx
@@ -3,6 +3,12 @@ title: "Authentication"
 description: "Create identity and context aware rules to allow access"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Though public resources are public and accessible to via a web browser, admins can create rules to enable a layer of authenticated protection in front of public resources. By default, all public resources have Pangolin auth (Platform SSO) enabled, but a number of other authentication methods are available.
 
 When an unauthenticated user visits a resource in their web browser, they will be redirected to a Pangolin-controlled authentication page where they must complete authentication.
diff --git a/manage/resources/public/healthchecks-failover.mdx b/manage/resources/public/healthchecks-failover.mdx
index 2da4191..b71afb4 100644
--- a/manage/resources/public/healthchecks-failover.mdx
+++ b/manage/resources/public/healthchecks-failover.mdx
@@ -3,6 +3,12 @@ title: "Health Checks"
 description: "Configure automated health monitoring and failover for resources"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin provides automated health checking for targets to ensure traffic is only routed to healthy services. Health checks are essential for building highly available services, as they automatically remove unhealthy targets from traffic routing and load balancing.
 
 ## How Health Checks Work
diff --git a/manage/resources/public/maintenance.mdx b/manage/resources/public/maintenance.mdx
index 7f71ceb..f7ec422 100644
--- a/manage/resources/public/maintenance.mdx
+++ b/manage/resources/public/maintenance.mdx
@@ -3,6 +3,12 @@ title: "Maintenance Page"
 description: "Show a maintenance page to users when a resources is down for maintenance or targets are unhealthy"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 Maintenance pages are only available in [Enterprise Edition](/self-host/enterprise-edition).
 </Note>
diff --git a/manage/resources/public/raw-resources.mdx b/manage/resources/public/raw-resources.mdx
index fe24319..52f9337 100644
--- a/manage/resources/public/raw-resources.mdx
+++ b/manage/resources/public/raw-resources.mdx
@@ -3,6 +3,12 @@ title: "TCP & UDP"
 description: "Configure raw TCP and UDP traffic through Pangolin tunnels"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 This feature is only available in self-hosted Pangolin instances. If you're using Pangolin Cloud, you will need to deploy a remote node.
 </Note>
diff --git a/manage/resources/public/targets.mdx b/manage/resources/public/targets.mdx
index 5822b43..d9547cc 100644
--- a/manage/resources/public/targets.mdx
+++ b/manage/resources/public/targets.mdx
@@ -3,6 +3,12 @@ title: "Targets"
 description: "Configure destination endpoints for resource routing and load balancing"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 When you create a resource in Pangolin, you define different targets that specify where traffic should be routed within your network. Each target represents a specific destination that the resource can proxy to when handling incoming requests.
 
 ## How Targets Work
diff --git a/manage/resources/understanding-resources.mdx b/manage/resources/understanding-resources.mdx
index 3ff11e4..c6bb931 100644
--- a/manage/resources/understanding-resources.mdx
+++ b/manage/resources/understanding-resources.mdx
@@ -3,6 +3,12 @@ title: "Understanding Resources"
 description: "Resources are any network address you want to make available to users"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Resources represent the applications, hosts, or ranges you make available for remote access to users. Resources exist on the remote networks of your sites. Users only ever think about connecting to resources and not specific sites.
 
 By default, no resources are made available on sites. Admins must define resources with backend targets, and assign specific access policies before any users can gain access.
diff --git a/manage/sites/configure-site.mdx b/manage/sites/configure-site.mdx
index 2a413d8..93420a0 100644
--- a/manage/sites/configure-site.mdx
+++ b/manage/sites/configure-site.mdx
@@ -3,6 +3,12 @@ title: "Configure Sites"
 description: "Configure Newt for connecting to Pangolin sites"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Flags
 
 <ResponseField name="id" type="string" required>
diff --git a/manage/sites/credentials.mdx b/manage/sites/credentials.mdx
index 01e1f9e..6c1c482 100644
--- a/manage/sites/credentials.mdx
+++ b/manage/sites/credentials.mdx
@@ -3,6 +3,12 @@ title: "Site Credentials"
 description: "Understanding how site credentials work and how they can be rotated & regenerated"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Understanding Credentials
 
 Every site is provisioned with a unique identifier (ID), secret, and endpoint. The site uses the combination of these three to establish a secure, encrypted connection to the server.
diff --git a/manage/sites/install-kubernetes.mdx b/manage/sites/install-kubernetes.mdx
index f0fb719..1955242 100644
--- a/manage/sites/install-kubernetes.mdx
+++ b/manage/sites/install-kubernetes.mdx
@@ -1,7 +1,13 @@
 ---
 title: "Kubernetes"
 description: "How to deploy a Newt Site on Kubernetes"
----
+---
+
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
 
 This guide walks you through setting up Newt on Kubernetes using Helm.
 
diff --git a/manage/sites/install-site.mdx b/manage/sites/install-site.mdx
index af6be48..8083ec6 100644
--- a/manage/sites/install-site.mdx
+++ b/manage/sites/install-site.mdx
@@ -3,6 +3,12 @@ title: "Install Sites"
 description: "Install Newt as a binary or Docker container"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Newt can be installed as either a static binary executable or a Docker container. You must first create a site and copy the Newt config in Pangolin before running Newt.
 
 ## Binary Installation
diff --git a/manage/sites/understanding-sites.mdx b/manage/sites/understanding-sites.mdx
index 87d2942..a189647 100644
--- a/manage/sites/understanding-sites.mdx
+++ b/manage/sites/understanding-sites.mdx
@@ -3,6 +3,12 @@ title: "Understanding Sites"
 description: "Create a site to connect to a remote network and expose resources"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 A site is a connection to a remote network that allows Pangolin to provide access to resources, whether public or private, to users anywhere. Sites are the foundation for exposing resources because all resources exist on one or more sites. Newt is Pangolin's custom software connector that facilitates the connection and addresses the targets on the remote networks.
 
 ## The Basics
diff --git a/manage/sites/update-site.mdx b/manage/sites/update-site.mdx
index efbf04f..93ef010 100644
--- a/manage/sites/update-site.mdx
+++ b/manage/sites/update-site.mdx
@@ -3,6 +3,12 @@ title: "Update Sites"
 description: "Update Newt to the latest version"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 The update process depends on how you originally installed Newt.
 
 Find the latest version in the [GitHub releases](https://github.com/fosrl/newt/releases).
diff --git a/scripts/add-toc-cta-snippet.js b/scripts/add-toc-cta-snippet.js
new file mode 100644
index 0000000..02f0018
--- /dev/null
+++ b/scripts/add-toc-cta-snippet.js
@@ -0,0 +1,45 @@
+#!/usr/bin/env node
+/**
+ * One-off script: add PangolinCloudTocCta import and usage to every MDX file.
+ * Run from repo root: node scripts/add-toc-cta-snippet.js
+ */
+
+const fs = require("fs");
+const path = require("path");
+
+const BLOCK = `import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+`;
+
+function findMdxFiles(dir, list = []) {
+  const entries = fs.readdirSync(dir, { withFileTypes: true });
+  for (const e of entries) {
+    const full = path.join(dir, e.name);
+    if (e.isDirectory()) findMdxFiles(full, list);
+    else if (e.name.endsWith(".mdx")) list.push(full);
+  }
+  return list;
+}
+
+function addSnippet(filePath) {
+  let content = fs.readFileSync(filePath, "utf8");
+  if (content.includes("pangolin-cloud-toc-cta.mdx")) return false; // already added
+  const close = content.indexOf("\n---", 3);
+  if (close === -1) return false;
+  const insertAt = close + 4; // after "\n---"
+  content = content.slice(0, insertAt) + BLOCK + content.slice(insertAt);
+  fs.writeFileSync(filePath, content);
+  return true;
+}
+
+const root = path.resolve(__dirname, "..");
+const files = findMdxFiles(root).filter(
+  (f) => !f.includes("snippets" + path.sep)
+);
+let added = 0;
+for (const f of files) {
+  if (addSnippet(f)) added++;
+}
+console.log(`Added snippet to ${added} of ${files.length} MDX files.`);
diff --git a/scripts/pangolin-cloud-toc-cta.js b/scripts/pangolin-cloud-toc-cta.js
new file mode 100644
index 0000000..2bcbec9
--- /dev/null
+++ b/scripts/pangolin-cloud-toc-cta.js
@@ -0,0 +1,75 @@
+/**
+ * Shows the Pangolin Cloud CTA in the table of contents on every page.
+ * Moves the PangolinCloudTocCta snippet (MDX Card) into the TOC when present.
+ * Re-runs on SPA navigation; avoids duplicating when DOM re-renders (e.g. theme toggle).
+ */
+(function () {
+  const MAX_ATTEMPTS = 30;
+  const RETRY_MS = 150;
+  const DEBOUNCE_MS = 100;
+  const CTA_MARKER = "data-pangolin-toc-cta";
+
+  function moveSnippetToToc() {
+    const toc = document.getElementById("table-of-contents");
+    const source = document.getElementById("pangolin-toc-cta");
+    if (!toc || !source) return false;
+
+    if (toc.querySelector("[" + CTA_MARKER + "]")) {
+      const duplicate = source.firstElementChild;
+      if (duplicate) source.removeChild(duplicate);
+      return true;
+    }
+
+    const card = source.firstElementChild;
+    if (!card) return false;
+
+    source.removeChild(card);
+    card.setAttribute(CTA_MARKER, "true");
+    toc.appendChild(card);
+    return true;
+  }
+
+  function tryRun() {
+    moveSnippetToToc();
+  }
+
+  let debounceTimer = null;
+  function scheduleRun() {
+    if (debounceTimer) clearTimeout(debounceTimer);
+    debounceTimer = setTimeout(function () {
+      debounceTimer = null;
+      tryRun();
+    }, DEBOUNCE_MS);
+  }
+
+  function run() {
+    let attempts = 0;
+    const id = setInterval(function () {
+      attempts++;
+      if (moveSnippetToToc()) {
+        clearInterval(id);
+        observeForNavigation();
+        return;
+      }
+      if (attempts >= MAX_ATTEMPTS) {
+        clearInterval(id);
+        observeForNavigation();
+      }
+    }, RETRY_MS);
+  }
+
+  function observeForNavigation() {
+    const observer = new MutationObserver(function () {
+      if (document.getElementById("pangolin-toc-cta")) {
+        scheduleRun();
+      }
+    });
+    observer.observe(document.body, { childList: true, subtree: true });
+  }
+
+  if (document.readyState === "loading") {
+    document.addEventListener("DOMContentLoaded", run);
+  } else {
+    run();
+  }
+})();
diff --git a/self-host/advanced/cloudflare-proxy.mdx b/self-host/advanced/cloudflare-proxy.mdx
index 22ffc73..874b3b5 100644
--- a/self-host/advanced/cloudflare-proxy.mdx
+++ b/self-host/advanced/cloudflare-proxy.mdx
@@ -2,6 +2,12 @@
 title: "Cloudflare Proxy"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin works with Cloudflare proxy (orange cloud) enabled, but requires specific configuration:
 
 <Warning>
diff --git a/self-host/advanced/clustering.mdx b/self-host/advanced/clustering.mdx
index ea272f3..2791ae7 100644
--- a/self-host/advanced/clustering.mdx
+++ b/self-host/advanced/clustering.mdx
@@ -2,6 +2,12 @@
 title: "Clustering for High Availability"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 Clustering is only available in [Enterprise Edition](/self-host/enterprise-edition). [Please reach out to us to deploy](https://pangolin.net/talk-to-us).
 </Note>
diff --git a/self-host/advanced/config-file.mdx b/self-host/advanced/config-file.mdx
index 3f71267..0014cfe 100644
--- a/self-host/advanced/config-file.mdx
+++ b/self-host/advanced/config-file.mdx
@@ -3,6 +3,12 @@ title: "Configuration File"
 description: "Configure Pangolin using the config.yml file with detailed settings for all components"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 The `config.yml` file controls all aspects of your Pangolin deployment, including server settings, domain configuration, email setup, and security options. This file is mounted at `config/config.yml` in your Docker container.
 
 ## Setting up your `config.yml`
diff --git a/self-host/advanced/container-cli-tool.mdx b/self-host/advanced/container-cli-tool.mdx
index 0065ea8..22ef980 100644
--- a/self-host/advanced/container-cli-tool.mdx
+++ b/self-host/advanced/container-cli-tool.mdx
@@ -3,6 +3,12 @@ title: "Internal CLI (pangctl)"
 description: "Command-line tool for managing your Pangolin instance"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 The Pangolin container includes a CLI tool called `pangctl` that provides commands to help you manage your Pangolin instance.
 
 ## Accessing the CLI
diff --git a/self-host/advanced/database-options.mdx b/self-host/advanced/database-options.mdx
index 75db2e4..de5f71e 100644
--- a/self-host/advanced/database-options.mdx
+++ b/self-host/advanced/database-options.mdx
@@ -3,6 +3,12 @@ title: "Database Options"
 description: "Configure SQLite or PostgreSQL database for Pangolin"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin supports two database options: SQLite for simplicity and PostgreSQL for production deployments.
 
 <CardGroup cols={2}>
diff --git a/self-host/advanced/enable-asnblocking.mdx b/self-host/advanced/enable-asnblocking.mdx
index 62850c3..5a3ff77 100644
--- a/self-host/advanced/enable-asnblocking.mdx
+++ b/self-host/advanced/enable-asnblocking.mdx
@@ -3,6 +3,12 @@ title: "Enable ASN Blocking"
 description: "Configuration requirements to enable ASN blocking in Pangolin"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 To enable ASN blocking in Pangolin Community you must download and place the Maxmind ASN database into the `config/` directory and update the config file. This can be done for free.
 
 <Tip>
diff --git a/self-host/advanced/enable-geoblocking.mdx b/self-host/advanced/enable-geoblocking.mdx
index 87452e1..446bd08 100644
--- a/self-host/advanced/enable-geoblocking.mdx
+++ b/self-host/advanced/enable-geoblocking.mdx
@@ -3,6 +3,12 @@ title: "Enable Geo-blocking"
 description: "Configuration requirements to enable geoblocking in Pangolin"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 To enable geoblocking in Pangolin Community you must download and place the Maxmind geoip database into the `config/` directory and update the config file. This can be done for free.
 
 <Tip>
diff --git a/self-host/advanced/integration-api.mdx b/self-host/advanced/integration-api.mdx
index bc4b042..84d21be 100644
--- a/self-host/advanced/integration-api.mdx
+++ b/self-host/advanced/integration-api.mdx
@@ -3,6 +3,12 @@ title: "Enable Integration API"
 description: "Enable and configure the Integration API for external access"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 The Integration API provides programmatic access to Pangolin functionality. It includes OpenAPI documentation via Swagger UI.
 
 ## Enable Integration API
diff --git a/self-host/advanced/metrics.mdx b/self-host/advanced/metrics.mdx
index 3ca9d56..77cba0c 100644
--- a/self-host/advanced/metrics.mdx
+++ b/self-host/advanced/metrics.mdx
@@ -1,7 +1,13 @@
 ---
 title: "Metrics"
 description: "Enable and consume OpenTelemetry & vendor specific metrics"
----
+---
+
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
 
 We provide metrics in the **OpenTelemetry** (OTel) format and additionally support the following vendor backends:
 
diff --git a/self-host/advanced/postgresql.mdx b/self-host/advanced/postgresql.mdx
index 122121d..1352171 100644
--- a/self-host/advanced/postgresql.mdx
+++ b/self-host/advanced/postgresql.mdx
@@ -3,6 +3,12 @@ title: "Database Options"
 description: "Configure SQLite or PostgreSQL database for Pangolin"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Overview
 
 > Choose between SQLite (default) or PostgreSQL for your database
diff --git a/self-host/advanced/private-config-file.mdx b/self-host/advanced/private-config-file.mdx
index 0d44c8c..1d493e3 100644
--- a/self-host/advanced/private-config-file.mdx
+++ b/self-host/advanced/private-config-file.mdx
@@ -3,6 +3,12 @@ title: "Private Configuration File"
 description: "Configure advanced Pangolin settings using the privateConfig.yml file for enterprise features"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 The `privateConfig.yml` file provides advanced configuration options for enterprise deployments. This file is mounted at `config/privateConfig.yml` in your Docker container.
 
 <Note>
diff --git a/self-host/advanced/timezone.mdx b/self-host/advanced/timezone.mdx
index c5f54ef..4e9b24a 100644
--- a/self-host/advanced/timezone.mdx
+++ b/self-host/advanced/timezone.mdx
@@ -3,6 +3,12 @@ title: "Container Timezone"
 description: "Configure the timezone for Pangolin, Gerbil, and Traefik containers to match your local time."
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 By default, Docker containers report logs and timestamps in **UTC**. If you want the containers and their log output to use your local timezone, you need to set the timezone in both the container environment and mount the host timezone files.
 
 ## Updating your `docker-compose.yml`
diff --git a/self-host/advanced/wild-card-domains.mdx b/self-host/advanced/wild-card-domains.mdx
index b1825eb..6975e33 100644
--- a/self-host/advanced/wild-card-domains.mdx
+++ b/self-host/advanced/wild-card-domains.mdx
@@ -3,6 +3,12 @@ title: "Wildcard Domains"
 description: "Configure wildcard SSL certificates for automatic subdomain security with DNS-01 challenge"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Wildcard certificates allow you to secure unlimited subdomains with a single SSL certificate, eliminating the need to generate individual certificates for each subdomain. Pangolin uses Traefik's built-in Let's Encrypt integration to automatically manage these certificates.
 
 <Warning>
diff --git a/self-host/advanced/without-tunneling.mdx b/self-host/advanced/without-tunneling.mdx
index bda5393..245ae3c 100644
--- a/self-host/advanced/without-tunneling.mdx
+++ b/self-host/advanced/without-tunneling.mdx
@@ -3,6 +3,12 @@ title: "Without Tunneling"
 description: "Use Pangolin as a local reverse proxy without Gerbil tunneling"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Use Pangolin as a local reverse proxy and authentication manager
 
 You can use Pangolin without Gerbil and tunneling. In this configuration, Pangolin acts as a normal reverse proxy and authentication manager that can be deployed on your local network to provide access to resources.
diff --git a/self-host/choosing-a-vps.mdx b/self-host/choosing-a-vps.mdx
index f21ba4f..a67943e 100644
--- a/self-host/choosing-a-vps.mdx
+++ b/self-host/choosing-a-vps.mdx
@@ -3,6 +3,12 @@ title: "Choosing a VPS"
 description: "Compare hosting options and find the best VPS for your Pangolin deployment"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin generally requires minimal resources to run effectively. A basic VPS with **1 vCPU, 1GB RAM, and 8GB SSD** is sufficient for most deployments.
 
 <CardGroup cols={2}>
diff --git a/self-host/community-guides/crowdsec.mdx b/self-host/community-guides/crowdsec.mdx
index f68f209..aac1491 100644
--- a/self-host/community-guides/crowdsec.mdx
+++ b/self-host/community-guides/crowdsec.mdx
@@ -2,6 +2,12 @@
 title: "CrowdSec"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 This is a community guide and is not officially supported. If you have any issues, please reach out to the [author](https://github.com/Lokowitz).
 </Note>
diff --git a/self-host/community-guides/geoblock.mdx b/self-host/community-guides/geoblock.mdx
index 9ac5bb4..a96542b 100644
--- a/self-host/community-guides/geoblock.mdx
+++ b/self-host/community-guides/geoblock.mdx
@@ -2,6 +2,12 @@
 title: "GeoBlock"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 This is a community guide and is not officially supported. If you have any issues, please reach out to the [author](https://github.com/Lokowitz).
 </Note>
diff --git a/self-host/community-guides/geolite2automation.mdx b/self-host/community-guides/geolite2automation.mdx
index ebb8da1..9145f01 100644
--- a/self-host/community-guides/geolite2automation.mdx
+++ b/self-host/community-guides/geolite2automation.mdx
@@ -3,6 +3,12 @@ title: "GeoLite2 Automation"
 description: "A simple automation to download & update your GeoLite2 databases with geoipupdate"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 This is a community guide and is not officially supported. If you have any issues, please reach out to the [author](https://github.com/txwgnd).
 </Note>
diff --git a/self-host/community-guides/homeassistant.mdx b/self-host/community-guides/homeassistant.mdx
index d788fc5..8994bc9 100644
--- a/self-host/community-guides/homeassistant.mdx
+++ b/self-host/community-guides/homeassistant.mdx
@@ -2,6 +2,12 @@
 title: "Home Assistant Add-on"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 This is a community add-on and is not officially supported. If you have any issues, please reach out to the [author](https://github.com/Ferdinand99/home-assistant-newt-addon).
 </Note>
diff --git a/self-host/community-guides/metrics.mdx b/self-host/community-guides/metrics.mdx
index 6d1732a..0dd6e9a 100644
--- a/self-host/community-guides/metrics.mdx
+++ b/self-host/community-guides/metrics.mdx
@@ -2,6 +2,12 @@
 title: "Metrics"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 This is a community guide and is not officially supported. If you have any issues, please reach out to the [author](https://github.com/Lokowitz).
 </Note>
diff --git a/self-host/community-guides/middlewaremanager.mdx b/self-host/community-guides/middlewaremanager.mdx
index 2eab0f1..113f2ff 100644
--- a/self-host/community-guides/middlewaremanager.mdx
+++ b/self-host/community-guides/middlewaremanager.mdx
@@ -2,6 +2,12 @@
 title: "Middleware Manager"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>  
 This is a community guide and not officially supported. For issues, contributions, or bug reports, please use the [official GitHub repository](https://github.com/hhftechnology/middleware-manager).  
 </Note>  
diff --git a/self-host/community-guides/overview.mdx b/self-host/community-guides/overview.mdx
index 5b06363..9203db9 100644
--- a/self-host/community-guides/overview.mdx
+++ b/self-host/community-guides/overview.mdx
@@ -2,6 +2,12 @@
 title: "Overview"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 These are community written guides and are not officially supported. If you have any issues, please reach out to the authors or the community on [Discord](https://pangolin.net/discord) or [Github discussions](https://github.com/orgs/fosrl/discussions).
 </Note>
diff --git a/self-host/community-guides/remove-geoblock-plugin.mdx b/self-host/community-guides/remove-geoblock-plugin.mdx
index ca29b0e..0be2f11 100644
--- a/self-host/community-guides/remove-geoblock-plugin.mdx
+++ b/self-host/community-guides/remove-geoblock-plugin.mdx
@@ -2,6 +2,12 @@
 title: "Remove GeoBlock Plugin"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>
 This is a community guide and is not officially supported. If you have any issues, please reach out to the community on [Discord](https://pangolin.net/discord) or [Github discussions](https://github.com/orgs/fosrl/discussions).
 </Note>
diff --git a/self-host/community-guides/traefiklogsdashboard.mdx b/self-host/community-guides/traefiklogsdashboard.mdx
index 17cd212..a12504d 100644
--- a/self-host/community-guides/traefiklogsdashboard.mdx
+++ b/self-host/community-guides/traefiklogsdashboard.mdx
@@ -2,6 +2,12 @@
 title: "Traefik Log Dashboard (v2 – Agent Architecture)"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Note>  
 This is a community guide and is not officially supported. For issues or advanced configuration, please visit the [official repository](https://github.com/hhftechnology/traefik-log-dashboard).  
 </Note>  
diff --git a/self-host/dns-and-networking.mdx b/self-host/dns-and-networking.mdx
index 3e36569..a5eaf25 100644
--- a/self-host/dns-and-networking.mdx
+++ b/self-host/dns-and-networking.mdx
@@ -3,6 +3,12 @@ title: "DNS & Networking"
 description: "Configure your domain, DNS records, and network settings for Pangolin deployment"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin requires proper DNS configuration and network setup to function correctly. This guide covers domain setup, DNS records, port configuration, and networking considerations.
 
 ## DNS Configuration
diff --git a/self-host/enterprise-edition.mdx b/self-host/enterprise-edition.mdx
index 54dc738..994eb4f 100644
--- a/self-host/enterprise-edition.mdx
+++ b/self-host/enterprise-edition.mdx
@@ -3,6 +3,12 @@ title: "Enterprise Edition"
 description: "Learn about Enterprise Edition features, licensing, and how to get started"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 When self-hosting Pangolin, you can choose to run the **Community Edition** or the **Enterprise Edition**. Both editions provide the same core functionality, but the Enterprise Edition unlocks additional features for qualifying users.
 
 ## Edition Comparison
diff --git a/self-host/how-to-update.mdx b/self-host/how-to-update.mdx
index af1eac5..2735f75 100644
--- a/self-host/how-to-update.mdx
+++ b/self-host/how-to-update.mdx
@@ -3,6 +3,12 @@ title: "How to Update"
 description: "Keep your Pangolin deployment up to date with the latest features and security patches"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Updating Pangolin is straightforward since it's a collection of Docker images. Simply pull the latest images and restart the stack. Migration scripts run automatically to update your database and configuration files when needed.
 
 ## Before You Update
diff --git a/self-host/manual/docker-compose.mdx b/self-host/manual/docker-compose.mdx
index 79d5363..b84edc2 100644
--- a/self-host/manual/docker-compose.mdx
+++ b/self-host/manual/docker-compose.mdx
@@ -3,6 +3,12 @@ title: "Docker Compose"
 description: "Deploy Pangolin manually using Docker Compose without the automated installer"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 This guide walks you through setting up Pangolin manually using Docker Compose without the automated installer. This approach gives you full control over the configuration and deployment process.
 
 This guide assumes you already have a Linux server with Docker and Docker Compose installed. If you don't, please refer to the [official Docker documentation](https://docs.docker.com/get-docker/) for installation instructions. You must also have root access to the server.
diff --git a/self-host/manual/manual-install.mdx b/self-host/manual/manual-install.mdx
index 3a4c0df..9a54a84 100644
--- a/self-host/manual/manual-install.mdx
+++ b/self-host/manual/manual-install.mdx
@@ -3,6 +3,12 @@ title: "Docker Compose"
 description: "Deploy managed Pangolin manually using Docker Compose without the automated installer"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <Tip>
 This guide is for managed self-hosted Pangolin. If you are looking for self-hosted Community Edition Pangolin please see this [Docker Compose](/self-host/manual/docker-compose) guide.
 </Tip>
diff --git a/self-host/manual/unraid.mdx b/self-host/manual/unraid.mdx
index 61e8b37..80aa11b 100644
--- a/self-host/manual/unraid.mdx
+++ b/self-host/manual/unraid.mdx
@@ -3,6 +3,12 @@ title: "Unraid Deployment"
 description: "Deploy Pangolin on Unraid for local reverse proxy and tunneling"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 ## Overview
 
 This guide explains how to use Pangolin and Traefik as a local reverse proxy without Gerbil and its tunneling features. The second (optional) part will expand on this and show how to enable tunneling by setting up Gerbil.
diff --git a/self-host/purchase-license-key.mdx b/self-host/purchase-license-key.mdx
index 3f477cc..ecdd6eb 100644
--- a/self-host/purchase-license-key.mdx
+++ b/self-host/purchase-license-key.mdx
@@ -3,6 +3,12 @@ title: "Purchase a License Key"
 description: "How to buy an Enterprise license key for Pangolin from the dashboard"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Buy an Enterprise license key directly from the Pangolin dashboard. You choose your tier, complete checkout, and get your key right away — in the dashboard and by email.
 
 ## How to buy a license key
diff --git a/self-host/quick-install.mdx b/self-host/quick-install.mdx
index c09dea3..3d63a45 100644
--- a/self-host/quick-install.mdx
+++ b/self-host/quick-install.mdx
@@ -4,6 +4,12 @@ description: "Deploy your own fully self-hosted instance of Pangolin Community E
 
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 <iframe
   className="w-full aspect-video rounded-xl"
   src="https://www.youtube.com/embed/0upWrqkJPy8?si=q0D-uR1IHuddaqeT"
diff --git a/self-host/supporter-program.mdx b/self-host/supporter-program.mdx
index dd2f3c2..547047c 100644
--- a/self-host/supporter-program.mdx
+++ b/self-host/supporter-program.mdx
@@ -3,6 +3,12 @@ title: "Supporter Program"
 description: "Support Pangolin development and remove UI elements with a supporter key"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin self-hosted will always be free and open source, but maintaining the project takes time and resources. The supporter program helps fund ongoing development — including bug fixes, new features, and community support.
 
 <Note>
diff --git a/self-host/telemetry.mdx b/self-host/telemetry.mdx
index 2720640..82c0df9 100644
--- a/self-host/telemetry.mdx
+++ b/self-host/telemetry.mdx
@@ -3,6 +3,12 @@ title: "Telemetry"
 description: "Understanding Pangolin's anonymous usage data collection"
 ---
 
+import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
+
+<PangolinCloudTocCta />
+
+
+
 Pangolin collects anonymous usage telemetry to help us understand how the software is used and guide future improvements and feature development.
 
 ## What We Collect
diff --git a/snippets/pangolin-cloud-toc-cta.mdx b/snippets/pangolin-cloud-toc-cta.mdx
new file mode 100644
index 0000000..9290ddd
--- /dev/null
+++ b/snippets/pangolin-cloud-toc-cta.mdx
@@ -0,0 +1,11 @@
+<div id="pangolin-toc-cta" className="pangolin-toc-cta-source">
+  <Card
+    title="Try free on Pangolin Cloud"
+    icon="cloud"
+    href="https://app.pangolin.net/auth/signup"
+    arrow="true"
+    cta="Sign up free"
+  >
+    Fastest way to get started with Pangolin using the hosted control plane. No credit card required.
+  </Card>
+</div>
diff --git a/style.css b/style.css
new file mode 100644
index 0000000..5455e23
--- /dev/null
+++ b/style.css
@@ -0,0 +1,9 @@
+/* Hide the Pangolin Cloud CTA source wrapper so it doesn't show in main content before the script moves it to the TOC */
+.pangolin-toc-cta-source {
+  display: none !important;
+}
+
+/* Space above the Pangolin Cloud CTA (below the table of contents links) */
+#table-of-contents > *:last-child {
+  margin-top: 1.25rem;
+}