Agents

An agent in AgenticGuard represents a distinct AI system or workflow that makes tool calls. Each agent has its own API key, proxy URL, and policy set.

Creating an agent

1. Go to Agents in the dashboard
2. Click New Agent
3. Enter a name (e.g. research-agent, github-bot)
4. Click Create

The API key and proxy URL are shown once in the success modal. Store them securely — the API key cannot be retrieved again.

Agent isolation

All data is scoped to your organization. Within an organization:

• Each agent has its own API key
• Each agent can have its own policy
• Audit log entries are tagged with agent_id
• Credentials are shared across agents (org-level)

API key security

• The plaintext API key is shown once at creation
• Only a SHA-256 hash is stored in the database
• Keys cannot be retrieved — only rotated (delete + create)
• Keys look like: ag_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Proxy URL

Each agent's proxy URL encodes its API key:

https://api.agentic-guard.com/proxy/{api_key}/

Keep this URL secret. Anyone with the proxy URL can make calls as that agent.

Log output mode

When creating an agent, you can set log_outputs to control how much response data is stored:

Mode	Behavior
full	Store the full response body
hash	Store a SHA-256 hash of the response
none	Do not store response data (default)

Deleting an agent

Deleting an agent revokes its API key immediately. All proxy URL calls with the old key will return 401.

Audit log entries for the deleted agent are retained.

Managing agents via API

# List agents
curl -H "Authorization: Bearer $JWT" \
  https://api.agentic-guard.com/agents

# Create agent
curl -X POST -H "Authorization: Bearer $JWT" \
  -H "Content-Type: application/json" \
  -d '{"name": "my-agent", "log_outputs": "none"}' \
  https://api.agentic-guard.com/agents

# Delete agent
curl -X DELETE -H "Authorization: Bearer $JWT" \
  https://api.agentic-guard.com/agents/{agent_id}