Skip to main content
The Agent Control server provides centralized control management and evaluation services via REST API.

Features

  • Control management (CRUD)
  • Agent registration and management
  • Server-side evaluation with evaluator support
  • Observability and metrics
  • API key authentication
  • Prometheus metrics
  • PostgreSQL and SQLite support

Installation

Development (monorepo)

Production

Configuration

Create a .env file in the server/ directory:
If you use the repo-root docker-compose.yml, local development defaults are:
  • AGENT_CONTROL_API_KEYS=420c6b90714b45beaa992c3f05cf2baf
  • AGENT_CONTROL_ADMIN_API_KEYS=29af8554a1fe4311977b7ce360b20cc3
  • NEXT_PUBLIC_AGENT_CONTROL_API_KEY=29af8554a1fe4311977b7ce360b20cc3
Change these defaults before any shared or production deployment.

Authentication

API key authentication uses the X-API-Key header.

Auth Configuration

Access Levels

Key Rotation

  1. Add the new key to AGENT_CONTROL_API_KEYS
  2. Update clients to use the new key
  3. Remove the old key from AGENT_CONTROL_API_KEYS
  4. Redeploy the server

Example Usage

Disabling Authentication

For local development only:

API Endpoints

All protected endpoints require X-API-Key when authentication is enabled. Control-plane mutation endpoints require an admin API key.

System

Agent Management

Control Management

Control Associations

Evaluation

Observability

Development

Database Migrations

Testing

Code Quality

Make Commands

Production Deployment

Docker

Direct Installation

Source Code

View the complete server source code and implementation: Agent Control Server